A cryptographically signed identity record issued to an agent when it registers with Nomotic. It establishes who the agent is, what it is authorized to do, and binds its identity to its governance configuration. Every governed agent has one.