{"id":"https://openalex.org/W7140090118","doi":"https://doi.org/10.5281/zenodo.19197398","title":"Response to NCCoE Concept Paper: Intent Conveyance as the Missing Layer in AI Agent Identity and Authorization","display_name":"Response to NCCoE Concept Paper: Intent Conveyance as the Missing Layer in AI Agent Identity and Authorization","publication_year":2026,"publication_date":"2026-03-23","ids":{"openalex":"https://openalex.org/W7140090118","doi":"https://doi.org/10.5281/zenodo.19197398"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.19197398","doi":"https://doi.org/10.5281/zenodo.19197398","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.19197398","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.19197398","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128317126","display_name":"Nikhil Singhal","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Singhal, Nikhil","raw_affiliation_strings":["AI Trust Commons"],"raw_orcid":"https://orcid.org/0009-0003-5449-6830","affiliations":[{"raw_affiliation_string":"AI Trust Commons","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5128317126"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.0010000000474974513,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ai-agent-identity","display_name":"AI agent identity","score":0.8550000190734863},{"id":"https://openalex.org/keywords/ai-agent-security","display_name":"AI agent security","score":0.7329999804496765},{"id":"https://openalex.org/keywords/authentication","display_name":"authentication","score":0.4350000023841858},{"id":"https://openalex.org/keywords/authorization","display_name":"authorization","score":0.5699999928474426},{"id":"https://openalex.org/keywords/audit-trail","display_name":"audit trail","score":0.7400000095367432},{"id":"https://openalex.org/keywords/human-oversight-of-ai","display_name":"human oversight of AI","score":0.48100000619888306}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6362000107765198},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.5346999764442444},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.517799973487854},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.4715999960899353},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4523000121116638},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.4496000111103058},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.38850000500679016},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3837999999523163},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.3682999908924103},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.36410000920295715},{"id":"https://openalex.org/C5894958","wikidata":"https://www.wikidata.org/wiki/Q2297769","display_name":"Software agent","level":2,"score":0.3465999960899353},{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.3156999945640564},{"id":"https://openalex.org/C2778902089","wikidata":"https://www.wikidata.org/wiki/Q5608642","display_name":"Subpoena","level":2,"score":0.3142000138759613},{"id":"https://openalex.org/C522325796","wikidata":"https://www.wikidata.org/wiki/Q471880","display_name":"Identity theft","level":2,"score":0.311599999666214},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.31040000915527344},{"id":"https://openalex.org/C98184364","wikidata":"https://www.wikidata.org/wiki/Q1780131","display_name":"Argument (complex analysis)","level":2,"score":0.30550000071525574},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2939999997615814},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.26660001277923584},{"id":"https://openalex.org/C2778491294","wikidata":"https://www.wikidata.org/wiki/Q1339824","display_name":"Mindset","level":2,"score":0.2563000023365021},{"id":"https://openalex.org/C555379026","wikidata":"https://www.wikidata.org/wiki/Q977772","display_name":"Identity management","level":3,"score":0.2522999942302704},{"id":"https://openalex.org/C74072328","wikidata":"https://www.wikidata.org/wiki/Q1142726","display_name":"Intelligent