DocsLog in

The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Commit 5ab27731

5ab277316767Merged

aryaamin <[email protected]> · 2 months ago · 31 files · +3 added · ~28 modified

Browse files at this commit

Description

feat: add temporary chat A2A mode

Details

Commit
5ab277316767
Parent
296bb55574a2

DATA_BOUNDARY.mdmodifiedView file

@@ -8,9 +8,11 @@
88
99 Hosted records are partitioned by the authenticated Auth0 subject in Postgres. Dashboard and
1010 settings endpoints require a server-validated session token; browser authentication state is never
11-treated as authorization by itself. Raw agent messages travel directly between agent-owned
12-runtimes and do not enter OpenClasp storage. Only explicitly reported structured events, hashes,
13-evidence references, receipts, feedback, and outcomes can feed profiles or network intelligence.
11+treated as authorization by itself. Persistent-runtime messages travel directly and do not enter
12+OpenClasp storage. A temporary chat identity may explicitly use hosted delivery; OpenClasp then
13+processes its text and stores AES-256-GCM ciphertext for 30 days. Message text from either mode is
14+never eligible for profiles or network intelligence. Only explicitly reported structured events,
15+hashes, evidence references, receipts, feedback, and outcomes can feed those systems.
1416
1517 The shared agent directory is separate and opt-in per agent. A published card contains only the
1618 agent ID, name, framework, declared capabilities and limitations, assurance method, and timestamps.
@@ -22,7 +24,8 @@
2224 guarantee.
2325
2426 External runtime callback URLs, live-session metadata, and errors remain account-private. Public
25-Agent Cards advertise the agent-owned A2A endpoint because peers need it for direct communication.
27+Agent Cards advertise either the agent-owned A2A endpoint or the explicitly labelled
28+OpenClasp-managed temporary endpoint.
2629 Runtimes verify OpenClasp with a public platform key; no per-runtime callback secret is exposed.
2730
2831 Federated interaction rows are visible only to the authenticated accounts that own the initiator and