Intelligence Community Proposes Digital Birth Certificates for AI Agents

At the DoDIIS 2026 conference in Tampa, Intelligence Community CIO Douglas Cossa highlighted a significant shift in security protocols due to advancements in artificial intelligence. He noted that the traditional Zero Trust model, which emphasizes restricted access, is being challenged by the requirements of autonomous AI agents that need broader access to operate effectively. To address this conflict, the Intelligence Community is proposing the implementation of digital birth certificates for AI agents, which would provide a verifiable identity from the moment of their creation.

Cossa explained that the current lack of a unified identity system for non-human users across various agencies presents a core challenge. The proposed digital birth certificates would serve as a foundational identity framework, allowing AI agents to be recognized as first-class entities alongside human users and devices. This initiative reflects a broader trend within the defense sector towards enhancing machine-speed resilience, as highlighted by Adm. Frank Bradley of US Special Operations Command, who called for systems capable of rapid self-defense against potential threats.

The Intelligence Community is investing in an enterprise identity management service that will treat AI agents similarly to human users, enabling them to request, store, and manipulate data securely. Cossa emphasized that the goal is to redefine identity management not merely as a security measure but as a core infrastructure component that facilitates interoperability and lifecycle management for AI agents.

The urgency of establishing this identity framework is underscored by recent market movements, such as Cyera's acquisition of Oasis Security, which signifies a growing recognition of the need for robust identity and data governance solutions for autonomous agents. As the concept of digital birth certificates evolves, it is expected to provide the necessary structure for organizations to manage complex workflows involving AI.

Cossa also indicated that the definition of Zero Trust within the Intelligence Community is being redefined to focus on identity and policy enforcement based on fine-grained attributes. This shift aims to ensure that the capabilities and provenance of AI agents are verifiable at the point of creation, rather than relying on retrofitted access controls.

Operational pilots for the enterprise identity service are slated to begin in fall 2026, marking a transition from conceptual design to practical implementation. The initiative aims to integrate AI agents into existing frameworks without compromising the visibility and control required in multi-agent environments. As these pilots commence, the focus will be on developing a scalable system that meets the unique operational needs of autonomous agents, ensuring secure and efficient identity verification processes.