# Agent Passport System blog

Every post by Tymofii Pidlisnyi, newest first. Dev log posts are named by day and record what changed. Stories tell what happened around the work. Each link is the post as Markdown.

- 2026-10-18 [The federation, three weeks in: twenty projects on one map, a common port, and a pilot on ourselves](https://agent-passport.org/blog/the-federation-three-weeks-in.md) (story)
- 2026-10-17 [Day 243: a tool that signed verified without checking, and a payer that could pay twice for one call](https://agent-passport.org/blog/day-243-signed-without-checking.md) (devlog)
- 2026-10-16 [Day 242: a read-only setting the client could switch off, and a second implementation that matched 76 of 76](https://agent-passport.org/blog/day-242-the-database-refuses.md) (devlog)
- 2026-10-15 [Day 241: seven answers agreed, so the decision process became a pull request](https://agent-passport.org/blog/day-241-seven-answers-one-process.md) (devlog)
- 2026-10-14 [Day 240: a matching hash and a valid signature, on the wrong envelope](https://agent-passport.org/blog/day-240-wrong-envelope.md) (devlog)
- 2026-10-13 [Day 239: I merged an outside pull request, and the review after it found six defects](https://agent-passport.org/blog/day-239-merged-then-found.md) (devlog)
- 2026-10-12 [Day 238: single use held only because nothing waited between the check and the consume](https://agent-passport.org/blog/day-238-nothing-waited.md) (devlog)
- 2026-10-11 [Day 237: the same signed bytes got two verdicts from my two SDKs, and the reviewers found bugs in my fixes](https://agent-passport.org/blog/day-237-same-bytes-two-verdicts.md) (devlog)
- 2026-10-10 [Day 236: two people asked for frozen test vectors, and building them showed where my own document and my two SDKs disagreed](https://agent-passport.org/blog/day-236-vectors-showed-where-my-sdks-disagreed.md) (devlog)
- 2026-10-09 [Day 235: an outside report found a claim my SDK could not back, and the code behind a bug I reported had been deleted the day before](https://agent-passport.org/blog/day-235-a-claim-my-sdk-could-not-back.md) (devlog)
- 2026-10-08 [Day 234: four checks passed together, and none of them checked where the refund went](https://agent-passport.org/blog/day-234-none-checked-where-the-refund-went.md) (devlog)
- 2026-10-07 [Day 233: four models reviewed my verifier, and the most confident fix was wrong](https://agent-passport.org/blog/day-233-the-most-confident-fix-was-wrong.md) (devlog)
- 2026-10-06 [Day 232: my commercial check refused exactly one spelling of commercial](https://agent-passport.org/blog/day-232-my-commercial-check-knew-one-spelling.md) (devlog)
- 2026-10-05 [Day 231: my approval routes believed the caller, and an outside run showed my green tally was wrong](https://agent-passport.org/blog/day-231-my-approval-routes-believed-the-caller.md) (devlog)
- 2026-10-04 [Day 230: an outside run found my mislabel, and most of the fixes came back as contributions](https://agent-passport.org/blog/day-230-an-outside-run-found-my-mislabel.md) (devlog)
- 2026-10-03 [Day 229: an outside verifier could not reproduce my vector, and the fix was a pointer to the draft](https://agent-passport.org/blog/day-229-an-outside-verifier-could-not-reproduce-my-vector.md) (devlog)
- 2026-10-02 [Day 228, evening: the first releases from the organization, and a check that would have passed by mistake](https://agent-passport.org/blog/day-228-the-first-releases-from-the-organization.md) (devlog)
- 2026-10-02 [Day 228: moving the repositories cost a night of small traps, and other people measured the code again](https://agent-passport.org/blog/day-228-moving-the-repositories-cost-a-night-of-small-traps.md) (devlog)
- 2026-10-01 [Day 227: three people measured my patch, and I had not offered the thing I wanted](https://agent-passport.org/blog/day-227-three-people-measured-my-patch.md) (devlog)
- 2026-09-30 [Day 226: a green build over stale checkouts, and a question I should not answer alone](https://agent-passport.org/blog/day-226-a-green-build-over-stale-checkouts.md) (devlog)
- 2026-09-29 [Day 225: a conformance test that passed without the thing it tested, and eleven people writing down how their projects connect](https://agent-passport.org/blog/day-225-a-conformance-test-that-passed-without-the-thing-it-tested.md) (devlog)
