Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Know Your Customer (KYC) can establish who authorized a task; it cannot, by itself, establish that a software agent’s later actions still fit the person’s instructions. Karina Portugal’s case for “Know Your Agent” is to make an agent’s identity, delegated authority, and actions visible to the institutions handling them—without requiring a person to approve every step.

Why KYC is not enough for an AI agent

Traditional identity checks answer a question about a person: who is the customer, and can they access a service? An agent introduces a second question: does this particular action still fall within what the customer authorized?

In an October 6, 2026 article, HackRead reports Portugal’s example of an agent buying a ticket. Permission to purchase does not settle whether a later purchase still meets the customer’s parameters. The important distinction is between authenticating the person who delegated a task and checking the agent’s actions as it carries out that task.

Portugal’s concern is not that every agent is malicious. It is that a system may be unable to distinguish ordinary customer activity, an authorized agent acting for that customer, and an attacking bot. In a September 29, 2026 interview with The AI Journal, she describes this as a problem of attribution and delegated authority: institutions should be able to determine who an agent acted for, what limits applied, and what happened.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

What “Know Your Agent” would require

Portugal’s proposal is a discipline for making delegation legible, not a universal standard or a claim that one existing product already solves the problem. Its practical aim is to connect an agent’s actions to an identifiable requester and a bounded task.

Define authority around the task

Permission should specify what the agent may do for the task, rather than treating a standing credential as open-ended authority for future actions. For a ticket purchase, that means assessing the purchase against the customer’s approved parameters, not merely noting that the agent has access to a purchasing account.

Limit credential lifetimes

The sources recommend short-lived credentials, but do not specify a universal duration. The point is to avoid letting a credential outlive the authority it represents or become a blanket pass for unrelated future actions.

Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Check permission when consequential actions occur

A credential can be valid while a particular action is out of scope. Portugal therefore argues for checking authorization during execution, not only when access is first granted. The decision should consider whether the current request fits the task and its limits.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Evaluate behavior against the approved goal

Instead of relying only on patterns associated with human users, an institution would assess whether the agent’s current action fits the authorized task and context. The interview does not prescribe a particular technical method for making that assessment.

Keep records that connect delegation to action

Useful records should link the requester, approved task and limits, credential, and action. That connection can help an institution reconstruct what was authorized if a transaction is disputed. Ordinary activity logs may show that an event occurred; Portugal’s recommendation is to preserve enough context to explain why the agent was permitted to do it.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

How to make verification work without constant prompts

Continuous verification does not have to mean asking the customer to confirm every step. Portugal warns that repeated intervention can add friction; her stated design aim is to make the boundaries machine-checkable so routine actions within scope can proceed while the system evaluates them.

Her approach leaves room for additional review when an action falls outside the approved limits or presents a concern. The interview does not specify a universal escalation rule or a measured balance between security and convenience. In Portugal’s words, “The design constraint is that verification has to be strong and almost entirely invisible.” That is her design principle, not a demonstrated outcome for every deployment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Questions to use when evaluating an agent system

The following checklist translates Portugal’s recommendations into practical questions for an enterprise. It is an editorial framework, not a formal certification or a comparison of named products.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
  • Authority scope: Is access standing, or is permission tied to a particular task and its limits?
  • Credential lifetime: Can credentials expire, and does their lifetime reflect the authority they carry?
  • Timing of checks: Does the system evaluate authorization only at login or deployment, or again when consequential actions occur?
  • Evidence: Can an investigator connect the human requester, approved task, credential, and action?
  • Risk classification: Can the system distinguish a customer, an authorized agent, and a malicious bot rather than treating activity as simply legitimate or fraudulent?
  • Customer friction: Can routine in-scope actions proceed under machine-checkable limits, with a path to review when those limits are exceeded?

The interview does not identify a universal implementation, credential lifetime, or comparative evidence showing that one approach performs better than another. These questions help expose whether a deployment makes delegated authority understandable and reviewable.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the examples and statistics do—and do not—show

HackRead discusses access to context and tools, the Model Context Protocol, and Stripe’s agent-payment system as examples in the broader conversation. That reporting does not independently establish the specifications or current availability of those implementations, or show that they implement Portugal’s recommendations.

HackRead also reports a Gartner projection that 40 percent of enterprise applications would include task-specific AI agents by the end of 2026, compared with less than 5 percent in 2025. This is a projection as reported in 2026, not a confirmed end-of-year outcome. The same article attributes a 1,210 percent increase in AI-driven or “non-live” fraud during 2025 to Pindrop internal data. That figure is attributed reporting, not an independently verified industry-wide fraud rate.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

Portugal is quoted in HackRead as saying, “A compromised agent keeps its legitimate credentials and session tokens,” meaning that downstream systems may see an action that appears authorized. This is her warning about a possible failure mode, not evidence that every compromised agent behaves this way. HackRead also mentions NIST’s voluntary AI Risk Management Framework in connection with autonomy and lifecycle risk; that mention should not be read as NIST endorsing Portugal’s “Know Your Agent” formulation.

What Portugal’s proposal does not establish

The recommendations describe controls and questions for identity governance; they do not amount to a formal, universally adopted standard. The sources provide no measured evidence that the proposed controls prevent agent misuse, no prescribed technical architecture, and no universally applicable credential duration.

In The AI Journal interview, Portugal says, “The safest position is not refusal, it is making agent activity legible.” That captures her argument: institutions need a way to understand and govern authorized delegation, rather than treating all non-human activity as either ordinary customer behavior or an attack. It remains a recommendation attributed to Portugal, not proof that any particular vendor or deployment has achieved it.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.