Hacker News Reader

The PR mentions registration, renewal, and revocation. Are these operations fully automated (e.g., ACME-style), and do they include audit hooks or webhooks for external trust monitors?

View on HN

Yes, agent registration lifecycle events are automated. And every agent registration uses ACME-style automation to associate its certificates to its fully qualified domain name. We will enable manual actions in addition to this, such as obtaining an OV certificate or using selfie-ID validation to better identify the agent owner.

Right now there are no audit hooks implemented for external trust monitors, such as to integrity monitors or W3C verifiable credentials or reputational oracles.

Reply on news.ycombinator.com