Agent Identity: The Missing Primitive for Autonomous Commerce

For autonomous agents to transact at scale, the issuer and the merchant need a reliable way to verify that a request originated from a trusted agent acting for a known principal under a defined spend policy. The primitives required - scoped tokens, attestation, and delegated authority - are starting to converge into a coherent standard.

The rate-limiting step is not the cryptography; it is governance - defining what scopes mean, how revocation propagates, and how disputes resolve.