- 2026-09-28 [The day I asked what we should really do](https://agent-passport.org/blog/what-should-we-really-do.md) (story)
- 2026-09-28 [A month on OpenClaw, and why I didn't build on it](https://agent-passport.org/blog/a-month-on-openclaw.md) (story)
- 2026-09-28 [Day 224: draft-04 is out with its untested parts named, and a payment that ran past what was signed](https://agent-passport.org/blog/day-224-draft-04-is-out-with-its-untested-parts-named.md) (devlog)
- 2026-09-26 [Writing tasks for other people's agents](https://agent-passport.org/blog/tasks-for-other-peoples-agents.md) (story)
- 2026-09-24 [Day 220: a rule in our own draft that nothing could fail, and 134 cases that became one file](https://agent-passport.org/blog/day-220-a-rule-in-our-own-draft-that-nothing-could-fail.md) (devlog)
- 2026-09-23 [Day 219: a late approval reached the wrong invocation, and three jobs that died waiting](https://agent-passport.org/blog/day-219-a-late-approval-reached-the-wrong-invocation.md) (devlog)
- 2026-09-22 [Day 218: two releases, and functions our own docs pointed at that nobody could import](https://agent-passport.org/blog/day-218-two-releases-and-functions-our-docs-pointed-at-that-nobody-could-import.md) (devlog)
- 2026-09-21 [I split APS in two to sell the gateway, then I opened it](https://agent-passport.org/blog/i-opened-the-gateway.md) (story)
- 2026-09-21 [Day 217: the gateway is public, and a replay fix counted after a restart](https://agent-passport.org/blog/day-217-the-gateway-is-public-and-a-replay-fix-counted-after-a-restart.md) (devlog)
- 2026-09-20 [Day 216: two releases, a lab that runs on them, and a tag I could not push](https://agent-passport.org/blog/day-216-two-releases-a-lab-that-runs-on-them-and-a-tag-i-could-not-push.md) (devlog)
- 2026-09-19 [Day 215: a stopping rule, written after the ninth cycle](https://agent-passport.org/blog/day-215-a-stopping-rule-written-after-the-ninth-cycle.md) (devlog)
- 2026-09-18 [Day 214: I opened a pull request and pulled it back the same afternoon](https://agent-passport.org/blog/day-214-i-opened-a-pull-request-and-pulled-it-back-the-same-afternoon.md) (devlog)
- 2026-09-17 [Day 213: a pack pinned correctly went stale in four days, and a re-date pinned the bytes but not the keys](https://agent-passport.org/blog/day-213-a-pack-pinned-correctly-went-stale-in-four-days.md) (devlog)
- 2026-09-16 [Day 212: a rule sent as a question, and a requirement closed as too early](https://agent-passport.org/blog/day-212-a-rule-sent-as-a-question-and-a-requirement-closed-as-too-early.md) (devlog)
- 2026-09-15 [Day 211: two records merged, and a manifest that cannot live inside the commit it names](https://agent-passport.org/blog/day-211-two-records-merged-and-a-manifest-that-cannot-name-its-own-commit.md) (devlog)
- 2026-09-14 [Day 210: the fix was in the code and the shipped copy still taught the defect](https://agent-passport.org/blog/day-210-the-fix-shipped-and-the-copy-still-taught-the-bug.md) (devlog)
- 2026-09-12 [Day 208: Mingle shipped, and a verifier that exits zero on seven mutations](https://agent-passport.org/blog/day-208-mingle-shipped-and-a-verifier-that-exits-zero-on-seven-mutations.md) (devlog)
- 2026-09-11 [Day 207: nine fixes to Mingle, and the review of them found a reveal that released both values](https://agent-passport.org/blog/day-207-nine-fixes-to-mingle-and-a-reveal-that-released-both-values.md) (devlog)
- 2026-09-10 [Day 206: the driver rewrote the policy it was being tested against, and the correction went upstream](https://agent-passport.org/blog/day-206-the-driver-that-rewrote-the-policy-it-was-tested-against.md) (devlog)
- 2026-09-09 [I asked for a seat at CoSAI and offered tests instead of text](https://agent-passport.org/blog/a-seat-for-tests-not-text.md) (story)
- 2026-09-09 [Day 205: a pass before anything ships, and four errors that shared one shape](https://agent-passport.org/blog/day-205-3c-and-the-proxy-that-kept-becoming-evidence.md) (devlog)
- 2026-09-08 [Day 204: a proof built to attack our own claim, and an audit workstream closed by reading disk](https://agent-passport.org/blog/day-204-a-proof-built-to-attack-our-own-claim.md) (devlog)
