Identity & Trust should contribute 10-20 candidate terms + 1 line disambiguator for each term

[malbasic]

See parent issue #12

[galesky-a]

Moved back and forth because our list is mostly ready but we do want to review a small list of items

[kmishra1204]

Adding a supplemental enterprise-agentic angle in the same rough candidate-term shape requested by #12. Keeping this as a comment, not a PR, and treating these as candidate disambiguators rather than definitions.

1. Agent identity - The identity assigned to an autonomous or assisted agent when it acts inside a system.
2. Human principal - The person whose intent, access, or accountability is represented in an agent action.
3. Workload identity - A non-human runtime identity used by an agent, service, connector, or tool.
4. Delegated authority - Scoped permission granted to an agent to act for a user, service, or organization.
5. Acting-on-behalf-of - The relationship linking an agent action to the principal it represents.
6. Credential boundary - The limit around where secrets, keys, or tokens may be stored, used, or forwarded.
7. Trust boundary - A system edge where identity claims, permissions, or assurances must be revalidated.
8. Identity proofing - The process used to establish that a user, agent, service, or tool is who it claims to be.
9. Agent attestation - Evidence about an agent's code, runtime, policy, provenance, or execution environment.
10. Tool authorization - The decision that a specific identity may call a tool for a stated purpose.
11. Consent record - A durable record that a user approved delegated access or an agent-performed action.
12. Session binding - The association between identity, session, device or runtime, and agent execution.
13. Token exchange - A mechanism for converting one credential or context into another scoped credential.
14. Revocation signal - An event or policy update that withdraws access, delegation, consent, or trust.
15. Trust registry - An authoritative source for trusted issuers, agents, tools, policies, or attestations.
16. Accountability chain - The traceable link from identity to delegation to agent action to outcome.

I intentionally did not de-dup these against other workstreams, per #12. Happy for the WG owners to rewrite or discard anything that does not fit the Identity & Trust lane.