zero standing privilege
In short: Zero standing privilege is the goal that no identity holds permanent access. Access exists only while a task runs and is granted just in time. For AI agents, it means no stored API keys or always-on admin roles, only short-lived, scoped grants.
Where does it show up in practice?
Treat it as a direction of travel and measure the share of agents still holding standing credentials.