Static API keys fail agent

Short summary

Static API keys require human provisioning and don't support per-agent identity or delegation, making them poor primitives for autonomous agents. The Sovereign Agent Lifecycle (SAL) protocol instead uses self-generated Ed25519 keypairs and challenge-based short-lived tokens, enabling autonomous birth, provenance tracking, and scope-specific authorization. API keys remain useful for legacy systems but shouldn't be the default for agent authentication.

• •Static API keys require human provisioning and create indistinguishable agent instances
• •SAL enables agents to self-generate identity and request short-lived scoped tokens without human intervention
• •Challenge-based authentication supports per-agent provenance, delegation, and autonomous spawning

Generated with AI, which can make mistakes.