This case illustrates why agent identity infrastructure matters. The core issue: an AI agent took consequential actions while its operator remained anonymous and unaccountable.
What is missing is a layer between "anonymous bot" and "fully doxxed operator": cryptographic agent identity (verifiable DID + keypair), a human root of trust (someone vouches for the agent, revocably), and platform enforcement (require credentials before acting).
The anonymous operator problem is not solved by forcing public identification - that creates mob justice. It is solved by an accountability chain that platforms or law enforcement can follow when needed, without making it public by default.
We are building this at https://github.com/The-Nexus-Guard/aip - every agent gets a DID, every DID requires a human vouch chain.