Agentic Identity Series

01

MON · SEP 21, 2026

Top of funnel · start here

A Crash Course on Agentic Identity

Everyone agrees that agentic security matters and that identity comes first. Far fewer people can explain what that means when an unknown agent shows up and wants access. This session is the plain-language foundation: what happens the moment an agent lands on your website, and what every CISO and fraud leader should be watching for. No prior knowledge assumed. No vendor pitch.

Key takeaways

What "cryptographic identity" actually means, and why a signed credential isn't the same as an API key or an OAuth token
The difference between authenticating an agent and authorizing it, and why most tools only do the first
What happens when every rule you have assumes a human, and agents start transacting for your customers
Why open standards matter here, and how to avoid getting locked into one AI company the way you got locked into your last vendor
What actually happens in the seconds after an agent arrives, and the decisions you get to make at each step

Dylan HobbsFounding Principal Engineer, Vouched

Rosalyn CuratoChief Innovation Officer & GM, Agentic Security, Vouched

Co-presented with Sachio IwamotoDirector, Principal Architect, Kyndryl Research

Recording sent to all registrants

02

TUE · SEP 22, 2026

Industry track · e-commerce

Cryptographic Proof of Identity & Delegation: E-commerce

Also known as “Agentic Identity for Agentic Commerce”

Agentic checkout is no longer theoretical. Mastercard shipped agentic tokens, Visa shipped Trusted Agent Protocol, Google shipped AP2, and x402 is moving on-chain; every network built a different scheme, and merchants are being asked to support all of them. We'll also address what to do with your policy right now, before volume arrives. Built for e-commerce, payments, and fraud teams who want a defensible position early.

Key takeaways

How the competing rails compare: Mastercard Agent Pay, Visa Trusted Agent Protocol, Google AP2, and x402
Why a token presented at checkout doesn't tell you who authorized the purchase
What to verify before the agent reaches checkout: browsing, cart, account access, and pricing
Building dispute and chargeback evidence for agent-initiated purchases
A staged policy you can put in place now, and what changes once agents transact at scale
Supporting multiple protocols without rebuilding your stack for each one

Dylan HobbsFounding Principal Engineer, Vouched

Rosalyn CuratoChief Innovation Officer & GM, Agentic Security, Vouched

Recording sent to all registrants

03

WED · SEP 23, 2026

Industry track · blockchain

Cryptographic Proof of Identity & Delegation: Blockchain

Also known as “Agentic Identity for Blockchain” · the most technical session in the series

When an agent holds spending authority, two questions decide whether you sleep at night: can you take that authority away instantly, and can anyone else verify that you did? We'll also take the quantum question on honestly: no cryptography is unconditionally secure, it's all time complexity, and the practical answer isn't a magic algorithm. It's whether you can rotate keys when you need to. Built for engineers, architects, and any CISO who's been asked about quantum readiness.

Key takeaways

How on-chain revocation works, why append-only status lists matter, and the real latency of verifying against a public ledger
Spend-based policy: caps and constraints inside the signed credential rather than in application code an agent can reason around
Why Shor's algorithm puts every RSA, ECC, ECDSA and EdDSA key at risk, and what that means for agent credentials specifically
Crypto agility as an evaluation criterion: rotating keys through did:webvh without rebuilding trust from scratch
Live demonstration: a human withdraws an agent's spending authority and the next transaction is refused in under a second

Co-presented with Ron QuarantaChairman, WSBA

Recording sent to all registrants

04

THU · SEP 24, 2026

Industry track · healthcare

Cryptographic Proof of Identity & Delegation: Healthcare

Also known as “Agentic Identity for Healthcare”

AI agents are already scheduling appointments, running prior authorization, and touching patient records. HIPAA requires you to know who accessed PHI; when the requester is an agent, most systems can't answer that. The decisions AI touches here run all the way to life and death, and nearly everyone agrees the work needs to move faster. Built for the people who have to sign off together: privacy and compliance on one side, engineering and product on the other. Bring both.

Key takeaways

Answering "who authorized this agent to access PHI" with evidence rather than logs
Capturing and scoping consent for both patient agents and clinician agents
Building an audit trail that survives regulatory review, with proofs any third party can verify
Explaining a decision when the model has changed three times since it was made
How verifiable delegation lets clinical teams move faster, by making guardrails provable instead of procedural
What's safe to put in a prompt in a regulated environment, and who gets to decide

Dylan HobbsFounding Principal Engineer, Vouched

Rosalyn CuratoChief Innovation Officer & GM, Agentic Security, Vouched

Recording sent to all registrants

05

FRI · SEP 25, 2026

General session · open to everyone

Cryptographic Proof of Identity & Delegation: General Session

Also known as “Agentic Identity for Everyone Else”

You don't have to be a bank or a hospital to have this problem. If your teams are deploying agents, or your customers are pointing agents at you, the same questions apply, just without a compliance deadline forcing the answer. Nobody is going to hand you a deadline for agent policy, so the decision comes down to what you find when you actually look at your traffic. For teams who watched the vertical sessions and thought "close, but that isn't quite us."

Key takeaways

How to see what's already happening on your properties before you write any policy at all
Where to start when your data lives in six systems and nobody owns agent policy yet
Letting teams build their own agents without one of them shipping something that costs you a customer
How to know an agent you built is good: what to measure, and what to measure it against
Showing ROI on prevention when the win is a thing that did not happen
Running a proof of concept when procurement takes nine months and the tools ship weekly

Dylan HobbsFounding Principal Engineer, Vouched

Rosalyn CuratoChief Innovation Officer & GM, Agentic Security, Vouched

Stan ByersVice President of Business Development and Transformation, VIA

Recording sent to all registrants

Agentic identity, explained.

Register for this session

Register for A Crash Course on Agentic Identity

Register for the E-commerce session

Register for the Blockchain session

Register for the Healthcare session

Register for the General Session

Register for the full five-session series

You're in.

Everyone agrees identity comes first. Fewer people can say what that means in practice.

A Crash Course on Agentic Identity

Cryptographic Proof of Identity & Delegation: E-commerce

Cryptographic Proof of Identity & Delegation: Blockchain

Cryptographic Proof of Identity & Delegation: Healthcare

Cryptographic Proof of Identity & Delegation: General Session

Get all five sessions on your calendar.