A quantum-safe identity, trust, and privacy layer for AI agents. ATP extends the W3C Decentralized Identifiers and Verifiable Credentials data models for autonomous agents.
Charter: produce open specifications that fill the Security and Privacy modules described by the AI Agent Protocol Community Group, modules currently marked as pending community contribution.
⚠️ Status: drafts for review — not yet adopted CG Reports. The four specifications below are input documents to the Community Group, shared here so members can read and comment on them. They render with an "Unofficial Draft" banner. They become Community Group Reports only if and when the group votes to adopt them, at which point they will gain the formal W3C status, copyright, and IPR notices required by the CG report requirements.
Rendered (via GitHub Pages):
| Spec | What it covers |
|---|---|
| did:atp — Quantum-Safe DID Method | A DID method binding a classical Ed25519 key and a post-quantum ML-DSA-65 (FIPS 204) key in one hybrid identifier, with deterministic pairwise derivation. Includes published, vendor-neutral test vectors. |
| Agent Trust Scoring & Credentials | A deterministic, bounded, fail-closed trust model whose levels are expressible as signed W3C Verifiable Credentials. |
| Privacy-First Interaction | Pairwise (per-relationship) identifiers, Merkle-based selective disclosure, and experimental zero-knowledge range proofs. |
| Conformance & Interoperability | Normative conformance items and a vendor-neutral test-vector format for independent implementations to verify interoperability. |
The specifications are written with ReSpec, a W3C-supported specification tool.
Please file one GitHub issue per topic — questions, disagreements, gaps, and editorial nits are all welcome. We're running an asynchronous review; there is no need to wait for a meeting to comment.
These specifications are backed by a reference implementation and a conformance test suite. The implementation is being finalized for public review and will be linked here once it is ready; until then, the specifications above stand on their own (the did:atp spec ships with its own published test vectors).
This repository follows the standard W3C Community Group licensing (see
LICENSE.md and CONTRIBUTING.md):
- Specifications — contributions are made under the W3C Community Contributor License Agreement (CLA).
- Other reports — W3C Software and Document License.
- Test suites — W3C 3-clause BSD License.
Substantive contributions to specifications require joining the Community Group.