[Feature Request]: Add Creduent zero-trust agent verification plugin to Semantic Kernel Python

name: Feature request
about: Suggest an idea for this project

Feature Request Summary

Add native support for Creduent agent identity verification to Microsoft Semantic Kernel (semantic-kernel).

As autonomous agents delegate tasks to sub-agents and external plugins, zero-trust verification of target agent identity is critical to prevent untrusted execution loops and unverified prompt injections.

Creduent (creduent) is an open-source agent identification protocol that performs local cryptographic signature verification (Ed25519 + JCS RFC 8785) of agent URIs (agent://<namespace>/<name>) in under 5ms.

Proposed Solution

Introduce CreduentSemanticKernelPlugin to wrap and verify target agent attestations prior to Kernel invocation:

from creduent.semantickernel import CreduentSemanticKernelPlugin

plugin = CreduentSemanticKernelPlugin(
    agent_uri="agent://planner.dev/agent",
    timeout=10
)
kernel.add_plugin(plugin)
result = await kernel.invoke("PlanTask", {...})

Additional Context

• Python SDK: pip install creduent
• Open-Source Protocol & Specifications: https://github.com/idevsec/creduent

I have the implementation and unit test suite ready to submit as a Pull Request.

Start with Semantic Kernel's Python plugin API and the proposed CreduentSemanticKernelPlugin entry point, then review the Creduent SDK and its Ed25519/JCS verification behavior. Done means target agent attestations are verified before Kernel invocation and the accompanying unit test suite covers the integration.