Beyond the Lethal Trifecta: Agentic Commerce on the Open Internet — David Levine, Kiduna Club

An agent identity could help connect an automated action to the organization responsible for it. The proposal in this talk starts from what Simon Willison named the lethal trifecta: access to private data, exposure to untrusted content and the ability to communicate externally in a way that could steal that data. The speaker says that combination is why enterprises keep agents inside closed platforms and give up the context they lose there.

The proposed answer is identity. According to the talk's description, agents would carry JWT-based identity credentials that resolve through a registry to an organization, much as DNS resolves a name, with an audit trail underneath. That would make an agent's activity traceable to a responsible organization. The description does not explain how this stops an agent from being tricked by untrusted content, and an identity record does not by itself establish that; this is an accountability proposal, not a proven defense against prompt injection.