SPIFFE Verifiable Identity Document: a short-lived cryptographic identity document, either an X.509 certificate or a JWT, that proves a workload's SPIFFE ID and is issued and rotated through the SPIFFE Workload API, which SPIRE implements 1. A credential that expires in minutes need not be hunted down after an incident, only not reissued.
- Developed in
- ch. 23, Short-lived, attested credentials
- Chapters
- ch. 23, AI Agents
- Contrast with
- Workload identity
- Source
- 1 numbered reference, listed below
Where it is used
One chapter of the Body of Knowledge uses the term. Each link opens the first section that does.
- 23 · AI Agents Identity and short-lived credentials 3 mentions
Sources
- [1] SPIFFE overview (short-lived cryptographic identity documents called SVIDs, as X.509 certificates or JWTs; the Workload API issues and rotates them; SPIRE implementation). SPIFFE project. 2026. https://spiffe.io/docs/latest/spiffe-about/overview/ (verified: primary)
Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .