Skip to content

Synthetic demo · No customer connectors attached · Fixture snapshot 24 Sep 2026, 06:15 UTC

Identities

Human identity

Maya Chen

Human support engineer who delegates sessions to Support Copilot. Human identity is separate from the agent's workload identity.

Observed at 24 Sep 2026, 06:15 UTCStatus as of fixture 24 Sep 2026, 06:15 UTCSample data
Credential: not applicable as of fixtureObserved

Issuer & attestation

SPIFFE ID
None — no workload identity
Trust domain / issuer
— · Workforce IdP (sample)
Credential type
No SVID
Issued / expires
— → —
Attestation source
SSO sign-in with phishing-resistant MFA
Bound agent / deployment
—no deployment binding
SVID reference (non-secret)
None — no SVID presented
Delegated human
None recorded

Private keys, raw tokens and certificates are never displayed.

Validation checks

Illustrative trace; X.509 and JWT checks are distinct.

  • SSO sessionSession observed 25 Sep 10:42 UTC.Pass

Credential lifecycle

Short-lived credentials rotate; expiry or bundle change can invalidate a path. Revocation is not instantaneous.

No workload credential lifecycle for this identity.

Policy & permission bindings

Separate from identity.

Scroll table sideways for more columns →

PolicyGrantConditionRevState
grp-supportSupport group memberHR managedr31Pass

Downstream access paths

Potential reach, not observed disclosure.

  • Support Copilot → Ticket search → Customer ticketsVia delegation

Audit events

Scroll table sideways for more columns →

TimeActorEventEvidence
24 Sep 2026, 06:01 UTCidp (sample)session.delegated support-copilotev-nhi-501