AI agents may need an identity before they need more intelligence

We keep talking about what AI agents will soon be capable of doing: sending emails, moving money, making purchases, negotiating with other systems, and managing parts of a business. But capability might not be the real bottleneck. The harder question is how we know which agent actually performed an action, who authorized it, what permissions it had, and who is responsible when something goes wrong. An employee has a name, a role, an access level, and usually some kind of audit trail. An autonomous agent can operate across several tools while appearing to act as the user or company behind it. Once thousands of these systems begin interacting, “the AI did it” will not be a useful explanation. The ITU has now started working on international standards intended to make AI agents identifiable, trustworthy, and subject to meaningful human control. That feels less exciting than another benchmark improvement, but it may matter much more for real adoption. My guess is that the companies that win the agent race will not simply build the most autonomous agents. They will build the agents whose actions can be traced, challenged, and reversed. Would you trust an AI agent to act independently if every decision were auditable—or are there certain actions that should always require human approval?