“We are giving identity and access to agents based on the task… we call this CASA, which is continuous semantic authorization and giving access based on that.”

“We have this notion of T-BAC… parsing semantic communication and it's either raising authority or bringing down authority based on the task, the tool or the transaction.”

“An agent identity needs to be treated as a first-class identity… it needs to have least privilege… just-in-time access… a complete record of everything privileged.”

“Use that AI tool … go enumerate what I have access to that I might not need access to. That entitlement cleanup needs to really be continuous, not just an annual audit”

“We need to move to zero standing privileges…just in time access so that if an attacker finds an identity, they can't do anything because the entitlement doesn't exist.”