AI Governance Engineer
GitHub

Workload identity

By Updated

The attributable identity a workload such as an agent carries across every hop, under which its actions are logged and its access is revoked, typically a short-lived, attested credential such as an SVID 1. It differs from channel authentication, which secures a single hop, such as a client talking to an MCP server.

Developed in
ch. 23, Channel authentication is not agent identity
ch. 04, Layer 04: Runtime Controls & Observability
Chapters
ch. 03, Values & Principles · ch. 04, The Stack · ch. 05, Patterns · ch. 23, AI Agents
Contrast with
NHI · SVID
In the open reference
Runtime safeguards for frontier AI · Agent runtime control profile
Source
1 numbered reference, listed below

Where it is used

6 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

Workload identity: mentions per chapter18 mentions of the term across 6 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter03 Values & Principles: 2 mentions03 Values & Principles204 The Stack: 3 mentions04 The Stack305 Patterns: 1 mention05 Patterns107 Maturity Model: 1 mention07 Maturity Model108 Regulatory Map: 1 mention08 Regulatory Map123 AI Agents: 10 mentions23 AI Agents10No mentions in the other 17 chaptersSource: the Body of Knowledgev0.5.0
Workload identity: mentions per chapter18 mentions of the term across 6 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter00010203 Values & Principles: 2 mentions20304 The Stack: 3 mentions30405 Patterns: 1 mention1050607 Maturity Model: 1 mention10708 Regulatory Map: 1 mention1081011121314151617181920212223 AI Agents: 10 mentions1023Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of Workload identity per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now0No
03 Values & Principles2Yes
04 The Stack3Yes
05 Patterns1Yes
06 The Role0No
07 Maturity Model1No
08 Regulatory Map1No
10 Reading List0No
11 AI Defined0No
12 Governance Program0No
13 Risk Management0No
14 Development0No
15 Deployment0No
16 Fairness & XAI0No
17 Incidents0No
18 EU AI Act0No
19 Privacy & AI0No
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards0No
23 AI Agents10Yes

Patterns that use this term

2 pattern pages use the term, most mentions first.

Workload identity: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern02 Inventory04 Runtime ControlsWorkload identityRelated terms (5)CIMD · RelatedCIMDGuardian agent · RelatedGuardian agentMCP · RelatedMCPPrompt injection · RelatedPrompt injectionTransaction token (Txn-Token) · RelatedTransaction token (Txn-Token)Contrast with (2)NHI · ContrastNHISVID · ContrastSVIDPatterns using it (2)Agent Identity & Scoped Credentials, 4 mentions · Uses the termAgent Identity &Agent Registry, 1 mention · Uses the termAgent Registry
Workload identity: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern02 Inventory04 Runtime ControlsRelated terms (5)CIMD · RelatedCIMDGuardian agent · RelatedGuardian agentMCP · RelatedMCPPrompt injection · RelatedPrompt injectionTransaction token (Txn-Token) · RelatedTransaction token (Txn-Token)Contrast with (2)NHI · ContrastNHISVID · ContrastSVIDPatterns using it (2)Agent Identity & Scoped Credentials, 4 mentions · Uses the termAgent Identity &Agent Registry, 1 mention · Uses the termAgent RegistryWorkload identity
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of Workload identity
FamilyItemRelation
Related termsCIMDRelated
Related termsGuardian agentRelated
Related termsMCPRelated
Related termsPrompt injectionRelated
Related termsTransaction token (Txn-Token)Related
Contrast withNHIContrast
Contrast withSVIDContrast
Patterns using itAgent Identity & Scoped Credentials, 4 mentionsUses the term
Patterns using itAgent Registry, 1 mentionUses the term
  • CIMD

    Client ID Metadata Document: the mechanism by which an OAuth client identifies itself with a URL, used as its client ID, that points to its metadata document.

  • Guardian agent

    An AI agent whose job is to supervise, check or constrain other agents at runtime; Gartner predicts guardian-agent technologies will account for at least 10…

  • MCP

    Model Context Protocol: an open protocol for connecting AI applications to tools and data sources; its 2026 specification adds OAuth 2.1 resource-server…

  • Prompt injection

    An input that alters a model's behaviour or output in ways its designers did not intend.

  • Transaction token (Txn-Token)

    A short-lived, signed token, specified in an IETF OAuth working group draft, that carries user identity, workload identity and authorisation context through a…

Sources

  1. [1] SPIFFE overview (short-lived cryptographic identity documents called SVIDs, as X.509 certificates or JWTs; the Workload API issues and rotates them; SPIRE implementation). SPIFFE project. 2026. https://spiffe.io/docs/latest/spiffe-about/overview/ (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). Workload identity. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/workload-identity. CC BY 4.0

BibTeX

@misc{aige2026workloadidentity,
  author  = {Jorge García Aibar},
  title   = {{Workload identity}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/workload-identity}
}