What happened
On Oct 15 ServiceNow announced AI Passport, a cryptographically signed credential agents present at runtime to verify authorized scope, with graduated enforcement (redirect/restrict/kill switch) at machine speed, issued by Super Intelligence Control Tower grounded in CMDB/GRC context. NVIDIA is design/launch partner building an enforcement implementation on the NVIDIA Open Agent Safety Platform/OpenShell. Also added shadow-AI detection, 400+ AI-discovery connectors, cost governance, and value intelligence; Operational Resilience is available immediately, with AI Passport and shadow-AI detection expected in Q4 2026.
Why it matters
AI Passport shifts agent governance from after-the-fact audit to pre-authorization at the enforcement point, and is built on open specs so any IdP/enforcement point can issue/verify credentials — a potential cross-vendor standard plus the first major enterprise-workflow vendor to ride on NVIDIA's Open Agent Safety Platform. It directly addresses the 'Excessive Agency'/scope-drift problem at the top of OWASP's AI agent risk list.
Applicability
Enterprises running ServiceNow AI Platform plus third-party agents or MCP servers should evaluate AI Passport in Q4 2026 preview to credential third-party agents; security architects tracking the NVIDIA OpenShell runtime standard for enforcement. Vendors building agent gateways should watch the open credential spec.