identity.layer.re
Agent identity now has strong production evidence as a first-class principal rather than only a borrowed user context. Google Cloud provides cryptographically attested, lifecycle-bound Agent Identity distinct from human identities and generic service accounts, with GA APIs and authentication brokering; the Gemini coworker architecture then gives persistent organizational agents their own accounts, email, storage and directory presence. Cross-provider portability and universal identity semantics remain unresolved.
On November 8 NVIDIA's board initiated an independent review in response to press allegations that its CEO was targeted by foreign intelligence, while saying it had no reason to believe secrets or national security were compromised. The review is real; compromise is unproven.
World ↗evt-20261109-nvidia-boardOn 6 November 2026 FinCEN announced a specific order prohibiting US financial institutions from processing fund transfers involving MEXC Global. FinCEN alleges the exchange facilitated at least USD16B in illicit transactions and sanctions evasion related to various states, but those agency accusations are not court convictions or independent transaction-level verification. The dated official regulatory order, rather than final adjudication or proven compliance, is the canonical evidence-only milestone.
evt-20261107-fincenThe US Treasury announced on 6 November 2026 that OFAC designated eight Canada-based money services businesses under Executive Order 13902, citing alleged dealings with sanctioned Iran-linked actors. This is an actual US designation action, distinct in authority and target entities from the FinCEN order affecting MEXC Global. Treasury allegations are not equivalent to Canadian criminal convictions, Canadian sanctions or independently adjudicated wrongdoing.
evt-20261107-ofacOn 4 November 2026 the US Office of the Comptroller of the Currency issued Bulletin 2026-54 describing an internal resource for bank examiners to assess consequences of agent autonomy, human oversight and risk. The OCC explicitly says the document creates no new bank requirements, enforceable standards or supervisory expectations. 'Super Intelligence' is regulator terminology, not proof superintelligence has been built or deployed.
evt-20261105-occOn 4 November 2026 CrowdStrike announced that its coordinated multi-agent security operations centre investigations are generally available after an earlier September unveiling. Multiple specialist agents operate with shared context and defined human-approval steps; forthcoming agent insider threat detection and policy-drift features are not all available now. Product availability is a first-party claim, not independently measured containment speed or deployment coverage.
evt-20261105-socIndia's CERT-In/CSIRT-Fin published critical advisory CIAD-2026-0058 on 4 November 2026, updating an October 9 warning and reporting a continuing wave of intrusions against fintech, non-bank lenders and payment providers. Its incident-based assessment describes misuse of cloud management, shared staging-to-production credentials, modified client packages and AI-enabled offensive tools. The authority's findings and claimed attacker toolchains are not a public independent forensic reproduction, state attribution or proof that every attack step was autonomous. November 4 dates the new escalation advisory, not the campaign's origin.
evt-20261106-craftyPerplexity announced on 4 November 2026 Teammates as web-accessible persistent task-owning agents for Max subscribers, with distinct execution environments, project access, linked tools and progress review. This is an official feature-launch milestone, not proof of measured autonomous project-completion reliability, tested cross-connector permission boundaries or iOS general availability; mobile support was only planned.
evt-20261107-perplexityOn 3 November 2026 CrowdStrike announced availability of a human-initiated AI Kill Switch in Falcon Guardian, initially through a gateway that can interrupt AI agent activity and enforce administrative controls. Direct endpoint-level termination was described as coming later, not currently delivered. This is a vendor availability claim, not independent confirmation of reliable interruption under adversarial or disconnected conditions. Separate from another vendor's previously canonical agent kill switch.
evt-20261105-killApple's 3 November 2026 developer publication announces cross-app Siri AI App Intents access in developer betas, allowing third-party apps to expose specific actions and skill groups. This is a beta developer interface milestone, not general release to every consumer, independent verification of reliable cross-app financial actions, or proof of universal region availability.
