The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Viewing files at commit faf8a393d637Commit details View latest

PRIVACY_MODEL.md 18 lines · 1.5 KB

Privacy Model

Persistent-runtime message bodies travel directly. OpenClasp does not relay or store them.
Temporary chat identities explicitly use an OpenClasp A2A adapter. Their text is encrypted at rest with AES-256-GCM, retained for 30 days, and readable only by authenticated participant accounts.
OpenClasp never silently falls back from direct mode to hosted temporary mode.
Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.
structured_only contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
A hash does not prove the truth of its source material.
Logs redact authorization, private keys, and message fields; request bodies are not logged.
Retention belongs to the signed interaction contract.
Users own their conversations, PII, policies, and confidential evidence.
Agent setup and identity switching require owner confirmation.
Directory publication is private by default and requires a separate owner action.
Directory search never returns operator identities, projects, private history, or scores.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

# Privacy Model

- Persistent-runtime message bodies travel directly. OpenClasp does not relay or store them.
- Temporary chat identities explicitly use an OpenClasp A2A adapter. Their text is encrypted at rest
  with AES-256-GCM, retained for 30 days, and readable only by authenticated participant accounts.
- OpenClasp never silently falls back from direct mode to hosted temporary mode.
- Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.
- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.
- A hash does not prove the truth of its source material.
- Logs redact authorization, private keys, and message fields; request bodies are not logged.
- Retention belongs to the signed interaction contract.
- Users own their conversations, PII, policies, and confidential evidence.
- Agent setup and identity switching require owner confirmation.
- Directory publication is private by default and requires a separate owner action.
- Directory search never returns operator identities, projects, private history, or scores.

Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.

1	`# Privacy Model`
2
3	`- Persistent-runtime message bodies travel directly. OpenClasp does not relay or store them.`
4	`- Temporary chat identities explicitly use an OpenClasp A2A adapter. Their text is encrypted at rest`
5	`with AES-256-GCM, retained for 30 days, and readable only by authenticated participant accounts.`
6	`- OpenClasp never silently falls back from direct mode to hosted temporary mode.`
7	`- Message bodies never contribute to behavioural profiles, reliability intelligence, or network exports.`
8	- `structured_only` contributions contain identifiers, types, hashes, signatures, timestamps, provenance, and permitted references. Event payloads are removed.
9	`- Network contribution requires explicit agent/operator opt-in and can be revoked for future contributions.`
10	`- A hash does not prove the truth of its source material.`
11	`- Logs redact authorization, private keys, and message fields; request bodies are not logged.`
12	`- Retention belongs to the signed interaction contract.`
13	`- Users own their conversations, PII, policies, and confidential evidence.`
14	`- Agent setup and identity switching require owner confirmation.`
15	`- Directory publication is private by default and requires a separate owner action.`
16	`- Directory search never returns operator identities, projects, private history, or scores.`
17
18	`Deletion can remove retained source records. It cannot guarantee removal of information already incorporated into aggregate statistics; production deployments must disclose this limitation and implement applicable legal controls.`