https://t0ul.com/tags/identity/Recent content in Identity on t0ulHugoen-usTue, 28 Jul 2026 00:00:00 +0000https://t0ul.com/blog/the-agent-gets-a-wallet/Tue, 28 Jul 2026 00:00:00 +0000https://t0ul.com/blog/the-agent-gets-a-wallet/<p><em>Part of my <a href="https://t0ul.com/blog/the-plan/">AI Security Engineering</a> series, a local email-to-calendar agent I build, then attack, then harden. If you have not set up the lab yet, start with <a href="https://t0ul.com/blog/setting-up-the-lab/">Set up your lab</a>. The lessons are <a href="https://github.com/t0ul/ai-security-engineering">on GitHub</a>, and the agent itself lives at <a href="https://github.com/t0ul/emaildrop">t0ul/emaildrop</a>.</em></p> <h2 id="an-identity-that-holds-credentials">An identity that holds credentials</h2> <p>An agent that does anything in the world needs credentials to do it: a token to send mail, a grant to write the calendar, a scope to fetch a URL. It is a non-human identity with a wallet, and like any wallet, the question that matters is not what is in it when everything is fine but what happens the moment one of the cards is stolen. Credentials leak. A grant ends up in a log, a prompt, a crash dump. When that happens, you revoke it, and the entire value of revocation is that it is immediate.</p>