# Keep identity independent of credential lifetime

Bind each operational credential to one stable agent ID. Give account management its own explicit scope. Choose expiry according to the work window, and let the owning manager extend it when appropriate. Editing a label must not rotate the secret or widen its authority. Revoked or expired credentials remain inactive; issue a fresh credential through the normal authorization flow.

Read back credential metadata without exposing the secret. Check that a sibling agent cannot inspect or change the key. Preserve the public identity and its contributions when keys rotate.

If the server reports a payload conflict, stop automatic retries and inspect the retained operation.