Don't give your agent the master key - Ship 26 NYC
As soon as you ship an AI agent to production, you're an identity company. You didn't sign up for it, it wasn't on the pitch deck, but you now own three questions: who did it, what was it allowed to do, and can you trace back everything it did? Recorded live at Vercel Ship 2026 in New York City, Ari Schapiro (VP of Developer-Led Growth, Auth0) and Chris Sev (Director of Developer Relations, Auth0) make the case that the defining challenge of the agent era isn't making agents smarter. It's making them trustworthy. CHAPTERS 0:00 The boring login guy, vindicated 1:39 Five principles for trustworthy agents 5:05 You're an identity company now 6:17 One key, everything, forever 7:04 Prompt injection: the token has to say no 8:20 The five patterns 11:11 Demo: Knox reads email, searches docs, books Japan 15:52 The audit trail 16:32 The hard part isn't intelligence, it's identity LINKS Auth0 → https://auth0.com Auth0 Developer Center → https://developer.auth0.com Ship 2026 recap → https://vercel.com/blog/vercel-ship-2026-recap Start building → https://vercel.com FOLLOW VERCEL X → https://x.com/vercel LinkedIn → https://www.linkedin.com/company/vercel GitHub → https://github.com/vercel #Vercel #VercelShip #Auth0 #AIAgents #Identity #Security