How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · Autonomous Agent Change Control Constraints
Scoped, non-human identities for AI
Verify that AI systems run with scoped, non-human identities (service accounts, workload identities, OIDC-issued ephemeral tokens), and that those identities cannot be used to promote their own generated artifacts across environments.
OWASP AISVS v1.01, requirement AC.8.2
In plain English
Give AI systems their own scoped, non-human identities, such as workload identities or short-lived OIDC tokens, which cannot promote their own output between environments.
What good looks like
- AI systems use dedicated identities.
- Credentials are short-lived.
- Identities lack promotion rights.
How teams usually do it
- Workload identity federation for CI and agent runners.
Evidence an auditor would accept
- Identity configuration.
Common mistakes
- Agents running with a developer's personal token.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.