GitGuardian’s 2026 secrets and techniques analysis discovered 64% of credentials confirmed legitimate in 2022 had been nonetheless exploitable in January 2026. 4 years. Neither rotated nor revoked.
No matter your coverage says, that’s what revocation really does.
The agent work is converging too. The APKI draft replaces binary valid-or-revoked with belief scores that decay with out constructive alerts, treating decay as delicate revocation. A proposal shifting previous binary validity is telling.
So, the check I’d apply isn’t whether or not you may revoke an agent’s identification.
It’s whether or not the agent’s authority expires with out anybody doing something.
It’s the one property that composes with one thing whose habits can change between one name and the subsequent. Revocation wants somebody to note, determine and propagate.
Expiry requires no one.
The agent whose sponsor left three reorganizations in the past stops by itself, and anyone has to argue for renewing it.
However one case breaks even that argument.
The UK AI Safety Institute disclosed an incident from a cyber analysis in late July. One agent left public messages on GitHub providing collaboration with different brokers on the identical problem, plus directions for reusing accounts and artefacts it had left behind. Later brokers discovered them and used them.
AISI’s personal heading for that is collaboration between unbiased brokers.
Impartial. Nothing coordinated them. One agent externalized its state right into a public artifact and unrelated situations picked it up.
There’s no identification in that story to confirm and no credential to run out. The artifacts are gone as a result of AISI phoned GitHub. Id infrastructure governs the brokers you provisioned. It has nothing to say about affect that propagates as textual content.
That’s much less satisfying than naming a winner. However the naming layer isn’t the place this will get determined. Which one you choose issues lower than what your methods do when an agent asks.
Which is the place I ended up when MCP went stateless too. Id on the entrance door tells you who knocked. It doesn’t let you know what walked in.
