The ten-question passport check.

Ten things a border officer knows about every traveller. How many can you answer about your AI agents today? Four minutes. No email needed.

1 Who is this? Can you name every AI agent that calls a model or a tool on your account, one identity per agent, not one shared key?

A passport, issued and sealed, one per traveller.

2 Who answers for it? For each agent, is a named person written down as responsible?

A sponsor who answers for you.

3 What may it do? Is what each agent may touch a rule checked on every call, not a setting someone remembers?

A visa: why you are here, for how long.

4 What does it cost? Do you know what each agent spends, per agent and per job, before the invoice arrives, and can you pause one?

A card with a limit, in your name.

5 Is it really them? On every call, must the agent prove it holds its own key right now, so a copied credential is useless?

A boarding pass that works once.

6 What happened? Is there a record of every agent action that would show if a line were removed or changed?

Stamps on numbered pages: a missing page shows.

7 What leaves the building? Do you know exactly what agent data leaves your network, and can you show that the content of calls does not?

Customs, and the manifest.

8 Can we pull it? If one agent is compromised, can you stop it everywhere in minutes without rotating keys in every system?

The lost-and-stolen list.

9 Does a stranger trust it? Could a partner verify one of your agents without calling you, and could you verify theirs?

A seal any border can look up.

10 How many are out there? If an unregistered agent started calling your systems today, would anything notice and list it?

The traveller who is not on the manifest.