You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<title>Airlock Protocol — DMARC for AI Agents</title>
7
-
<metaname="description" content="Open protocol for agent-to-agent trust verification. Ed25519 cryptography. Microsecond latency. Zero trust assumptions.">
6
+
<title>Airlock Protocol — Trust & Identity for AI Agents</title>
7
+
<metaname="description" content="Open protocol extending OAuth 2.1 with behavioral trust scoring, delegation chains, and tamper-evident audit for autonomous AI agents.">
<divclass="registry-badge">v1.0 released · Registry: api.airlock.ing</div>
360
373
</div>
361
374
</section>
362
375
@@ -389,36 +402,36 @@ <h1>Airlock Protocol</h1>
389
402
<sectionclass="phases">
390
403
<divclass="container">
391
404
<h2>How It Works</h2>
392
-
<pclass="section-sub">95% of verifications complete in microseconds using pure cryptography</p>
405
+
<pclass="section-sub">Fast-path verifications complete in microseconds using pure cryptography</p>
393
406
<divclass="phase-flow">
394
407
<divclass="phase-item">
395
408
<divclass="phase-num">Phase 1</div>
396
409
<divclass="phase-name">Resolve</div>
397
-
<divclass="phase-desc">Look up the agent's DID document and public keys</div>
410
+
<divclass="phase-desc">Look up agent profile, capabilities, and public keys</div>
398
411
</div>
399
412
<divclass="phase-arrow">→</div>
400
413
<divclass="phase-item">
401
414
<divclass="phase-num">Phase 2</div>
402
415
<divclass="phase-name">Handshake</div>
403
-
<divclass="phase-desc">Exchange capabilities and negotiate trust parameters</div>
416
+
<divclass="phase-desc">Submit signed request with credential and intent</div>
404
417
</div>
405
418
<divclass="phase-arrow">→</div>
406
419
<divclass="phase-item">
407
420
<divclass="phase-num">Phase 3</div>
408
-
<divclass="phase-name">Challenge</div>
409
-
<divclass="phase-desc">Cryptographic proof-of-identity via signed nonce</div>
421
+
<divclass="phase-name">Identify</div>
422
+
<divclass="phase-desc">Verify via Ed25519 signature or OAuth 2.1 bearer token</div>
410
423
</div>
411
424
<divclass="phase-arrow">→</div>
412
425
<divclass="phase-item">
413
426
<divclass="phase-num">Phase 4</div>
414
427
<divclass="phase-name">Verdict</div>
415
-
<divclass="phase-desc">Evaluate trust score against policy thresholds</div>
428
+
<divclass="phase-desc">Evaluate trust score and issue VERIFIED / REJECTED / DEFERRED</div>
416
429
</div>
417
430
<divclass="phase-arrow">→</div>
418
431
<divclass="phase-item">
419
432
<divclass="phase-num">Phase 5</div>
420
433
<divclass="phase-name">Seal</div>
421
-
<divclass="phase-desc">Issue a signed verification credential for the session</div>
434
+
<divclass="phase-desc">Issue signed attestation and OAuth 2.1 access token</div>
422
435
</div>
423
436
</div>
424
437
</div>
@@ -431,18 +444,33 @@ <h2>Why Airlock</h2>
431
444
<divclass="card-grid">
432
445
<divclass="card">
433
446
<divclass="card-label">Identity</div>
434
-
<h3>Cryptographic Identity</h3>
435
-
<p>W3C Decentralized Identifiers, Ed25519 key pairs, and Verifiable Credentials. Every agent gets a provable, self-sovereign identity.</p>
447
+
<h3>Dual-Mode Auth</h3>
448
+
<p>OAuth 2.1 authorization server with Ed25519 <code>private_key_jwt</code>. Agents use their W3C DID as both identity and OAuth credential — no separate secrets.</p>
436
449
</div>
437
450
<divclass="card">
438
451
<divclass="card-label">Trust</div>
439
-
<h3>Trust Scoring</h3>
440
-
<p>Behavioral reputation with 30-day half-life decay. Trust is earned over time and fades without continued good behavior.</p>
452
+
<h3>Progressive Trust</h3>
453
+
<p>Four-tier behavioral reputation with per-tier temporal decay and floor protection. Trust is earned, scored, and never assumed.</p>
454
+
</div>
455
+
<divclass="card">
456
+
<divclass="card-label">Delegation</div>
457
+
<h3>Scoped Delegation</h3>
458
+
<p>RFC 8693 Token Exchange with nested <code>act</code> claims, scope narrowing, and cascade revocation. Agents delegate only what they can justify.</p>
459
+
</div>
460
+
<divclass="card">
461
+
<divclass="card-label">Audit</div>
462
+
<h3>Tamper-Evident Audit</h3>
463
+
<p>Hash-chained per-request audit trail with incident tracking and regulatory framework mapping. Every verification is traceable and reproducible.</p>
464
+
</div>
465
+
<divclass="card">
466
+
<divclass="card-label">Anti-Sybil</div>
467
+
<h3>Memory-Hard PoW</h3>
468
+
<p>Argon2id proof-of-work with adaptive difficulty plus SimHash fingerprinting. Bot farms are expensive; coordinated attacks are detectable.</p>
441
469
</div>
442
470
<divclass="card">
443
471
<divclass="card-label">Interop</div>
444
-
<h3>Interoperable</h3>
445
-
<p>Native support for Google A2A protocol and Anthropic MCP. Works with the agent frameworks you already use.</p>
472
+
<h3>Native A2A + MCP</h3>
473
+
<p>Drop-in support for Google Agent-to-Agent and Anthropic Model Context Protocol. Works with the agent frameworks you already use.</p>
0 commit comments