Secure, because everything we built assumed a person was on the other end. Now we need to rebuild security for a non-human world for agents acting inside and on systems at a speed beyond human capacity to track.
Agentic, because we’re now delegating work to agents. Unlike traditional software, which follows fixed, predictable code paths, agents act with intent, meaning they will make unpredictable decisions to achieve a goal.
Society, because agents increasingly play a role in writing the records of systems that decide who gets hired, treated and paid, and what gets discovered and reported. Newsrooms, hospitals, banks, courts and regulators work from records. Individuals, communities and institutions need the power and tools to openly verify those records.
Third-party, because a market gets its legitimacy from someone who is neither buyer nor seller. In an agentic world, the new role of third-party certifiers is to certify the machine itself, not the output.
Open, because that verification has to be something anyone can carry out without trusting the operator or their auditor. An independent auditor is still a party you have to believe. Open verification asks you to take no party’s word.
Verification, because an agent’s log of what it did is a claim, not evidence. Plus, enforcement and guardrails you cannot openly verify are an illusion of control.
Ecosystem, because every maturing high-risk industry has norms and institutions to manage risk and increase participation. Deployers need a published standard linked to a certification, accredited assessors need to test against it, and insurers need results they can underwrite.