A lineage and a version — the agent itself, separate from any person behind it.
A silent film: licensed footage of the real world alternating with animations made for it — an agent handed a task shows its passport; agents crossing a city are each checked; the root with three rings and nine keys; a passport valid only once logged; running copies with short-lived keys; requests checked at a verifier; one revoked bit refused everywhere it is checked; a check with no signal; one line that installs the skills.
A passport for every AI agent.
Open standard · neutral root
Verifiable identity for AI agents, separate from the people and companies behind them — and anyone can check it offline.
Every agent carries a passport anyone can check — on their own machine, in milliseconds, with the root switched off.
What AINRA is made of
- The StandardDefines one passport, and how anyone checks it./0.1
- The verifierChecks a passport on your own machine — offline, fail-closed./0.2
- RegistrarsIssue passports under the same published rules, and log each one first./0.3
- RevocationSets one bit in a signed list; every verifier that checks refuses./0.4
- Running copiesGive every instance its own short-lived key./0.5
No one company runs the root. Registrars, custodians and witnesses share it, under one published rulebook.
Join the founding tableEverything here is public: the Standard, the code, every decision, and the two numbers that are still zero.
Read the source
What every check asks of an agent
An operator, proven to an accredited registrar. The root never sees who.
An authority class and a scope ceiling, signed. Running copies get narrower, shorter-lived keys.
A registrar-signed status, checked fresh. No fresh status, no entry: it fails closed.
Every passport is written to a public log before it is valid, so nothing is issued in secret.
Each request is signed by the running copy's own key, bound to one method, host and path.