agent-identity

Agent identity management, trust scoring, and certificate management

Part of the AumOS open-source agent infrastructure portfolio.

Features

• DID-based identity registry assigns each agent a decentralized identifier with a verifiable credential; IdentityRegistry provides lookup and resolution
• TrustScorer computes a composite trust score from three weighted dimensions — competence (40%), reliability (35%), and integrity (25%) — updated via outcome observations (success, failure, violation)
• Certificate management with an agent CA, certificate issuance, revocation lists, verification, and automatic rotation on configurable expiry schedules
• Behavioral fingerprinting builds a baseline profile of an agent's interaction patterns and raises alerts when its behavior deviates — useful for detecting compromised or impersonated agents
• Delegation token chain allows an agent to delegate a subset of its permissions to a sub-agent, with revocation propagating down the full chain
• RBAC middleware enforces role-based access at call boundaries; audit middleware records every identity-check decision for compliance review
• Trust history log tracks score trajectories over time so administrators can review how an agent's trust evolved before granting elevated permissions

Quick Start

Install from PyPI:

pip install agent-identity

Verify the installation:

agent-identity version

Basic usage:

import agent_identity

# See examples/01_quickstart.py for a working example

Documentation

• Architecture
• Contributing
• Changelog
• Examples

Enterprise Upgrade

For production deployments requiring SLA-backed support and advanced integrations, contact the maintainers or see the commercial extensions documentation.

Contributing

Contributions are welcome. Please read CONTRIBUTING.md before opening a pull request.

License

Apache 2.0 — see LICENSE for full terms.

Part of AumOS — open-source agent infrastructure.