{
  "id": "artifact:when-agent-identity-is-not-enough",
  "slug": "when-agent-identity-is-not-enough",
  "title": "When Agent Identity Is Not Enough",
  "thesis": "Enterprise agent governance becomes insufficient when a legitimate actor can still attempt an illegitimate state transition; identity, runtime enforcement, execution authority, evidence, and convergence must remain distinct control layers.",
  "abstract": "A SharePlane systems thesis comparing Microsoft Agent 365 with GhostMesh, identifying where Microsoft's enterprise agent substrate should be consumed and where state-transition governance adds task-scoped authority, state-bound execution, temporary mutation claims, supersession, authority-aware reentry, evidence, and convergence.",
  "topics": [
    "microsoft-agent-365",
    "ghostmesh",
    "state-transition-governance",
    "execution-authority",
    "agent-governance",
    "entra-agent-id",
    "agent-framework",
    "agent-hooks",
    "shareplane",
    "convergence",
    "control-leverage"
  ],
  "date": "2026-08-27",
  "dateLabel": "Published",
  "published": true,
  "publicationState": "PUBLISHED",
  "updated": "2026-08-27",
  "sourceDates": {
    "created": "2026-08-27",
    "updated": "2026-08-27",
    "published": "2026-08-27"
  },
  "kind": "Systems thesis",
  "sourceFamily": "SharePlane Platform",
  "href": "artifacts/when-agent-identity-is-not-enough/index.html",
  "contextHref": "records/when-agent-identity-is-not-enough/context.txt",
  "recordHref": "records/when-agent-identity-is-not-enough/work.json",
  "receiptHref": "records/when-agent-identity-is-not-enough/receipt.json",
  "packageHref": "downloads/works/when-agent-identity-is-not-enough.zip",
  "canonicalUrl": "https://shareplane.malott.ai/artifacts/when-agent-identity-is-not-enough/",
  "sources": [
    {
      "id": "source:microsoft:agent-365",
      "type": "primary-vendor-documentation",
      "title": "Microsoft Agent 365 and Microsoft Agent Framework documentation",
      "locator": "https://learn.microsoft.com/en-us/microsoft-agent-365/",
      "role": "Primary source for Agent 365 governance, Entra Agent ID, tool governance, Agent Framework checkpoints, human-in-the-loop behavior, and Agent Hooks.",
      "publiclyExposed": true
    },
    {
      "id": "source:ghostmesh:architecture",
      "type": "canonical-owner-architecture",
      "title": "GhostMesh Architecture",
      "locator": "https://ghostmesh.ai/architecture/",
      "role": "Canonical source for GhostMesh closed-loop architecture, execution authority, state-transition governance, evidence, reconciliation, and provider-independent boundaries.",
      "publiclyExposed": true
    },
    {
      "id": "source:shareplane-platform:issue-640",
      "type": "governing-owner-authority",
      "title": "Publish When Agent Identity Is Not Enough — Agent 365 / GhostMesh SharePlane thesis",
      "locator": "https://github.com/pinklon/shareplane-platform/issues/640",
      "role": "Governs Tony Malott authorship, semantic and visual lock, SharePlane shell/trust-stack integration, exact native assets, merge authority, and canonical Production publication.",
      "publiclyExposed": true
    }
  ],
  "posture": "Owner-authored SharePlane systems thesis developed through direct review of current Microsoft primary documentation and the canonical GhostMesh architecture, with Microsoft product facts separated from Tony Malott's architectural synthesis and recommendations.",
  "media": [
    {
      "path": "artifacts/when-agent-identity-is-not-enough/assets/when-agent-identity-is-not-enough-hero.png",
      "description": "SharePlane Thesis hero for When Agent Identity Is Not Enough, showing identity and attestation, policy and intent, execution authority, observability and evidence, the semantic mesh, orchestration and runtime, bounded execution paths, and evidence and convergence.",
      "embedded": false
    },
    {
      "path": "artifacts/when-agent-identity-is-not-enough/assets/01-four-control-planes-five-green-lights.png",
      "description": "Four control planes and the Five Green Lights Problem",
      "embedded": false
    },
    {
      "path": "artifacts/when-agent-identity-is-not-enough/assets/02-state-transition-governance.png",
      "description": "State-transition governance, execution passport, and three failure axes",
      "embedded": false
    },
    {
      "path": "artifacts/when-agent-identity-is-not-enough/assets/03-authority-aware-reentry.png",
      "description": "Authority-aware reentry",
      "embedded": false
    },
    {
      "path": "artifacts/when-agent-identity-is-not-enough/assets/04-four-invariants-handshake.png",
      "description": "Four invariants and architectural handshake",
      "embedded": false
    },
    {
      "path": "artifacts/when-agent-identity-is-not-enough/assets/05-microsoft-capabilities-ghostmesh-should-use.png",
      "description": "Microsoft capabilities GhostMesh should use",
      "embedded": false
    },
    {
      "path": "artifacts/when-agent-identity-is-not-enough/assets/06-microsoft-next-strategic-frontier.png",
      "description": "What Microsoft should consider next and the strategic frontier",
      "embedded": false
    }
  ],
  "schema": "shareplane.portable-work.v1",
  "author": {
    "name": "Tony Malott",
    "url": "https://malott.ai/"
  },
  "content": {
    "mediaType": "text/plain",
    "path": "records/when-agent-identity-is-not-enough/context.txt",
    "sha256": "9a435649cfcd40caca63e71b9ee462bd882231cf4cd416638eccae045532a244",
    "complete": true,
    "extraction": "Native presentation reading order; scripts, styles, and platform chrome excluded."
  },
  "relationships": [
    {
      "source": "artifact:when-agent-identity-is-not-enough",
      "target": "artifact:the-agent-is-not-the-security-boundary",
      "type": "companion",
      "group": "foundations",
      "label": "Companion: The Agent Is Not the Security Boundary",
      "explanation": "The security-boundary thesis separates model capability from surrounding system controls; this Work extends the distinction into current execution authority, state, claims, and convergence."
    },
    {
      "source": "artifact:when-agent-identity-is-not-enough",
      "target": "artifact:the-agent-is-not-the-product-the-control-plane-is",
      "type": "companion",
      "group": "foundations",
      "label": "Companion: The Agent Is Not the Product. The Control Plane Is.",
      "explanation": "The control-plane thesis establishes the durable product around agents; this Work compares that principle with Microsoft's Agent 365 enterprise governance substrate."
    }
  ],
  "representations": {
    "html": "artifacts/when-agent-identity-is-not-enough/index.html",
    "text": "records/when-agent-identity-is-not-enough/context.txt",
    "json": "records/when-agent-identity-is-not-enough/work.json",
    "package": "downloads/works/when-agent-identity-is-not-enough.zip"
  }
}