The identity conversation assumes agent sprawl is inevitable. It does not have to start that way.

TL;DR: Your agent lives for 2 minutes. Its credential lives for 60. That mismatch is your attack surface. A broker that issues task-scoped, short-lived credentials closes the gap before the sprawl sta