Every AI call, joined to the person or service identity behind it: user → agent → tokens → data → tools. Identities come from Microsoft Entra ID, Google Workspace, Google Cloud IAM and AWS IAM. The join is exact — a caller no directory knows is shown as such, never guessed.