agent","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.19197398","doi":"https://doi.org/10.5281/zenodo.19197398","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.19197398","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},{"id":"doi:10.5281/zenodo.19197399","doi":"https://doi.org/10.5281/zenodo.19197399","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.19197399","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"}],"best_oa_location":{"id":"doi:10.5281/zenodo.19197398","doi":"https://doi.org/10.5281/zenodo.19197398","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.19197398","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7134200882","https://openalex.org/W7222954158","https://openalex.org/W7131643627","https://openalex.org/W7172122687","https://openalex.org/W7143450965","https://openalex.org/W7150056715","https://openalex.org/W7135175225","https://openalex.org/W7130957592","https://openalex.org/W7156380449","https://openalex.org/W7152053309"],"abstract_inverted_index":{"This":[0],"document":[1],"is":[2,57,71,110],"a":[3,85,141,148],"public":[4],"response":[5,39],"to":[6,30,208],"the":[7,17,33,82,118,177,204,209,222,245],"National":[8],"Cybersecurity":[9],"Center":[10],"of":[11,19,185,199],"Excellence":[12],"(NCCoE)":[13],"concept":[14],"paper":[15,77,180],"\"Accelerating":[16],"Adoption":[18],"Software":[20],"and":[21,25,46,60,99,105,151,193,203,248],"AI":[22,43,132,137,200,214],"Agent":[23,215],"Identity":[24],"Authorization\"":[26],"(February":[27],"2026),":[28],"submitted":[29],"AI-Identity@nist.gov":[31],"before":[32],"April":[34],"2,":[35],"2026":[36],"deadline.":[37],"The":[38,76,108,179],"argues":[40],"that":[41,92,155,243],"current":[42],"agent":[44,154,228,233],"identity":[45,104,158,229],"authorization":[47,61,96,106],"models":[48],"are":[49],"necessary":[50],"but":[51,67,160],"not":[52],"sufficient.":[53],"Authentication":[54],"answers":[55,62,69],"\"who":[56],"this":[58,74],"agent?\"":[59],"\"what":[63],"can":[64],"it":[65,72],"access?\"":[66],"neither":[68],"\"why":[70],"taking":[73],"action?\"":[75],"proposes":[78],"intent":[79,90,172],"conveyance":[80,173],"as":[81],"missing":[83],"layer:":[84],"structured":[86],"metadata":[87],"format":[88],"(the":[89,164],"envelope)":[91],"declares":[93],"purpose,":[94],"human":[95],"chain,":[97],"constraints,":[98],"temporal":[100],"scope":[101],"alongside":[102],"existing":[103],"mechanisms.":[107],"argument":[109],"grounded":[111],"in":[112],"three":[113],"enterprise":[114],"case":[115],"studies":[116],"from":[117,133],"past":[119],"90":[120],"days:":[121],"Spotify's":[122],"AI-first":[123],"coding":[124,138,201],"pipeline":[125],"(Honk":[126],"+":[127,232,234,236],"Claude":[128],"Code,":[129],"engineers":[130],"directing":[131],"Slack),":[134],"Amazon's":[135],"Kiro":[136],"tool":[139],"causing":[140],"13-hour":[142],"AWS":[143],"outage":[144],"by":[145],"autonomously":[146],"deleting":[147],"production":[149],"environment,":[150],"Meta's":[152],"rogue":[153],"passed":[156],"every":[157],"check":[159],"took":[161],"unauthorized":[162],"actions":[163],"\"confused":[165],"deputy\"":[166],"pattern).":[167],"Each":[168],"incident":[169],"illustrates":[170],"where":[171],"would":[174],"have":[175],"changed":[176],"outcome.":[178],"draws":[181],"on":[182,213],"25":[183],"years":[184],"engineering":[186],"leadership":[187],"across":[188],"Microsoft,":[189],"T-Mobile,":[190],"AT&T,":[191],"Expedia,":[192],"Hitachi":[194],"Consulting,":[195],"daily":[196],"hands-on":[197],"use":[198],"agents,":[202],"author's":[205],"prior":[206],"submission":[207],"NIST":[210],"CAISI":[211],"RFI":[212],"Security":[216],"(DOI:":[217],"10.5281/zenodo.18903117).":[218],"Specific":[219],"recommendations":[220],"for":[221],"NCCoE":[223],"demonstration":[224],"project":[225],"include:":[226],"composite":[227],"binding":[230],"(human":[231],"task":[235],"intent),":[237],"intent-aware":[238,240],"authorization,":[239],"audit":[241,250],"trails":[242],"bridge":[244],"Reasoning-Action":[246],"gap,":[247],"cross-provider":[249],"continuity.":[251]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-03-24T00:00:00"}