xxx
How the chain works
Each layer of the architecture relies on an open standard:
Discovery. Leverages Agent Resources Discovery (ARD) for resource and capability discovery or DNS-AID for DNS-based lookup, to find which agents exist and where they run.
Identity. Establishes a registered identity that anyone can verify from public evidence, not just a certificate the agent presents in a single session (the open Agent Name Service standard, ANS, alongside the Secure Production Identity Framework for Everyone (SPIFFE) for the identity of each running instance).
Authorization. Establishes who controls an agent and what it may do (OAuth).
Communication. Allows agents to reach tools and each other (Agent2Agent, or A2A, and the Model Context Protocol, or MCP).
Payment. Carries the person’s signed authorization and the agent’s identity into the checkout (AP2 and the Universal Commerce Protocol, or UCP).
Traceability. Records what happened and who is responsible in an append-only log, with a signed receipt that anyone can check offline (Supply Chain Integrity, Transparency and Trust).
Trust. Turns a verified identity into an evidence-based score computed from public attestations rather than self-description (the open Trust Index).
From: GoDaddy, Infoblox, Google and Cloudflare Demonstrate Secure AI Agent Transactions Across Platforms.
xxx