The Airport

The airport

Passports for Agents. A series on identity and control for AI agents. Episode two: The Airport. Last time, the wallet: six documents that say who you are, who answers for you, what you may do, and what it will cost. This time, the airport, where every one of them is checked. And the question that matters most: what stops a photocopy?

Boarding pass and e-gate

Check-in issues a boarding pass: this flight, this gate, this hour, scanned once. A passport alone boards nobody. And a photocopy of yesterday's pass is worthless, which is exactly why it exists. At the e-gate, the passport says which face to expect, and the camera checks that face is here, now. Stealing the document does not steal the face.

The border desk, customs, and the camera

Then the border desk. The officer checks the seal against a public directory, checks the lost and stolen list, checks the visa, and only then stamps the page. Report a passport lost once, and it dies at every border on the next scan. There is one way out of the country, and it runs through customs. The airline gets a passenger, not your passport file. And look up: a camera that records everyone and stops nobody, next to a barrier that can. A country chooses which one is switched on.

Between countries

How does a border in one country trust a passport from another it has never dealt with? Two rules that never mix. Rule one: every country publishes its seal in a shared directory, so any officer anywhere can verify any passport without calling the issuing country. Rule two: each country decides for itself whom it admits, and on what terms. Visa waiver for the trusted, visa on arrival for the known, an interview for the rest. Verify globally, trust locally. And every destination publishes, in advance, what papers to bring.

Head office

Head office never travels with you, but it receives the manifest: who flew, where, when, and what it cost. It never receives the luggage. A child travels on a letter signed by a parent, and the record names the parent first. At home you use the ID you already have. Abroad, you carry the passport as well. Nobody suggests the passport should replace your staff card.

The unregistered traveller

One last pin on the map, and it is the one that matters. The employee who flew on the company card and told nobody. Every travel desk has a name for that: the unregistered traveller. Now you have the whole system. Fourteen pieces, ten questions, each answered by paper, a check, or a record.

The fact, and the ask

Now the fact. In August 2025, attackers stole the access tokens of a widely used sales chat agent, and used them to pull customer data from hundreds of companies. The tokens worked from anywhere, for anyone, because nothing asked for the boarding pass. A photocopy was enough. Next time: Harbour and Vine. One company, five agents, and seven questions it cannot answer. Until then, count your agents. Take the ten-question passport check.