Tags

Ecosystem Need

- The Hosting Trust Trap: Currently, an agent cannot securely hold funds because the person hosting the agent can simply steal the private keys. - Blind Password Delegation: Using an agent on non-crypto websites today requires giving it full control of your credentials with no way to verify if it exceeded its mandate. - Host Manipulation: Even when outputs are "verifiable," a malicious host can suppress, delay, or repeatedly query a probabilistic agent until it produces an output favorable to the host. - Replay and Timing Vulnerabilities: Agents are susceptible to specific classes of attacks where valid proofs from the past are reused or timing is manipulated to influence on-chain execution.

Hard Requirements

Proposals must adhere to this template: https://notes.ethereum.org/@s_VsCoN-RHCQdMf6bFLJ8g/H1Tsh8sSWx Proposals Requirements: - Agent-Authenticated Wallet: Build a smart-contract wallet that only executes transactions when accompanied by a verifiable proof tying the action to the agent's specific policy. - Audit Trail Protocol: Design a mechanism to delegate credentials to an agent while maintaining a securely logged, verifiable trail of all session activity.

Soft Requirements

- Active Containment: Develop a real-time "controller" program that can observe session traffic and terminate connections if the agent attempts to violate a security policy. - Legacy Compatibility: Ensure the delegation mechanisms do not require websites to adopt new authentication standards. - Entropy Integration: Explore the use of on-chain commitments or randomness beacons to ensure agent behavior is autonomous even under a hostile host. - ERC-8004 Synergy: Provide a clear distinction or integration path where ERC-8004 handles identity and this project handles concrete action authentication

Resources

Timeline