When an agent holds spending authority, two questions matter most: can you take that authority away instantly, and can anyone else verify that you did? This on-demand session, the most technical in the series, also takes on the quantum question honestly. The practical answer is not a magic algorithm. It is whether you can rotate keys when you need to. Built for engineers, architects, and any CISO asked about quantum readiness.
Part of Agentic Identity, Explained, a five-part webinar series from Vouched. We wrote KYA-OS, the open standard for agent identity and delegation, and donated it to the Decentralized Identity Foundation. Each session shows the standard working in a real environment.
Key takeaways
- How on-chain revocation works, why append-only status lists matter, and the real latency of verifying against a public ledger
- Spend-based policy: caps and constraints inside the signed credential, not in application code an agent can reason around
- Why Shor's algorithm puts every RSA, ECC, ECDSA and EdDSA key at risk, and what that means for agent credentials
- Crypto agility as an evaluation criterion: rotating keys through did:webvh without rebuilding trust from scratch
- Live demo: a human withdraws an agent's spending authority and the next transaction is refused in under a second
Speakers
Ron Quaranta
Chairman, WSBA (co-presenter)