Per-agent — and per-operator — identity.

Every actor, including the operator itself, gets a scoped, revocable, version-fingerprinted identity on the ledger. Instead of agents borrowing a shared key, each one acts under its own — minted just in time, expiring on a clock you set.