Repository navigation

docs: describe agent authority, broker trust boundaries, and implementation gaps - #2121

Open

jhrozek wants to merge 50 commits into

mainfrom

docs/agent-authority

Open

docs: describe agent authority, broker trust boundaries, and implementation gaps#2121
jhrozek wants to merge 50 commits into
mainfrom
docs/agent-authority

Commits on Oct 12, 2026
- docs: describe agent authority and implementation follow-ups
  
  jhrozek
  and
  Mecatl
  committed
  8752a9d
- Creds lifetime changes
  jhrozek
  committed
  b5d5cc2
- Update
  jhrozek
  committed
  3b4bd06
- docs: fix agent identity draft links after rebase
  
  jhrozek
  and
  Mecatl
  committed
  a12a097
- docs: introduce agent identity architecture overview
  
  jhrozek
  and
  Mecatl
  committed
  2721b58
- docs: consolidate agent identity design into focused chapters
  
  jhrozek
  and
  Mecatl
  committed
  7e7e42f
- docs: checkpoint agent credential and audit walkthrough
  
  jhrozek
  and
  Mecatl
  committed
  c6cf31e
- docs: define Cedar MCP ceilings and audit evidence
  
  jhrozek
  and
  Mecatl
  committed
  36a22d3
- docs: add MCP gateway modes chapter for AS chaining
  
  jhrozek
  and
  mecatl
  committed
  418c652
- docs: retire superseded agent identity drafts
  
  jhrozek
  and
  mecatl
  committed
  f75b378
- docs: consolidate agent identity chapter responsibilities
  
  jhrozek
  and
  Mecatl
  committed
  c649be4
Commits on Oct 13, 2026
- docs: address agent identity review feedback
  
  jhrozek
  and
  mecatl
  committed
  fbf9e8d
Commits on Oct 14, 2026
- Take the split-AS model into account
  jhrozek
  committed
  8e7bdd0
Commits on Oct 15, 2026
- docs: rework agent identity credential flow around AS-1 ID-JAG
  
  jhrozek
  and
  mecatl
  committed
  e2e684a
- docs: move D6 and D7 under Decisions in the rework record
  
  jhrozek
  and
  mecatl
  committed
  5b39578
- docs: illustrate agent identity relationships and lifetimes
  
  authored and
  jhrozek
  committed
  c872f08
- docs: separate host and broker sessions in the agent identity glossary
  
  jhrozek
  and
  mecatl
  committed
  d830782
- docs: describe the credential flow rework as a decision record
  
  jhrozek
  and
  mecatl
  committed
  54812e3
- docs: restore the definition loader as a broker module
  
  jhrozek
  and
  mecatl
  committed
  d9fb3c0
- docs: show the definition loader in the relationships diagram
  
  jhrozek
  and
  mecatl
  committed
  e4b9153
- docs: sequence identity work before authority work
  
  jhrozek
  and
  mecatl
  committed
  eede8bd
- docs: state that the broker does not own run admission
  
  jhrozek
  and
  mecatl
  committed
  81eae38
- docs: describe broker deployment and the threats it addresses
  
  jhrozek
  and
  mecatl
  committed
  adae397
- docs: add sign-out and revocation to the identity work
  
  jhrozek
  and
  mecatl
  committed
  5aec36d
- docs: define the audit evidence as an AuditEvent profile
  
  jhrozek
  and
  mecatl
  committed
  1a56af2
- docs: record delegation lineage as retained audit events
  
  jhrozek
  and
  mecatl
  committed
  905f9e9
- docs: specify audit delivery, protection, and reconciliation
  
  jhrozek
  and
  mecatl
  committed
  3557e50
- docs: fold the credential flow rework into the chapters
  
  jhrozek
  and
  mecatl
  committed
  f7c5f58
- docs: quote ID-JAG section 9.3 correctly
  
  jhrozek
  and
  mecatl
  committed
  ca5d9c1
- docs: check that the token's user owns the session at open
  
  jhrozek
  and
  mecatl
  committed
  467060b
- docs: describe how the authority work contains a compromised mecak8s
  
  jhrozek
  and
  mecatl
  committed
  27a5065
- docs: record the run owner and keep shared sessions possible
  
  jhrozek
  and
  mecatl
  committed
  4790ce8
- docs: require lossless audit delivery where compliance demands it
  
  jhrozek
  and
  mecatl
  committed
  fcbff9a
- docs: add the ToolHive change for redeeming any AS-1 subject
  
  jhrozek
  and
  mecatl
  committed
  f340ce5
Commits on Oct 16, 2026
- docs: make clear the definition loader is part of the identity broker
  
  jhrozek
  and
  mecatl
  committed
  1c156d2
- docs: rewrite the agent identity overview for evaluators
  
  jhrozek
  and
  mecatl
  committed
  b8f0e7b
- docs: move the threat table into a threat model chapter
  
  jhrozek
  and
  mecatl
  committed
  433bc0a
- docs: restructure the agent identity overview
  
  jhrozek
  and
  mecatl
  committed
  5adac4b
- docs: tighten the overview and name the enterprise gateway case
  
  jhrozek
  and
  mecatl
  committed
  59cd3f9
- docs: correct the credential flow and settle its open design gaps
  
  jhrozek
  and
  mecatl
  committed
  e437f25
- docs: fix the credentials sequence diagram so it renders
  
  jhrozek
  and
  mecatl
  committed
  a383e11
- docs: settle delegation, registration, and provenance in the agent definitions chapter
  
  jhrozek
  and
  mecatl
  committed
  2bc800d
- docs: give each credential hop its exact checks and failures
  
  jhrozek
  and
  mecatl
  committed
  5aabd95
- docs: align run ownership in the agent definitions chapter
  
  jhrozek
  and
  mecatl
  committed
  a429ae1
- docs: settle the credential flow's failure handling and edge cases
  
  jhrozek
  and
  mecatl
  committed
  35acb1f
- docs: close the credential flow's revocation and session gaps
  
  jhrozek
  and
  mecatl
  committed
  2470851
- docs: resolve the last contradictions in the credential flow
  
  jhrozek
  and
  mecatl
  committed
  17ae00f
- docs: restructure the credentials chapter around one flow
  
  jhrozek
  and
  mecatl
  committed
  0942964
- docs: restore facts the restructure dropped and fix its seams
  
  jhrozek
  and
  mecatl
  committed
  25969be
- docs: draw the README's trust boundaries explicitly
  
  jhrozek
  and
  mecatl
  committed
  de4303c

Commits

Commits on Oct 12, 2026

Commits on Oct 13, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026