Agent Identity Management System (AIMS)

IETF draft-klrc-aiagent-auth: agents as WIMSE/SPIFFE-identified workloads with short-lived posture-assessed credentials and OAuth token-exchange delegation chains — the LLM never holds credentials; complemented by OpenID AuthZEN drafts (AARP, COAZ) and MCP spec 2026-07-28's self-legislated OAuth rules — the agent-auth governance layer is plural and moving.