Agent (logical entity)
local-coding-agent
A local coding agent calling the internal MCP gateway with a personal access token. No workload identity; decisions default to deny.
Observed at 24 Sep 2026, 06:15 UTCStatus as of fixture 24 Sep 2026, 06:15 UTCSample data
Credential: unverified as of fixtureUnknown
Issuer & attestation
- SPIFFE ID
- None — no workload identity
- Trust domain / issuer
- — · Developer laptop (unmanaged)
- Credential type
- No SVID
- Issued / expires
- — → —
- Attestation source
- None — self-reported process name only
- Bound agent / deployment
- local-coding-agentno deployment binding
- SVID reference (non-secret)
- None — no SVID presented
- Delegated human
- usr-contractor-12 (claimed, unverified)
Private keys, raw tokens and certificates are never displayed.
Validation checks
Illustrative trace; X.509 and JWT checks are distinct.
- Workload credential presentNo SVID presented.Unknown
- Delegation proofHuman link is self-asserted.Unknown
Credential lifecycle
Short-lived credentials rotate; expiry or bundle change can invalidate a path. Revocation is not instantaneous.
24 Sep 2026, 05:58 UTC
First seen at MCP gatewayUnknownUnknown
Policy & permission bindings
Separate from identity.
No policy bound — requests default to deny.
Downstream access paths
Potential reach, not observed disclosure.
- local-coding-agent → postgres-query (MCP) → Finance warehouseAttempted; unknown identity
Audit events
Limitations
- Cannot distinguish the agent from its operator without workload attestation.