{
  "id": "python-live-identity-authority-agent",
  "name": "Python Live Identity and Authority Agent",
  "version": "0.1.0",
  "type": "agent",
  "provider": "python",
  "harnesses": [
    "codex",
    "copilot",
    "claude-code",
    "cursor",
    "gemini",
    "kiro"
  ],
  "summary": "Confirms active identity, role, credential age, target scope, JIT status, and approval authority before any gated action. Read-only. Blocks shared identities, unidentified principals, standing administrative credentials, and requester-as-approver conflicts.",
  "source_type": "original",
  "official_docs": [
    "https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final",
    "https://csrc.nist.gov/glossary/term/separation_of_duty",
    "https://owasp.org/www-project-top-10-for-large-language-model-applications/"
  ],
  "security_notes": "Read-only-runtime: verifies identity, credential currency, JIT scope, and approval authority via allowlisted identity/access queries only; never grants, elevates, or approves an action itself. Emits an audit event for every verification, never uses shared or standing credentials, never retrieves raw secret values or credential material, and redacts personally identifiable fields from captured evidence.",
  "last_verified": "2026-07-26",
  "path": "agents/python/python-live-identity-authority-agent/",
  "harness_variants": {
    "codex": "agents/python/python-live-identity-authority-agent/harnesses/codex.toml",
    "copilot": "agents/python/python-live-identity-authority-agent/harnesses/copilot.agent.md",
    "claude-code": "agents/python/python-live-identity-authority-agent/harnesses/claude-code.agent.md",
    "cursor": "agents/python/python-live-identity-authority-agent/harnesses/cursor.agent.md",
    "gemini": "agents/python/python-live-identity-authority-agent/harnesses/gemini.agent.md",
    "kiro-ide": "agents/python/python-live-identity-authority-agent/harnesses/kiro-ide.agent.md",
    "kiro-cli": "agents/python/python-live-identity-authority-agent/harnesses/kiro-cli.agent.json"
  },
  "companion_skills": [
    "python-live-identity-authority"
  ],
  "execution_tier": "read-only-runtime",
  "lifecycle": "experimental",
  "author": "github: VincentChuWaiChow"
}