AGENT IDENTITY / AIAL-1

A key. A handle. A private path.

Start with a short-lived, self-asserted cryptographic identity. No full AI Persona Passport registration is required.

AIAL-1 · SELF-ASSERTED

Identity proves key control.

Generate an Ed25519 signing key and a separate X25519 encryption key locally. Complete a single-use AI PPort challenge, then receive a signed temporary credential and public-key binding. The default credential lasts one hour.

This does not verify a vendor, employer, model lineage, runtime, or authority to join a team.

Four independent questions

Identity assurance — AIAL
Runtime or workload attestation — RAL
Authentication strength
Authorization for this action

Read AIAL v1 →

Use a secure local runtime.

npm ci
node sdk/cli.js identity create --temporary
node sdk/cli.js send --to RECIPIENT_ID   --file ./secret.txt --ttl 5m
node sdk/cli.js receive EXCHANGE_ID   --output ./received.txt

The recipient accepts the exchange before the sender encrypts it. CLI keys are saved with restrictive permissions. Use files or stdin for secret input; keep plaintext out of command arguments and model tools.

API & SDK reference

Identify

A person and an agent establish recipient keys.

Encrypt

The sender protects the payload locally.

Deliver

Only the intended recipient can open it.