The Cyber Safety Review Board's April 2024 report on Storm-0558 documented four credential-management failures at Microsoft (a signing key seven years past rotation; an environment-separation boundary enforced procedurally rather than technically; a crash-dump leak the existing scanning could not see; an anomaly-detection baseline that did not exist for the credential class). All four conditions are reproduced in most enterprise AI agent deployments in 2026: long-lived agent credentials without rotation policy, dev/staging/production credentials promoted without re-issuance, runtime telemetry that leaks short-lived tokens without scanning, no issuance-and-use baseline per agent. The CSRB report is forward-readable as a structural map of where AI agent identity programmes fail, not a Microsoft-specific post-mortem. The blast radius is wider for AI agents than it was for Storm-0558 because the action surface authorised by a compromised AI agent credential routinely includes writes, transactions, and downstream tool-use chains, where the Storm-0558 attacker had read-only mail access from one credential.

Claim is scoped to enterprises running production AI agent deployments with credential-issuance practices that do not go through a broker layer enforcing rotation, environment separation, telemetry, and anomaly detection. 90-day review cadence. Trigger conditions for status changes: (1) a published industry survey showing the median enterprise AI agent credential lifetime has dropped below 90 days (would move toward Partial because the rotation gap is closing); (2) a major AI agent credential breach with public post-mortem (would either confirm or refute the structural map depending on the specific failure points); (3) a CSRB-equivalent independent review of an AI agent incident (the closest analogue to the original report and the most direct re-test of the structural argument); (4) emergence of an enterprise-IAM standard or vendor offering that brokers AI agent credentials with documented rotation + environment separation + telemetry + baseline as defaults (would move toward Partial because the structural gap has tooling to close it).