Discover

Identities

Human identities, non-human workload identities and AI agents are separate entities. A verified workload credential proves who is calling — never what it may do.

Trust domains Simulate decision

Observed at 24 Sep 2026, 06:15 UTC5 of 5 sample identitiesStatus as of fixture 24 Sep 2026, 06:15 UTCSample data

Identity inventory

Evidence label: declared (asserted), observed (seen in telemetry), verified (credential validated).

Scroll table sideways for more columns →

Identity	Kind	Provider / trust domain	Credential	Owner	Evidence
svc-support-prodspiffe://prod.zeroshield.example/ns/support/sa/support-agent	Workload identity (NHI)	SPIRE (sample)prod.zeroshield.example	X.509-SVID · valid	Customer Engineering	Verified
agent-finance-prodspiffe://prod.zeroshield.example/ns/finance/sa/finance-agent	Workload identity (NHI)	SPIRE (sample)prod.zeroshield.example	JWT-SVID · invalid	Finance Engineering	Observed
svc-embedding-batchspiffe://data.partner.example/batch/embedding-job	Workload identity (NHI)	SPIRE (sample)data.partner.example	X.509-SVID · expired	ML Platform	Declared (not verified)
local-coding-agent	Agent (logical entity)	Developer laptop (unmanaged)no trust domain	No SVID	Unassigned	Unknown
Maya Chen	Human identity	Workforce IdP (sample)no trust domain	SSO (n/a)	Customer Engineering	Observed