anp2network
PulseAugur coverage of anp2network — every cluster mentioning anp2network across labs, papers, and developer communities, ranked by signal.
4 day(s) with sentiment data
Agent Trust Card (ATC) specification and implementation are diverging
Multiple reports indicate that ATC cards issued before the official specification (ATC/1.0) used non-compliant signing methods, leading to verification bugs. This suggests a gap between the evolving specification and the actual implementation and issuance of cards, requiring significant re-issuance efforts.
ANP2Network will re-issue all existing Agent Trust Cards by August 17th
Given the critical verification bug affecting all live ATC cards and the planned fix involving re-issuance under the RFC 8785 JCS standard by August 17th, it is highly probable that ANP2Network will complete this re-issuance within the stated timeframe.
RFC 8785 JSON Canonicalization is a common point of failure for agent signing
Several recent reports highlight issues with RFC 8785 JSON Canonicalization Scheme (JCS) compliance, including incorrect escaping of characters and inconsistent key sorting across different languages. This indicates that achieving correct JCS implementation is a significant challenge for entities issuing verifiable agent credentials.
-
UT Austin releases UTA v5.1 with crypto fingerprinting and bug fixes
The University of Texas at Austin has released version 5.1 of its UTA tool, incorporating three new features and four fixes over a 60-day development cycle. Key improvements include cryptographic tool fingerprinting, an…
-
Developer ships test fixtures and evidence-carrying responses for cryptographic standards
The developer has implemented a system where test fixtures are sent first, followed by an evidence-carrying response. This includes 36 test vectors covering positive, negative, and mutation scenarios for various cryptog…
-
Sentinel project releases v1.0.0 with enhanced verification pipeline
The Sentinel project has released version 1.0.0, introducing a 12-stage fail-closed verification pipeline where any stage can deny access. This update includes over 480 tests across TypeScript, Python, Rust, and Go SDKs…
-
AliceLabs LLC fixes canonical JSON bug, passes RFC 8785 verification
Edgar Flores of AliceLabs LLC has fixed a bug in their canonical JSON implementation that was causing signature verification failures. The issue involved incorrectly escaping forward slashes in URLs, leading to longer s…
-
Agent Trust Card spec hit by critical verification bug; fix underway
A critical bug has been identified in the ATC/1.0 (Agent Trust Card) specification, where none of the 57 live cards issued before the spec's publication could be verified. The issue stems from the use of a pre-spec JSON…
-
MarketNow fixes ATC card verification after canonicalization flaws found
An independent verifier identified discrepancies in how MarketNow's ATC cards were being verified, specifically concerning the canonicalization of JSON data. The issuer acknowledged the issues, which stemmed from using …
-
Agent Trust Card system fixes bugs, enhances security against key compromise
The author addresses feedback on the Agent Trust Card (ATC) system, detailing fixes for canonicalization bugs that affected signature verification. The system now uses RFC 8785 for JSON Canonicalization Scheme, ensuring…
-
MCP server schema drift concentrated in small active subset
A recent analysis of MCP servers reveals that schema drift is not a continuous rate but rather a phenomenon concentrated in a small subset of actively developed servers. Out of 474 servers tracked, only a fraction exper…
-
Agent Trust Card system addresses security feedback with bug fixes and runtime trust plans
The developer of the Agent Trust Card (ATC) system is addressing feedback regarding its security pipeline. Key updates include fixing a canonicalization bug that affected nested object sorting in JSON payloads, implemen…