Non-Human Identity: Paper Series

A five-paper monthly series on non-human identity for AI agents in regulated European enterprises. Each paper is published as a LinkedIn long-form article on the second Tuesday of the month, with a full-length version hosted here.

Unifying thesis: AI agents in production require a distinct identity, authorization, communication, audit, and governance stack, not a relabeling of existing service-account, RBAC, and CMDB primitives.

Papers

  1. Agents Are Not Service Accounts, April 2026. Per-agent identity as the floor. Published April 21, 2026.
  2. Authorization for AI Agents, Beyond RBAC, coming May 2026.
  3. Agent-to-Agent Communication: MCP, A2A, and the PQC Question, coming June 2026.
  4. Auditing Agents: What NIS2, DORA, and the EU AI Act Actually Require, coming July 2026.
  5. Building the Agent Governance Function: Organizational Design, coming August 2026.