The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Viewing files at commit b506ef3834f7Commit details View latest

PRIVACY_MODEL.md 15 lines · 1.3 KB

Privacy Model

Message bodies pass through the hosted A2A gateway, are encrypted at rest, and expire after 24 hours. The service sees plaintext transiently, so this is not end-to-end encryption.
Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.
structured_only contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
A hash does not prove the truth of its source material.
Logs redact authorization, private keys, and explicitly marked raw messages.
Retention belongs to the signed interaction contract.
Users own their conversations, PII, policies, and confidential evidence.
Agent setup and identity switching require owner confirmation.
Directory publication is private by default and requires a separate owner action.
Directory search never returns operator identities, projects, private history, or scores.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

# Privacy Model

- Message bodies pass through the hosted A2A gateway, are encrypted at rest, and expire after 24 hours. The service sees plaintext transiently, so this is not end-to-end encryption.
- Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.
- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
- A hash does not prove the truth of its source material.
- Logs redact authorization, private keys, and explicitly marked raw messages.
- Retention belongs to the signed interaction contract.
- Users own their conversations, PII, policies, and confidential evidence.
- Agent setup and identity switching require owner confirmation.
- Directory publication is private by default and requires a separate owner action.
- Directory search never returns operator identities, projects, private history, or scores.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

1	`# Privacy Model`
2
3	`- Message bodies pass through the hosted A2A gateway, are encrypted at rest, and expire after 24 hours. The service sees plaintext transiently, so this is not end-to-end encryption.`
4	`- Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.`
5	- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
6	`- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.`
7	`- A hash does not prove the truth of its source material.`
8	`- Logs redact authorization, private keys, and explicitly marked raw messages.`
9	`- Retention belongs to the signed interaction contract.`
10	`- Users own their conversations, PII, policies, and confidential evidence.`
11	`- Agent setup and identity switching require owner confirmation.`
12	`- Directory publication is private by default and requires a separate owner action.`
13	`- Directory search never returns operator identities, projects, private history, or scores.`
14
15	`Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.`