AI agent identity and delegation

These guides document actual 1-SEC implementation paths and source fixtures. Start by verifying the event producer and field meanings, then read the coverage limits before choosing an enforcement policy.

AI Agent API Key Leakage: Output Detection and Limits

Output analysis reads the supplied output or response string and applies implemented secret and sensitive-data patterns.

AI Agent Delegation: Trusted Verification, Expiry, and Scope Limits

Delegation records require a nonempty agent/principal, a trusted verified-attestation flag, a nonempty attestation, valid future RFC3339 expiry, acceptable chain depth, and no matched escalation keywords before being marked verified.

Connected-Account Unlinking: Local Tracker and Provider Revocation

The optional Token Vault component processes connected-account events.