Agent identity · Authority · Architecture
Let agents act.Every grant, explicit.
Field notes on durable Agent identity, delegated API access, and product trust boundaries.
Why your product needs an identity root
Authentication is only the front door. A product also needs one explicit boundary for users, applications, policy, APIs, and delegated agents.
An agent identity is not an API key
Durable agent identity, host credentials, and delegated API authority solve different problems. Treating them as one secret creates accidental power.
One deployment, one realm
Why Realmroot makes the deployment—not an organization row or application record—the identity isolation boundary.