The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Viewing files at commit 3dc3c2c6da63Commit details View latest

PRIVACY_MODEL.md 11 lines · 860 B

Privacy Model

Raw conversation content and confidential evidence stay local by default.
structured_only contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
A hash does not prove the truth of its source material.
Logs redact authorization, private keys, and explicitly marked raw messages.
Retention belongs to the signed interaction contract.
Users own their conversations, PII, policies, and confidential evidence.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

# Privacy Model

- Raw conversation content and confidential evidence stay local by default.
- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
- A hash does not prove the truth of its source material.
- Logs redact authorization, private keys, and explicitly marked raw messages.
- Retention belongs to the signed interaction contract.
- Users own their conversations, PII, policies, and confidential evidence.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

1	`# Privacy Model`
2
3	`- Raw conversation content and confidential evidence stay local by default.`
4	- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
5	`- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.`
6	`- A hash does not prove the truth of its source material.`
7	`- Logs redact authorization, private keys, and explicitly marked raw messages.`
8	`- Retention belongs to the signed interaction contract.`
9	`- Users own their conversations, PII, policies, and confidential evidence.`
10
11	`Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.`