Classify
Separate what the identity is from why it exists.
Connect & understand · Machines need owners too
Govern service accounts, bots and agents by why they exist.
Non-human identities receive an owner, lifecycle driver, blast-radius view and attestation rhythm. Type alone never determines purpose, and an unowned machine identity becomes work rather than background noise.
What changes
Non-human identities
- 01Service-account and bot inventory
- 02Owner and lifecycle-driver enforcement
- 03Blast-radius and privilege context
- 04Tiered attestation and kill-switch evidence
How it works
Three moves.
One governed loop.
Each move leaves a reason behind for the next one.
Assign
Require a human owner and a lifecycle driver.
Attest
Review on a rhythm that matches autonomy and reach.
The claim we will defend