The CAI Research Library
Structural insight on digital identity & access infrastructure.
Long-form notes on programmable controls, coverage instances, and the architectural choices for modernizing capabilities.
-
AI Agent Identity and Access
AI agents are workload identities with added agentic attributes: their identity layer is converging while authorization is not, and the consequential incidents are access failures. This report frames agent risk by type and argues for runtime authorization as the key control to manage risk.
Members 30 min read -
Identity and Access Management
Identity and access management is now the enterprise control plane, yet most programs are organized around tools, not the reality they govern. This report introduces the Control and Coverage Matrix as an organizing frame and argues for modernizing controls into programmable, runtime-adaptive policy.
Members 26 min read