The FBI confirmed this week that a North Korean remote IT worker had been employed by a US government agency, building on a known pattern of DPRK operatives infiltrating private companies and crypto exchanges. At almost the same moment, researchers at the University of Michigan and University of Pennsylvania published a paper on arXiv titled Agentic AI: User Empowerment or Enclosure, which argues that AI systems acting on users' behalf face a fundamental tension: the more capable the agent, the more opaque its identity and allegiance become.
The Identity Verification Problem at Every Scale
The North Korea story is, at its core, an identity verification failure. A human being constructed a plausible digital persona, passed background-adjacent checks, accessed systems, and extracted value. The agentic AI paper describes a structurally identical risk at the software layer: systems that can act on your behalf can also be captured, redirected, or constructed to serve different principals than the user believes. Both cases expose the same vulnerability: we have built powerful access architectures on top of extremely weak identity infrastructure. The Flow-by-Flow paper on AI governance in high-loss domains adds a third node, arguing that human-in-the-loop oversight becomes structurally untenable at scale. At some point, the loop disappears.
Zuckerberg's Distributed AI Argument and Its Blind Spot
Mark Zuckerberg's 6,500-word essay, covered by Fast Company, argues that AI is safest when distributed widely rather than concentrated. It is a Silicon Valley-native argument about decentralization as a safety property. The North Korea case suggests the opposite: distributed access without verified identity is not safety, it is attack surface. You cannot have agentic AI everywhere and also know who is running it. Zelenskyy's warning this week that Russia is deploying North Korean military equipment in Ukraine is the kinetic version of the same logic: distributed supply chains, obscured principals, plausible deniability at every node. The identity layer is now a geopolitical battlefield.