Human identity growth is linear. Agent identity growth is combinatorial. Every workflow spawns agents. Every agent spawns task identities. This is already observable in production environments. Legacy IAM breaks because directories assume permanence, roles assume predictability, and audits assume humans. None apply to autonomous agents. The future is an identity fabric: ephemeral credentials, policy-as-code, automated revocation, and telemetry-driven enforcement. This directly informs research on identity-centric world models for national and infrastructure-scale cybersecurity, where identity becomes the state variable through which governance is enforced. By 2028, organizations that fail to modernize identity will not scale AI safely.

