Typed, tiered, owned
Autonomy decides the governance.
Service accounts, system accounts, applications, IoT devices and AI agents are classified into four autonomy tiers — from AI-assisted to AI-to-AI — because an autonomous agent needs different guardrails than a cron job.
- Four autonomy tiers derived from identity type
- Ownership coverage (% of NHIs with a named owner) as a KPI
- Per-identity blast-radius: what could this NHI reach if compromised?
the NHI estate — owner, risk, last-used per machine identity