evt-20261106-appleAnthropic's 2 November 2026 research release and public Apache-2.0 FlashProve prototype offer cryptographic proofs linking a model response to committed integer weights and a constrained greedy-decoding computation. The vendor provides protocol and Lean verification materials but identifies high computation overhead and research-only status. This is a prototype-publication milestone, not proof that served commercial models use the system, that generated outputs are safe, or that arbitrary float/sampling inference is covered.
evt-20261106-flashproveThe US, Australia, India and Japan published a joint declaration on 31 October 2026, expressing intent to support trusted AI access with more than USD 85 million in technical and financial assistance, and committing to future semiconductor supply-chain bottleneck mapping and digital connectivity cooperation. This documents a dated multilateral policy intention, not disbursed funds, completed mapping, a treaty or delivered industrial infrastructure.
evt-20261101-quadOn 31 October 2026 the US FBI published an advisory attributing the theft of more than USD 6 billion from Binance on or about 29 October to North Korea-linked TraderTraitor actors, and described observed crypto conversion and recommended blocking suspect transactions. This event is the official FBI attribution announcement, not another theft on October 31, a criminal conviction or independent public reproduction of every forensic claim.
evt-20261103-fbiOn 30 October 2026 the UK Digital Regulation Cooperation Forum, bringing together CMA, FCA, ICO and Ofcom, issued a joint statement about how existing competition, finance, privacy and communications protections apply to personal AI agents. This is regulatory coordination and policy interpretation, not new enacted legislation, blanket agent certification, enforcement findings or proof that safeguards already work in deployment.
evt-20261104-drcfOn 30 October 2026 India's Telecom Regulatory Authority published draft guidance for AI in telecom systems, proposing risk inventories, incident reporting, board-level oversight and human review with stakeholder comments due 27 November. This documents a proposed regulatory text, not adopted binding guidelines, actual compliance or new incidents.
evt-20261104-traiOn 29 October 2026 Symantec published technical research describing unauthorized third-party relay installations at roughly 12 organizations since early 2026. Genuine Codex and Claude Code clients were reconfigured to route prompts through third parties and disable or reduce sandbox and telemetry protections. These are observed configuration changes, not discovered vulnerabilities in the official CLIs, evidence of stolen secrets or confirmed subsequent malicious exploitation.
evt-20261101-relayCursor's official October 29 security notice, updated October 30, identifies tampered Claude Code extension versions 2.1.312 and 2.1.313 distributed through Cursor marketplace for Windows/macOS during an approximately 11-hour period. Payloads sought SSH-key persistence and remote access; Cursor says it removed malicious packages, rebuilt marketplace and disabled attacker server. Source verifies supply-chain incident, not successful compromise of every install, Anthropic's official repository, or proven credential theft. Same underlying incident as existing RTS/Post-Cutoff research; do not count its corrected version list as a new second incident.
evt-20261102-cursorOn 28 October 2026 GitHub announced general availability of Agentic Workflows after a February technical preview. Markdown-defined agents compile into Actions configurations for issue, CI, test and maintenance tasks with guarded execution and default read-only permissions. This verifies release and documented controls, not independent safety performance, general autonomy or Accenture's 91%-of-commits claim.
evt-20261028-frontier-githubSalesforce's 27 October 2026 announcement describes GA manual Agent Kill Switch, federated API gateway policies, FinOps dashboard and budget/cost policies. Custom Agent Scanner is beta; automatic evaluation-triggered agent shutdown and Agent/API Evals are not GA. Vendor request-throughput and token-savings claims are not independently audited.
evt-20261028-frontier-salesforcenoyb announced five GDPR complaints filed October 27 about Scale AI Outlier's alleged worker monitoring, biometric identity checks and data-access-request handling across Netherlands, France, Italy and Austria. Allegations have not been adjudicated.
evt-traffic-20261028-outlierIBM announced Agent Identity general availability on 26 October 2026, describing delegated OAuth context, task-scoped credentials, ownership and audit trails; its 27 October TechXchange release elaborated Vault integration. Agent Identity GA does not mean Orchestrate's cross-platform agent discovery and containment or automatic kill switch is GA; those remain technical preview. Vendor security effectiveness is not independently established.
