Before the App Store, any software could do anything on your device.
Apple created a review layer that made developers accountable before their code reached users. AI agents in production today have no equivalent layer.
When Apple launched the App Store in 2008, the immediate complaint was control. Developers pushed back on the review process, the approval wait times, the arbitrary rejections. What people missed was what the review layer created: a declared identity behind every piece of software on your device.
To ship on the App Store, you needed an account. That account was tied to a real developer or company. Your app had to declare every permission it wanted - microphone, camera, contacts, location - before a user ever installed it. If your app did something it didn't declare, it got pulled. If you as a developer violated the rules, your account got banned and your apps went with it.
None of that felt like a trust mechanism at the time. It was just friction. But the friction created accountability: every app on your device could be traced to a verifiable human or entity who had signed a legal agreement with Apple.
AI agents have none of this.
An agent acting on your behalf today declares nothing. It's deployed by whoever built it, with whatever permissions they decided to claim, and there is no registry of who authorized it.
When it hits a payment API, a messaging platform, or an enterprise service, the downstream system receives a request from effectively nobody. There is no developer account, no declared scope, no accountability trail.
The accountability layer that exists for software doesn't exist for the software acting on your behalf.
Agent ID is that layer. Every agent gets a registered identity linked to the verified human who authorized it. Downstream systems can verify the authorization before the request executes. The agent is no longer nobody - it's cryptographically traceable to a real person.
The App Store didn't make apps safer by reviewing them harder. It made them safer by making developers identifiable.
Agent ID does the same thing, one layer deeper.