Workload identity frameworks like SPIFFE/SPIRE issue short-lived certificates that prove a process or container is genuine. Extending this concept to AI agents gives each agent its own verifiable identity independent of the user or device it runs on.