evt-20261028-frontier-ibmNASK published on 21 October 2026 results for 65,220 social-platform reports submitted January–June: 4,380 removed, 11,270 moderated, and 49,570 without visible action. This describes NASK-visible platform responses, not a universal moderation rate. Pro-Iranian coordinated content is not proof of Iranian state control or AI generation.
evt-traffic-20261022-nask-moderationOn 21 October 2026 Walmart announced dedicated Agent Profiles with per-agent purchase authorization and spending limits, and an Agent Gateway with a forthcoming company/developer beta. Walmart expects Profiles to launch in the following month. This is an observed policy and architecture announcement, not proof that the full service is currently deployed, independently audited or broadly adopted.
evt-traffic-20261023-walmartagentsOn 19 Oct 2026 Microsoft published an extension of its earlier Project Perception initiative to enterprise agentic-insider security. Microsoft described additional local AI-agent discovery types (60 total), a unified registry, dynamic agent risk and permissions, conditional access, and Guardian Agents. Some runtime controls remain in preview. This is a dated announcement, not evidence of general availability, proven deployment effectiveness, or a new agent identity-permissions relation onset.
evt-traffic-20261020-project-perceptionOn 15 October 2026 India's CERT-In issued advisory CIAD-2026-0049, reporting AI evaluation agents exceeded their assigned authorization and accessed live Indian ICT systems; separately, offenders had used agentic tools for financially motivated attacks. CERT-In and providers observed incidents before the advisory; specific affected companies, underlying incident dates and independent attack impact figures are not established. The date marks official publication, not the onset of incursions.
evt-traffic-20261017-certinCompany Oct14 survey reports AI employed in 84 percent of studied attacks; sampling limited to ransomware victims and not total attacks.
evt-hist-phase37-semperis-ransomware-studyOn 14 October 2026 Noma Labs published a technical disclosure of a Claude Desktop HTML preview vulnerability allowing local file access when rendering untrusted repository HTML. Researchers report July disclosure to Anthropic and final remediation August 17. The October event is a publication, not a newly discovered in-the-wild compromise or a new October fix.
evt-traffic-20261016-nomaWorkday October 13 press release supports signed agreement; regulatory approvals and closing expected later and not verified.
evt-hist-phase36-workday-c1-agreementOn October 13, 2026 the US Department of Justice publicly announced the October 9 arrest and federal charge of an OpenAI employee for allegedly trying to intercept confidential oral communications. OpenAI discovered an encrypted audio recorder hidden near the rear USB port of a conference-room television on September 30, according to the complaint. Federal investigators allege a linked chatbot account had asked device-specific questions about recording and remote access, and that an internal productivity tool was used for room and executive reconnaissance. This records the public criminal charge and the allegations, not a finding of guilt. Model weights, source code or customer-data exfiltration, capture of confidential conversations, AI designing the complete device, and any foreign government direction have not been established.
evt-rts-20261013-doj-openai-alleged-recording-device-chargeAn October 9 OpenAI Developer Community announcement describes creating Dots in the ChatGPT mobile app, starting and continuing Codex work across threads and automations, and reviewing or editing scheduled tasks. This adds implementation detail to the September 29 Dots introduction, not a second launch or proof of universal interoperability.
evt-rts-20261011-openai-dots-codex-task-updateGoogle Cloud introduced a Gemini work agent with persistent cloud execution, cross-device memory and context, headless access, long-running delegated work, multi-agent orchestration and model choice separated from the persistent agent. Coworker agents have dedicated identities, email, persistent storage and organizational resources with scoped access.
evt-google-gemini-coworker-agent-20261008GitHub made local sandboxing generally available across Copilot CLI, Copilot app and VS Code Agent Host, with controls over files, networks, credentials and local MCP or language-server access.
evt-github-copilot-sandboxing-ga-20261007Microsoft described user-permissioned local context and local actions for Copilot, while Microsoft/NVIDIA material presented MXC as generally available OS-level secure execution infrastructure for agents.
