I’ve been looking into how AI agents and “vibe coding” are changing the way we think about digital identity. The problem is shifting from verifying who someone is to understanding who actually performs an action, especially when both humans and AI share access.

Two trends stand out:

1. Identity systems are starting to use behavioral and contextual signals instead of just passwords or keys.

2. Our current trust models break when adaptive AI systems act independently.

As AI agents become more autonomous, is it time to design identity systems that verify intent, not just identity?