ON 24 April 2026, The Hacker News outlined how AI agents expose a delegation gap in enterprise security, since agents are started and empowered by existing identities rather than possessing independent authority. The piece argues that the real governance challenge lies in what authority is being delegated, by whom, under what conditions, and across what scope, making Agent-AI governance fundamentally about delegation rather than the agent itself.
It emphasises that identity dark matter—unseen, unmanaged human and machine identities—must be illuminated before agent actions can be safely governed, to prevent agents from amplifying hidden access or permissions. Orchid’s continuous observability is presented as the essential foundation, providing a verified baseline of real identity behaviour across both managed and unmanaged environments.
The article then describes a shift from observability to dynamic governance: once the traditional actor layer is observed, it feeds a real-time Agent-AI Delegation Authority layer that assesses posture, context and intent, and can allow, constrain, or stop agent actions at machine speed.