Zero-knowledge credentials that let agents prove who they are, what they're allowed to do, and that they aren't acting as proxies for banned or malicious entities.