CNCF's shadow-AI post makes the case for treating agents as identities

Give an AI agent a Git token and a Kubernetes ServiceAccount. Now ask which team owns it, and where its logs go. If you cannot answer both in one breath, congratulations: you have shadow AI in your pi...