alibaba / alibaba/open-agent-auth

[SEP-0001] Agent Identity Profile (AIP): A Structured Identity Metadata Framework for AI Agents

Open
#16 0 comments 0 reactions 1 assignee Claimed by @fudaiyf View on GitHub
documentation enhancement
Dominant language
Java
Stars
73
Forks
8
PR merge metrics
No merged PRs in 30d

Description

## Summary

This issue tracks **SEP-0001**, a Specification Enhancement Proposal to introduce the
**Agent Identity Profile (AIP)** — a structured identity metadata framework for AI agents
operating within and across trust domains.

The full specification is available at:
[docs/standard/sep/sep-0001-agent-identity-profile.md](https://github.com/alibaba/open-agent-auth/blob/docs/sep-0001-agent-identity-profile/docs/standard/sep/sep-0001-agent-identity-profile.md)

## Motivation

As AI agents increasingly operate on behalf of users across organizational boundaries,
there is a critical gap between workload-level credential systems (WIMSE WIT/WPT),
user-level authentication protocols (OIDC, OIDC-A), and operation-level authorization
frameworks (AOAT). AIP bridges this gap by providing a unified, cacheable, and verifiable
identity metadata document that can be referenced throughout an agent's lifecycle.

## Scope

The AIP specification defines:

- **AIP Data Model**: Agent identity attributes, owner bindings, capability declarations,
integrity assurances, governance policies, credential lifecycle state, and observability
- **Document Partitioning**: AIP-Static and AIP-Dynamic split strategy
- **Lifecycle State Machine**: States and transitions for agent identity documents
- **Discovery & Resolution Protocol**: Well-known endpoints, registry API, and WebFinger
cross-domain resolution
- **Delegation Chains**: Multi-agent identity and scope narrowing constraints
- **Cross-Domain Projection**: Federated trust environment support
- **Security Considerations**: Threat model and mitigation strategies

## Branch & Contribution

- **Branch**: `docs/sep-0001-agent-identity-profile`
- **Spec location**: `docs/standard/sep/sep-0001-agent-identity-profile.md`
- **SEP Process**: See [Standards & Proposals](docs/standard/index.md)

## How to Participate

1. **Comment on this Issue** to discuss the proposal's direction and scope
2. **Review the full spec** at [docs/standard/sep/sep-0001-agent-identity-profile.md](https://github.com/alibaba/open-agent-auth/blob/docs/sep-0001-agent-identity-profile/docs/standard/sep/sep-0001-agent-identity-profile.md)
3. **Submit PRs** against the spec document for suggested changes
4. Follow the [SEP lifecycle](docs/standard/index.md#sep-lifecycle) for status transitions

## Checklist

- [x] SEP document drafted (`sep-0001-agent-identity-profile.md`)
- [x] Document placed in `docs/standard/sep/`
- [x] VitePress navigation entry added
- [ ] Community review period (target: 30 days)
- [ ] Address feedback and iterate
- [ ] Maintainer decision: Accept / Request Changes / Reject

---

**Labels**: `sep`, `specification`, `identity`
**Milestone**: v0.2.0

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.