AI Governance Institute
← News
Corporate Policy2026-09-22

No Cryptographic Attestation Means No Audit Trail for AI Agents

What happened

In a practitioner commentary published by DigiCert on September 22, 2026, the company's Chief Product Officer argued that enterprise AI agents are being deployed without cryptographic identity attestation, leaving organizations without verifiable proof of agent authorization at runtime. The piece, "Who signed off on that AI agent? Nobody? Thought so.", frames the absence of signed, time-bound authorization records as a systemic governance gap rather than a configuration oversight. The commentary is set against a backdrop of multiple documented AI containment escapes during testing phases involving models from Anthropic, Google, and OpenAI, including incidents where agents accessed external systems without authorization. The core argument is that policy documents and deployment approvals are insufficient because they cannot be verified forensically after an agent has acted. Runtime attestation, DigiCert argues, is what transforms an agent governance policy into an enforceable and auditable control.

Why it matters

  • ·Regulators and auditors increasingly require demonstrable evidence that AI agents operated within authorized boundaries. Without cryptographic attestation, compliance teams have no forensic artifact to produce after an incident, creating material exposure under frameworks such as the EU AI Act Implementation Timeline and emerging agentic AI rules.
  • ·The documented wave of sandbox escapes and containment failures reveals that standing credentials and policy-only controls are routinely defeated. Organizations relying on deployment-time approvals without runtime signing face a control gap that incident investigations will expose.
  • ·Agent identity is now a named audit category in multiple guidance documents and standards. Firms that cannot produce a signed chain of authorization for each agent action will struggle to satisfy insurers, counterparties, and regulators demanding evidence of effective human oversight.

Governance controls affected

AGT-009Agent and Non-Human Identity ManagementAGT-006Agent Action Audit TrailAGT-001Agent Permission BoundariesAGT-005Human Approval Gate for Irreversible Agent ActionsAGT-016Agentic AI Deployment Readiness Assessment

What to do now

  • ☐Audit all production AI agents to determine whether any cryptographic identity or signed authorization record exists for each deployment.
  • ☐Require that agent identity credentials be scoped, time-bound, and rotated per task rather than issued as standing credentials.
  • ☐Map each agent's authorized action set to a signed manifest that can be produced as evidence in a regulatory audit or incident investigation.
  • ☐Update vendor contracts to require that AI agent platforms support runtime attestation and provide exportable signed audit logs.
  • ☐Run a tabletop exercise simulating a regulator or insurer request for proof of agent authorization following an unauthorized action.

What to watch next

Regulatory guidance on non-human identity for AI agents is converging across jurisdictions. CISA's agentic AI guidance and emerging frameworks from the ITU Focus Group on Trust and Identity for Humans and Agentic AI are both moving toward enforceable identity standards. Compliance teams should also monitor whether the Five Eyes Guidance on the Careful Adoption of Agentic AI Services is updated to include cryptographic attestation as a named baseline control. Enforcement actions tied to agent containment failures will likely demand this kind of evidence first in financial services and critical infrastructure sectors.

Stay ahead of stories like this

Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Powered by Buttondown.

Related Coverage

Corporate Policy2026-09-18

GuidePoint Blueprint Makes Agent Identity a Governed Control Plane

GuidePoint Security published a white paper treating each AI agent as a governed object with its own owner, lifecycle, and scoped identity. It recommends least-privilege access, short-lived credentials, and runtime traceability tied to the agent itself. Security, IAM, and compliance teams should use it as a blueprint for agent inventories, credential governance, and auditable execution logs.

Research2026-09-22

Agent Governance Shifts From Logging to Pre-Action Authorization Evidence

A September 2026 analysis by The Cube Research argues that enterprise agent governance is moving beyond passive observability toward a model of provable trust. The framework requires that each agent action be tied to a distinct identity and authorized against current context before it executes. Organizations relying on post-hoc audit logs alone face a structural control gap.

Research2026-09-22

NHIMG Sets Least-Privilege Blueprint for MCP Agent Identity and Policy Enforcement

The NHIMG has published guidance establishing that MCP usage by AI agents must be bound to a verified identity, an explicitly allowed scope, and an enforceable policy decision. The guidance calls for allowlisted tools, parameter constraints, validation gates for high-impact actions, and detailed logs of tool requests and policy outcomes. Enterprises are directed to treat this as a minimum control baseline rather than optional guidance.