Post
Start With Identity
startwithidentity.com
did:plc:s3kc5f3xeoz3lokd44er5i3g
If your AI agent runs on your session, a prompt injection runs as you.
The fix is already in OAuth: token exchange (RFC 8693). The agent gets its own identity, and the token carries an "act" claim naming the agent alongside you. Short-lived, scoped to the task, visible in logs.
2026-10-23T14:31:05.449Z