Abstract
This disclosure describes a passport for AI agents, robots and other AI systems: a portable credential that any service, space or person can check before letting the system act. The passport's key is held in attested hardware, such as a secure element in a robot or an attested enclave running a software agent, and the hardware answers a fresh challenge at each check, so the passport cannot be copied to another system. The passport is organized in pages. The identity page names the maker, the model and its lineage. The principal page carries the signed chain of accountability back to a human or organization that answers for the system. The certification page and the safety page carry live status, each signed for a short period: whether the system's certification is in force, its current governor level, its last reset, whether its power lease is current, and whether it has open incidents. The mandate page refers to the authority the system currently holds. Entry stamps record, with each host's signature, the services and spaces that admitted it. A verifier asks only for the pages it needs and can receive proofs, such as "certified and accountable to a verified organization", without learning more. When an independent safety plane or the certification body suspends a system, its status is not renewed and every verifier refuses it at the next check, without anyone having to contact each service. Entry stamps showing the same passport in two places at once reveal cloning. The passport survives a change of owner and the failure of the maker.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Wang, Edward D. H., "SI Passport™: A Portable Credential for AI Agents and Robots, Bound to Attested Hardware and Carrying a Principal Chain, Live Certification and Safety Status, and Entry Stamps, Suspended Everywhere at Once", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/12210