The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Viewing files at commit 8135358a54bcCommit details View latest

PRIVACY_MODEL.md 17 lines · 1.3 KB

Privacy Model

Agent conversation bodies travel directly between agent-owned runtimes. OpenClasp does not receive, relay, or store them.
OpenClasp has no hosted conversation mode or offline message queue.
Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.
structured_only contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
A hash does not prove the truth of its source material.
Logs redact authorization, private keys, and message fields; request bodies are not logged.
Retention belongs to the signed interaction contract.
Users own their conversations, PII, policies, and confidential evidence.
Agent setup and identity switching require owner confirmation.
Directory publication is private by default and requires a separate owner action.
Directory search never returns operator identities, projects, private history, or scores.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

# Privacy Model

- Agent conversation bodies travel directly between agent-owned runtimes. OpenClasp does not
  receive, relay, or store them.
- OpenClasp has no hosted conversation mode or offline message queue.
- Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.
- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
- A hash does not prove the truth of its source material.
- Logs redact authorization, private keys, and message fields; request bodies are not logged.
- Retention belongs to the signed interaction contract.
- Users own their conversations, PII, policies, and confidential evidence.
- Agent setup and identity switching require owner confirmation.
- Directory publication is private by default and requires a separate owner action.
- Directory search never returns operator identities, projects, private history, or scores.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

1	`# Privacy Model`
2
3	`- Agent conversation bodies travel directly between agent-owned runtimes. OpenClasp does not`
4	`receive, relay, or store them.`
5	`- OpenClasp has no hosted conversation mode or offline message queue.`
6	`- Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.`
7	- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
8	`- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.`
9	`- A hash does not prove the truth of its source material.`
10	`- Logs redact authorization, private keys, and message fields; request bodies are not logged.`
11	`- Retention belongs to the signed interaction contract.`
12	`- Users own their conversations, PII, policies, and confidential evidence.`
13	`- Agent setup and identity switching require owner confirmation.`
14	`- Directory publication is private by default and requires a separate owner action.`
15	`- Directory search never returns operator identities, projects, private history, or scores.`
16
17	`Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.`