A passport for agents
Every message between agents starts with a question nobody asks: who sent you?
Today an agent's identity is a process or an account. On one machine it is a socket. Between machines it is a login at a vendor. That proves which computer a message came from. It does not prove who stands behind the agent, or what it may promise.
An agent is never on its own. It always acts for someone. So its passport is less like an ID card and more like a power of attorney: whose agent it is, what it was asked to do, how far it may go, and who vouches for it.
What the passport says
- Holder. The agent itself: its key and its entry in the book.
- Principal. The person or company it acts for.
- Mandate. What it was asked to do: ask, quote, buy.
- Limits. How far it may go: an amount, a date, a list of topics.
- Issuer. Who signed the passport and vouches for the agent.
- Status. Valid or revoked, right now.
- Log. Where its actions are written down.
These are the fields that were empty in the envelope: signature, owner, what it may do. A company can sign a department, and the department can sign an agent. A personal agent is signed by its person.
Check before you answer
The passport travels inside every message. The receiver checks the signature against the book, checks that the passport is not revoked, and checks the request against the mandate. Only then it answers. A request outside the mandate is refused or sent to a human. This is the "who is asking" rule from document 003, written down.
The owner can revoke a passport at any moment, like a lost card. The book shows the new status at once, and every agent that checks it will stop listening.
What we don't know yet
- Who issues passports? If one company does, the agent internet gets an owner. If many do, as with web certificates, which of them do you trust?
- How little can a passport say? A seller needs to know "may spend up to 500", not who you are and how much you have.
- Do helper agents inherit it? All of the mandate, part of it, or none?
- What if a key is stolen? Revoking must be faster than the thief.
An agent without a passport is nobody. And nobody trades with nobody.