Add gen_ai.agent.identity.id and gen_ai.agent.identity.name: agent identity distinct from the deployed resource

[AraiYuno]

What's Changed

• Adds gen_ai.agent.identity.id and gen_ai.agent.identity.name (development stability) for the identity a GenAI agent authenticates and is audited as, distinct from gen_ai.agent.id (the deployed resource) and user.id (the principal it acts for); the id MAY be a SPIFFE ID.
• Wires both into the create_agent and invoke_agent spans at opt_in, regenerates the registry/docs/reference reports, and adds a changelog fragment.
• Proposal, first-principles rationale, and AWS / Google / Microsoft prior art are in [DRAFT/RFC] Add gen_ai.agent.identity.id / gen_ai.agent.identity.name: the agent's authenticatable identity, distinct from the deployed resource #345; opening as draft for GenAI SIG discussion (open questions there: the gen_ai.agent.id vs gen_ai.agent.identity.id boundary, requirement level, span-vs-resource attribute, and a possible gen_ai.agent.identity.type).
• Observability only: these are identifiers for correlation and audit, not credentials or access-control inputs.

[linux-foundation-easycla]

• ❌ - login: @AraiYuno / name: Kyle Ahn. The commit (ce7dd36) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please visit our EasyCLA portal and chat with our support bot.

[opentelemetry-pr-dashboard]

Pull request dashboard status

Waiting on the author · refreshed 2026-07-31 13:36 UTC

Move out of draft to request review.

Status above doesn't look right?

• Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.