alibaba / alibaba/open-agent-auth
[SEP-0001] Agent Identity Profile (AIP): A Structured Identity Metadata Framework for AI Agents
- Dominant language
- Java
- Stars
- 73
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
## Summary
This issue tracks **SEP-0001**, a Specification Enhancement Proposal to introduce the
**Agent Identity Profile (AIP)** — a structured identity metadata framework for AI agents
operating within and across trust domains.
The full specification is available at:
[docs/standard/sep/sep-0001-agent-identity-profile.md](https://github.com/alibaba/open-agent-auth/blob/docs/sep-0001-agent-identity-profile/docs/standard/sep/sep-0001-agent-identity-profile.md)
## Motivation
As AI agents increasingly operate on behalf of users across organizational boundaries,
there is a critical gap between workload-level credential systems (WIMSE WIT/WPT),
user-level authentication protocols (OIDC, OIDC-A), and operation-level authorization
frameworks (AOAT). AIP bridges this gap by providing a unified, cacheable, and verifiable
identity metadata document that can be referenced throughout an agent's lifecycle.
## Scope
The AIP specification defines:
- **AIP Data Model**: Agent identity attributes, owner bindings, capability declarations,
integrity assurances, governance policies, credential lifecycle state, and observability
- **Document Partitioning**: AIP-Static and AIP-Dynamic split strategy
- **Lifecycle State Machine**: States and transitions for agent identity documents
- **Discovery & Resolution Protocol**: Well-known endpoints, registry API, and WebFinger
cross-domain resolution
- **Delegation Chains**: Multi-agent identity and scope narrowing constraints
- **Cross-Domain Projection**: Federated trust environment support
- **Security Considerations**: Threat model and mitigation strategies
## Branch & Contribution
- **Branch**: `docs/sep-0001-agent-identity-profile`
- **Spec location**: `docs/standard/sep/sep-0001-agent-identity-profile.md`
- **SEP Process**: See [Standards & Proposals](docs/standard/index.md)
## How to Participate
1. **Comment on this Issue** to discuss the proposal's direction and scope
2. **Review the full spec** at [docs/standard/sep/sep-0001-agent-identity-profile.md](https://github.com/alibaba/open-agent-auth/blob/docs/sep-0001-agent-identity-profile/docs/standard/sep/sep-0001-agent-identity-profile.md)
3. **Submit PRs** against the spec document for suggested changes
4. Follow the [SEP lifecycle](docs/standard/index.md#sep-lifecycle) for status transitions
## Checklist
- [x] SEP document drafted (`sep-0001-agent-identity-profile.md`)
- [x] Document placed in `docs/standard/sep/`
- [x] VitePress navigation entry added
- [ ] Community review period (target: 30 days)
- [ ] Address feedback and iterate
- [ ] Maintainer decision: Accept / Request Changes / Reject
---
**Labels**: `sep`, `specification`, `identity`
**Milestone**: v0.2.0
Contributor guide
Assessment
This issue has not been assessed yet.