{"ontology":"https://layer.re/machine/schema.json","epistemic_model":"evidence-backed-temporal-layer-graph","canonical":true,"type":"layer_history","layer":{"id":"layer-identity","slug":"identity","name":"Identity","description":"Systems for identifying people, agents and organizations.","machine_description":"Systems for identifying people, agents and organizations.","active":1},"snapshots":[{"id":"state-identity-2025q2","layer_id":"layer-identity","as_of":"2025-06-30 23:59:59.000","summary":"Agent identity becomes an explicit enterprise preview surface; availability and independent-principal semantics remain bounded.","dependencies":[],"constraints":["Preview identity management does not imply production-wide adoption or universal independent agent principals."],"emerging_capabilities":["Microsoft announces Entra Agent ID preview"],"underdeveloped_components":["Independent measurement of deployment scope and outcomes"],"uncertainties":["No verified earlier state is available in the supplied historical chain; null does not assert the layer began in this period."],"confidence":0.9,"previous_snapshot_id":null,"mapping_mode":"retrospective","reconstructed_at":"2026-10-10T06:24:42.000Z","created_at":"2026-10-10T08:25:19.364Z","updated_at":"2026-10-10T08:25:19.364Z"},{"id":"state-identity-2026q2","layer_id":"layer-identity","as_of":"2026-06-30 23:59:59.000","summary":"Attested agent principals become a separately addressed identity capability; runtime, platform and authentication components retain distinct maturity stages.","dependencies":[],"constraints":["Agent Runtime identity availability must not be conflated with preview platform and auth-manager components."],"emerging_capabilities":["Google makes agents first-class identity principals"],"underdeveloped_components":["Independent measurement of deployment scope and outcomes"],"uncertainties":["The referenced historical predecessor belongs to the reviewed chronology; the live history must be checked before ingestion."],"confidence":0.9,"previous_snapshot_id":"state-identity-2025q2","mapping_mode":"retrospective","reconstructed_at":"2026-10-10T06:24:42.000Z","created_at":"2026-10-10T09:06:48.253Z","updated_at":"2026-10-10T09:06:48.253Z"},{"id":"state-identity-2026q3","layer_id":"layer-identity","as_of":"2026-09-30 23:59:59.000","summary":"Generally available agent identity APIs and dedicated agent accounts strengthen addressability; identity still does not imply authority to execute every action.","dependencies":[],"constraints":["Publication on July 31 is distinct from effectiveness on August 2; this does not imply every high-risk obligation has the same start date or prove full compliance.","GA is a product status, not evidence of universal identity federation or adoption.","Rollout is gradual and geographically restricted; product claims do not independently prove reliable continuous operation."],"emerging_capabilities":["Commission publishes notice of August 2 enforcement and transparency milestone","Agent Identity APIs and auth manager reach GA","Dots introduces persistent agents with cloud computers"],"underdeveloped_components":["Independent measurement of deployment scope and outcomes"],"uncertainties":["The referenced historical predecessor belongs to the reviewed chronology; the live history must be checked before ingestion."],"confidence":0.9,"previous_snapshot_id":"state-identity-2026q2","mapping_mode":"retrospective","reconstructed_at":"2026-10-10T06:24:42.000Z","created_at":"2026-10-10T09:18:22.069Z","updated_at":"2026-10-10T09:18:22.069Z"},{"id":"state-identity-20261001-human-context","layer_id":"layer-identity","as_of":"2026-10-01 19:31:00.000","summary":"Identity is increasingly coupled to persistent personal context by defining whose context is represented and under which roles, relationships or scopes it may be retrieved and used by agents.","dependencies":["layer-human","layer-permissions","layer-agents"],"constraints":["cross-provider identity binding","role ambiguity","privacy"],"emerging_capabilities":["identity-scoped personal context","role-aware context access"],"underdeveloped_components":["portable identity-to-context bindings"],"uncertainties":["whether identity and context remain separately governed primitives across ecosystems"],"confidence":0.84,"previous_snapshot_id":null,"mapping_mode":"contemporaneous","reconstructed_at":null,"created_at":"2026-10-01T20:08:12.917Z","updated_at":"2026-10-01T20:08:12.917Z"},{"id":"state-identity-20261002-agentic","layer_id":"layer-identity","as_of":"2026-10-02 07:22:00.000","summary":"Identity is becoming a control primitive not only for humans and organizations but for agents acting under delegated authority, especially in consequential domains such as payments.","dependencies":["layer-human","layer-agents","layer-permissions"],"constraints":["agent-to-principal binding","credential scope","revocation","cross-provider verification"],"emerging_capabilities":["verifiable non-human identities","identity-bound delegated actions"],"underdeveloped_components":["portable agent identity standards"],"uncertainties":["which identity formats become interoperable"],"confidence":0.94,"previous_snapshot_id":null,"mapping_mode":"contemporaneous","reconstructed_at":null,"created_at":"2026-10-02T09:22:12.384Z","updated_at":"2026-10-02T09:22:12.384Z"},{"id":"state-identity-20261004-agent-app-context","layer_id":"layer-identity","as_of":"2026-10-04 21:50:08.000","summary":"Identity remains a control primitive for delegated agent action, with Supabase providing new implementation evidence that application-facing agents can operate through the signed-in user's existing identity context rather than through unrestricted backend authority.","dependencies":["layer-human","layer-agents","layer-permissions","layer-software"],"constraints":["agent-to-principal binding","credential scope","revocation","cross-provider verification","implementation-specific semantics"],"emerging_capabilities":["signed-in-user-context agent operation","identity-bound application capability access"],"underdeveloped_components":["portable agent identity standards","cross-platform identity delegation semantics"],"uncertainties":["exact Supabase security model and revocation behavior","whether comparable patterns converge across independent platforms"],"confidence":0.91,"previous_snapshot_id":null,"mapping_mode":"contemporaneous","reconstructed_at":null,"created_at":"2026-10-04T21:57:54.260Z","updated_at":"2026-10-04T21:57:54.260Z"},{"id":"state-identity-20261008-agent-principals","layer_id":"layer-identity","as_of":"2026-10-08 19:29:00.000","summary":"Agent identity now has strong production evidence as a first-class principal rather than only a borrowed user context. Google Cloud provides cryptographically attested, lifecycle-bound Agent Identity distinct from human identities and generic service accounts, with GA APIs and authentication brokering; the Gemini coworker architecture then gives persistent organizational agents their own accounts, email, storage and directory presence. Cross-provider portability and universal identity semantics remain unresolved.","dependencies":["layer-agents","layer-permissions","layer-software","layer-human"],"constraints":["cross-provider portability","principal-to-human delegation semantics","revocation and lifecycle consistency","external-system identity mapping"],"emerging_capabilities":["first-class agent principals","cryptographically attested agent identity","agent-specific IAM policy","persistent organizational agent accounts","identity-bound audit attribution"],"underdeveloped_components":["portable agent identity standards","cross-cloud principal federation","independent validation of lifecycle and revocation behavior"],"uncertainties":["how widely first-class agent principals are adopted outside Google Cloud","how agent identity maps across third-party systems and providers"],"confidence":0.98,"previous_snapshot_id":"state-identity-20261004-agent-app-context","mapping_mode":"contemporaneous","reconstructed_at":null,"created_at":"2026-10-08T20:03:28.741Z","updated_at":"2026-10-08T20:03:28.741Z"}]}