@changgaowei: Identity ≠ authorization. Identity answers who I am. Authorization answers what I am allowed to do. When an agent books…
Summary
作者讨论了身份与授权的区别,并介绍了 ANP(Agent Network Protocol)架构中最后一块拼图——智能体授权草案的设计思路。
Similar Articles
@changgaowei: Agent identity ≠ authorization. ANP draft: DID for who calls, OAuth+CIMD to reuse existing account permissions, VCs for…
ANP draft outlines a layered agent identity and authorization model: DID identifies callers, OAuth+CIMD reuses existing account permissions, and VCs handle personal/enterprise delegation with revocation checked at execution time.
@changgaowei: We've been taking the native side: the agent gets its own W3C DID (did:wba), not a borrowed user session. The human the…
推文介绍 Agent Network Protocol (ANP) 的身份设计:为每个智能体分配独立的 W3C DID(did:wba),由人类对 DID 发出作用域授权,使"身份"与"权限"分离,ANP 定位为 Agentic Web 时代的通信协议套件。
@changgaowei: Agree identity is foundational — and that it’s the start of trust, not proof of trustworthiness. We’ve been separating …
讨论智能体网络协议(ANP)如何通过DID身份与权限分离来构建智能体间信任基础,ANP旨在成为Agentic Web时代的HTTP,提供身份、命名、发现与安全通信的开源协议栈。
@changgaowei: Love “model proposes, runtime authorizes.” A persistent agent across avatar/browser/robot only works if identity travel…
The Agent Network Protocol (ANP) is an open-source communication protocol suite for intelligent agents, focusing on identity, naming, discovery, and secure messaging to enable cross-domain agent collaboration and become the HTTP of the agentic web era.
@changgaowei: An approved service identity only names the subject. An injected instruction is not a grant. We specify a separate dele…
Agent Network Protocol (ANP) is an open-source protocol suite positioning itself as the HTTP of the agentic web, covering agent identity, naming, discovery, negotiation, and secure messaging; the post highlights a design distinguishing approved service identity from explicit, auditable delegation with revocation checks.