CAIN-42 CAIN StudioAGENTIC AI 75 · #21
Task-scoped, short-lived agent credentials
TrueFoundry and Okta announced access tied to user identity, limited tasks and temporary tokens.
Last reviewed 2026-11-11
Agentic AI 75 / #21
2026 status: Integration announcement · Category: Identity
The 2026 development
TrueFoundry and Okta announced access tied to user identity, limited tasks and temporary tokens.
The governance gap
A short lifetime is necessary but not sufficient. A token that is still valid for the wrong tool, resource or parameter is a long-lived grant in a short-lived wrapper.
Where CAIN-42 fits: Moat 2 — Security-Context Continuity
Core question: Does authority survive every boundary? Identity, scope and delegation are carried across tools, agents, memories and systems.
Bind the credential to identity, task, resource, parameter digest and a single use. CAIN's JIT capability issuer and execution-chain tokens refuse replay, expiry extension and scope widening.
How the wiring works
- Mint the token for one action, one resource and one parameter set.
- Set a short expiry and a nonce that is consumed on first use.
- Attenuate, never expand, when delegating to a sub-agent.
- Record issuance and consumption as separate evidence events.
What is real today
LIVE A public route in this deployment exercises this mechanism today, within its stated scope.
The hosted broker demo proves mint, attenuate, replay-refusal and expiry on fixed presets. It is not an Okta or TrueFoundry integration.
| Component in this repository | What the module says it is |
|---|---|
cain/jit_capability.py | CAIN Trust Fabric - JIT Single-Use Capability Tokens |
cain/execution_chain/capability.py | Attenuated, audience/destination-bound cross-system execution capability (Evolution 10, Phase 4). |
keystone/broker.py | BROKER KEYSTONE: CAIN Action Credentials. Agents get a credential for one action, never a standing key. |
cain/spiffe.py | CAIN Trust Fabric - SPIFFE / SPIRE Workload Identity Bridge (Phase 3) |
Descriptions are the first line of each module's own docstring, read without importing it. A module path is a pointer into this repository, not a hosted endpoint. Its existence is checked by the test suite; its status for this use is the label above.
Check it yourself
- Run the live action-credential demo
/broker-keystone - Fire a live decision through the CAIN-42 pipeline
/fabric/try— the same enforcement path every product sits behind.
Commercial package
| Offer | Agent Credential Review |
|---|---|
| Buyer | IAM teams and agent-platform vendors |
| Price (proposal) | $3,500–$7,500 per review |
| Bundle | Identity & Authority — Every agent, every delegation, every boundary. |
| Operator stream | Stream 2 of the 10-stream operator playbook |
CISO, IAM, platform security, agent-tool vendors is the bundle buyer. The entry offer for this bundle is Agent authority review; MCP/A2A boundary review; the range is $2,500–$7,500 per review; integration from $10,000. A price on this page is a proposal, not a validated rate, and no customer is claimed.
Buy this as a product or service
CAIN-A75-021 — Agent Credential Review DELIVERABLE
A bounded engine run on the buyer's sample: findings, a written report, and a SHA-256 artifact manifest. The manifest is unsigned: it is not a signature and not an attestation.
Kind: Assessment · Price (proposal): $3,500–$7,500 per review · Lead time: 5 business days.
Open the product page · all 75 products
What this page does not claim
What this page is not. CAIN-42 is not affiliated with, endorsed by, integrated into, or shipped with the organisation named in the 2026 item. The item is public context; the page describes how CAIN-42 would govern that class of capability. No page here claims a customer, a partnership, a certification, a patent, or a production integration. Prices are proposals. Built by a three-person team.