Agent Registry and Scoped Identity

Agent Registry and Scoped Identity An architecture diagram generated by Archify. Model Owner · renew or entry expires · Architecture component Model Owner renew or entry expires Deploy Pipeline · registers at deploy · Governance plane: register, scope, evaluate Deploy Pipeline registers at deploy Agent Registry · owner, scope, expiry · Governance plane: register, scope, evaluate Agent Registry owner, scope, expiry Workload Identity · scoped credential · Governance plane: register, scope, evaluate · SPIFFE/SPIRE Workload Identity scoped credential SPIFFE/SPIRE Agent · delegated authority · Runtime plane: agent acts under scoped identity Agent delegated authority APIs, Tools, Agents · channel auth (MCP) · Architecture component APIs, Tools, Agents channel auth (MCP) Policy Gate · deny unregistered · Governance plane: register, scope, evaluate Policy Gate deny unregistered Shadow-AI Reconcile · flag runtime drift · Governance plane: register, scope, evaluate Shadow-AI Reconcile flag runtime drift Evidence Log · signed, per identity · Runtime plane: agent acts under scoped identity Evidence Log signed, per identity Auditor · attributes actions · Architecture component Auditor attributes actions register at deploy issue scoped credential carry workload identity act, least privilege renew, 90-day expiry evaluate entry admit, deny unregistered log actions attribute reconcile vs running, flag drift Governance plane: register, scope, evaluate Runtime plane: agent acts under scoped identity Legend Backend Database Security External

Register before it runs

  • • The deploy pipeline registers every model, service and agent
  • • Each entry carries an owner, a scope and an expiry
  • • Unregistered artefacts are denied production access

Identity and scope

  • • Each agent carries a distinct workload identity
  • • Credentials are scoped to least privilege
  • • Channel authentication and workload identity stay separate

Attribution and lifecycle

  • • Actions are logged under the agent's own identity
  • • Entries expire and must be renewed or are deactivated
  • • Reconciliation flags drift against what is actually running