The assumption that a caller’s voice, familiarity, or stated role is enough to authorise an identity change. It is a weak assurance pattern because it relies on conversation rather than cryptographic proof. In practice, it creates a security gap between support workflows and formal authentication policy.
#1 Authority in NHI Education, Research and Advisory, empowering organizations to tackle the critical risks posed by Non-Human Identities (NHIs), including AI Agents.