The core challenge is simple: separate trusted agents from malicious ones without turning the whole internet into a surveillance dragnet.