Who's governing your AI? A trust framework for enterprise agents and models
DigiCert pitches AI Trust framework using PKI, DNS policy records and workload identity to govern shadow AI agents across enterprises.
The Register-sponsored piece outlines DigiCert's AI Trust framework for governing AI agents, built on PKI, DNS, and attestation, citing IBM's 2026 Cost of a Data Breach report that 68% of organizations lack AI governance or shadow AI detection. The approach treats agent identity as workload identity aligned with IETF WIMSE, NIST CSF 2.0, and SPIFFE/SPIRE, using short-lived credentials instead of static API keys. DigiCert also proposes DMARC-style DNS agent policy records and an AI Agent Passport cryptographically binding agent identity to approved operations, with a unified kill switch.
- IBM 2026 report: 68% of organizations lack AI governance, up from 63%
- Framework treats agent identity as workload identity via SPIFFE/SPIRE, WIMSE, NIST CSF 2.0
- DMARC-style DNS agent policy records would gate and block unauthorized agent connections
- AI Agent Passport cryptographically binds agent identity to permitted operations
From the original article
6 min read at theregister.comSPONSORED FEATURE: DigiCert wants to hand every agent a passport, complete with an expiry date and a named human owner
By Robin Birtstone · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.