Summary
This issue tracks SEP-0001, a Specification Enhancement Proposal to introduce the
Agent Identity Profile (AIP) — a structured identity metadata framework for AI agents
operating within and across trust domains.
The full specification is available at:
docs/standard/sep/sep-0001-agent-identity-profile.md
Motivation
As AI agents increasingly operate on behalf of users across organizational boundaries,
there is a critical gap between workload-level credential systems (WIMSE WIT/WPT),
user-level authentication protocols (OIDC, OIDC-A), and operation-level authorization
frameworks (AOAT). AIP bridges this gap by providing a unified, cacheable, and verifiable
identity metadata document that can be referenced throughout an agent's lifecycle.
Scope
The AIP specification defines:
- AIP Data Model: Agent identity attributes, owner bindings, capability declarations,
integrity assurances, governance policies, credential lifecycle state, and observability
- Document Partitioning: AIP-Static and AIP-Dynamic split strategy
- Lifecycle State Machine: States and transitions for agent identity documents
- Discovery & Resolution Protocol: Well-known endpoints, registry API, and WebFinger
cross-domain resolution
- Delegation Chains: Multi-agent identity and scope narrowing constraints
- Cross-Domain Projection: Federated trust environment support
- Security Considerations: Threat model and mitigation strategies
Branch & Contribution
- Branch:
docs/sep-0001-agent-identity-profile
- Spec location:
docs/standard/sep/sep-0001-agent-identity-profile.md
- SEP Process: See Standards & Proposals
How to Participate
- Comment on this Issue to discuss the proposal's direction and scope
- Review the full spec at docs/standard/sep/sep-0001-agent-identity-profile.md
- Submit PRs against the spec document for suggested changes
- Follow the SEP lifecycle for status transitions
Checklist
Labels: sep, specification, identity
Milestone: v0.2.0
Summary
This issue tracks SEP-0001, a Specification Enhancement Proposal to introduce the
Agent Identity Profile (AIP) — a structured identity metadata framework for AI agents
operating within and across trust domains.
The full specification is available at:
docs/standard/sep/sep-0001-agent-identity-profile.md
Motivation
As AI agents increasingly operate on behalf of users across organizational boundaries,
there is a critical gap between workload-level credential systems (WIMSE WIT/WPT),
user-level authentication protocols (OIDC, OIDC-A), and operation-level authorization
frameworks (AOAT). AIP bridges this gap by providing a unified, cacheable, and verifiable
identity metadata document that can be referenced throughout an agent's lifecycle.
Scope
The AIP specification defines:
integrity assurances, governance policies, credential lifecycle state, and observability
cross-domain resolution
Branch & Contribution
docs/sep-0001-agent-identity-profiledocs/standard/sep/sep-0001-agent-identity-profile.mdHow to Participate
Checklist
sep-0001-agent-identity-profile.md)docs/standard/sep/Labels:
sep,specification,identityMilestone: v0.2.0