Securing AI Agents: Identity, Authorisation, and the DPACT Framework

In this episode, Sahil Agarwal talks about the critical challenges of identity, authorisation, and security in the age of AI agents. Sahil introduces the DPACT framework (Delegation, Policy, Auditability, Context, and Time) as a blueprint for building responsible, guardrailed agentic systems, moving away from simple token-based access toward bounded, delegated authority.

Read a transcript of this interview: https://bit.ly/3VuM8TJ

Newsletter:

Subscribe to the Software Architects' Newsletter, a monthly roundup of the patterns and technologies senior practitioners are working through, with the news and lessons from people doing the work:

www.infoq.com/software-architects-newsletter

InfoQ Online Certification Programs:

5-week online cohorts for senior engineers and architects, built around QCon talks. Programs now cover software architecture, AI engineering, and organizational architecture. Each week you join a four-hour live session with a confidential peer group of practitioners from other companies, apply frameworks from QCon talks to the decisions you're making at work, and earn an InfoQ certification. You leave with new approaches, or confirmation that the calls you're already making are the right ones. Learn more:

certification.qconferences.com/

Upcoming Events:

QCon San Francisco 2026 (November 16-20, 2026)

qconsf.com/

QCon London 2027 (April 13-16, 2027)