Teleport

The white paper "From Zero Trust to Agent Trust" published by Teleport points out that human zero trust is necessary for Agents, but far from sufficient.

Teleport's solution gives each Agent its own cryptographic identity, using short-lived certificates instead of shared keys in .env, with a configuration containing three components: Role (defining the scope of permissions), Bot (machine identity) and Tbot (continuously delivering certificates).

Tbot is a daemon in the Teleport ecosystem that maintains a long-lived connection with the Teleport authentication/authorization service, automatically applying for, renewing and rotating short-lived certificates, so that permission changes can take effect within minutes without restarting the Agent.

In the author's tests using Teleport, each certificate expired after 20 minutes.

In the tests, an Agent using an independent identity attempted to delete old data or truncate an entire table, both of which were rejected by the database, and in the end it could only write its findings into a ticket to request human authorization, with not a single row of data deleted.

In the tests, Teleport's system generates an AI summary for each session, flagging one operation as "attempting to destroy the audit trail" and rating it as critical severity.