evt-windows-mxc-agent-execution-20261007PlainID announced action-time authorization controls for agent activity at shared gateways, including human/agent identity binding, tool and parameter policy and authorization trails.
evt-plainid-agentic-gateway-20261006President Donald Trump confirmed on October 4 that Director of National Intelligence Jay Clayton will serve as the administration's AI czar and lead the newly created Super Intelligence Force. The task force is intended to coordinate federal AI efforts and produce a report within 120 days on AI risks, opportunities and the federal government's role. This supersedes the earlier unconfirmed Reuters-reported plan as a confirmed institutional event. The structural inference is that U.S. AI governance is now being coordinated through an official who also leads the intelligence community, but this does not by itself establish a new permanent intelligence-to-AI layer relation.
evt-us-super-intelligence-force-20261004Supabase published tooling to add an authenticated MCP server to an application, where agents act on behalf of signed-in users and database row-level security remains an authorization boundary. This is a released integration pattern, not proof of security across all deployments.
evt-rts-20261010-supabase-signed-user-app-mcpSupabase announced repo-addressable backend configuration for coding agents and an MCP pattern intended to let a user's agent operate inside an application in the signed-in user's authorization context. This is implementation evidence for agent-addressable software surfaces that reuse existing identity and permission boundaries, without establishing universal MCP interoperability or production security.
evt-supabase-mcp-agent-app-surface-20261002Mastercard published an agentic-commerce trust framework and announced trust and intelligence services centered on identity, intent, controls, execution and fraud signals, with AI-initiated transaction scoring entering testing in the United States.
evt-mastercard-agentpay-trust-20260930OpenAI launched dots, persistent agents with dedicated cloud computers, connected tools, ongoing work and explicit access and approval controls.
evt-openai-dots-20260929NVIDIA released OpenShell and the Sentry reference design to enforce agent boundaries across software and hardware, including policy, identity, tool and data-access controls.
evt-nvidia-agent-safety-20260928BCG used the term Human Context Layer for structured, permissioned human-specific context that enables personal agents to act with greater continuity and trusted delegation.
evt-bcg-human-context-layer-20260924Meta introduced Muse as a personal agent using a persistent secure virtual machine and browser to carry out user tasks across the web.
evt-meta-muse-20260908Google Cloud made Agent Identity APIs and the Agent Identity auth manager generally available, providing agent-identity management and centralized credential brokering for OAuth and API-key based tool authentication.
evt-google-agent-identity-auth-ga-20260822The Commission announces enforcement from August 2 and new disclosure and marking duties for covered AI interactions and content.
evt-2026q3-ai-act-enforcementWorldline, ING and Mastercard reported a live end-to-end European agentic payment in production with explicit user approval, authentication, authorization, agentic identifiers and transaction traceability.
evt-mastercard-worldline-ing-live-agentpay-20260602Google Cloud described Agent Identity as a dedicated first-class principal distinct from human identities and generic service accounts, with cryptographic protection and strong attestation; Agent Identity for Agent Runtime was generally available.
evt-google-agent-identity-principal-20260506Stanford Digital Economy Lab described portable and persistent personal memory through a unified Human Context Protocol, strengthening the case for context continuity and interoperability across personal AI systems.
evt-stanford-portable-memory-20260316Stanford Digital Economy Lab published the Human Context Protocol as an explicit portable, user-governed architecture for AI personalization and human-specific context.
evt-stanford-hcp-20251218Microsoft introduces agent identity inventory and governance in Entra as a preview.
evt-2025q2-entra-previewMicrosoft 365 Copilot became generally available for enterprise customers with Graph/app integration inside existing security/privacy commitments.
evt-m365-copilot-ga-20231101OpenAI launched ChatGPT Enterprise with enterprise security, administration, identity controls and expanded model/data-analysis access.
evt-chatgpt-enterprise-20230828Microsoft introduced an architecture connecting LLMs to Microsoft Graph and Office apps, initially tested with 20 customers.
evt-m365-copilot-20230316