
NIST Just Proved Rules Aren't Enough. Intent-Based Identity Is What Comes Next.
Darktrace's conclusion from the NIST analysis is that AI security must shift from rules to behavior. This is right. But behavioral detection alone has a limitation that matters for enterprise AI agent governance: it tells you when something looks different. It does not tell you whether what is different is wrong. The answer is not behavior alone. It is identity and intent as the reference layer against which behavior is evaluated.
Amir Ofek