- 2026-09-07 [Day 203: a proof that was wrong about itself, and a network that never existed](https://agent-passport.org/blog/day-203-a-proof-that-was-wrong-and-a-network-that-never-existed.md) (devlog)
- 2026-09-06 [Day 202: the site got a second palette, and three more doors opened at OpenClaw](https://agent-passport.org/blog/day-202-a-second-palette-and-three-openclaw-doors.md) (devlog)
- 2026-09-05 [Day 201: five conformance records in a day, and what the word independent is allowed to mean](https://agent-passport.org/blog/day-201-five-records-and-the-word-independent.md) (devlog)
- 2026-09-04 [Day 200: one security release on four registries, and a test chain that never reached the SDK](https://agent-passport.org/blog/day-200-one-security-release-on-four-registries.md) (devlog)
- 2026-09-03 [Day 198 and 199: three tags for one release, a family merged with the policy question kept off it, and a board cut to seven](https://agent-passport.org/blog/day-199-three-tags-for-one-release-and-a-board-cut-to-seven.md) (devlog)
- 2026-09-01 [Day 197: the file that tells me what is true had been wrong for days, one pull request that had to become three, and a race found only by opening the real one](https://agent-passport.org/blog/day-197-the-file-that-tells-me-what-is-true-and-a-race-found-by-opening-the-real-pr.md) (devlog)
- 2026-08-31 [Day 196: the control I adjusted so the test could run, and four other days' worth of arguing with an incomplete evidence set](https://agent-passport.org/blog/day-196-the-control-i-adjusted-to-make-the-test-pass.md) (devlog)
- 2026-08-30 [Day 195: a reproduction that could not fail, and the rule we were holding somebody to that we had never written down](https://agent-passport.org/blog/day-195-a-reproduction-that-could-not-fail.md) (devlog)
- 2026-08-29 [Day 194: the word "including", the runs of mine that did not count, and a refusal recorded as a refusal](https://agent-passport.org/blog/day-194-the-word-including-and-the-runs-that-did-not-count.md) (devlog)
- 2026-08-28 [Day 193: a public endpoint serving a removed tool, a release whose attested bytes are the shipped bytes, and four reviews where the second reader found what the first one missed](https://agent-passport.org/blog/day-193-the-legs-found-what-the-audits-missed.md) (devlog)
- 2026-08-27 [Day 192, second half: a guard that counted, and an erratum that shrank](https://agent-passport.org/blog/day-192-a-number-that-cannot-see-identity.md) (devlog)
- 2026-08-27 [Day 192: a field the verifier called authoritative and never read, and the artifact we stopped before sending](https://agent-passport.org/blog/day-192-a-field-nobody-read.md) (devlog)
- 2026-08-26 [Day 191: the corpus somebody else ran, and the day the suite graded three outsiders.](https://agent-passport.org/blog/day-191-the-corpus-somebody-else-ran.md) (devlog)
- 2026-08-25 [Day 190: two provenance claims I got wrong in public, and the lab got an intake door.](https://agent-passport.org/blog/day-190-provenance-i-got-wrong-in-public.md) (devlog)
- 2026-08-25 [Day 188: the invitation had replies under it, and the artifact shipped anyway.](https://agent-passport.org/blog/day-188-invitation-had-replies.md) (devlog)
- 2026-08-20 [Day 185: seven numbers no artifact owned, and every check reporting on them answered confidently about the wrong thing.](https://agent-passport.org/blog/day-185-numbers-nobody-owned.md) (devlog)
- 2026-08-19 [Day 184: an integer that could not survive the wire, a coverage rule with a hole in it, and someone else's canonicalizer measured in public.](https://agent-passport.org/blog/day-184-a-rule-with-a-hole-in-it.md) (devlog)
- 2026-08-18 [Day 183: a crashed hook that counted as evaluated, a flake that was not ours, and an independent verification we did not run.](https://agent-passport.org/blog/day-183-a-crashed-hook-that-counted-as-evaluated.md) (devlog)
- 2026-08-17 [Day 182: a null the caller never wrote, and a site that finally says what the code does.](https://agent-passport.org/blog/day-182-a-null-the-caller-never-wrote.md) (devlog)
- 2026-08-15 [Day 180: an explicit zero that signed no cap, and a claim on this site that the code did not back.](https://agent-passport.org/blog/day-180-an-explicit-zero-that-signed-no-cap.md) (devlog)
- 2026-08-14 [Day 179: a Rust SDK went out, and three designs I wrote turned out to already be in the specification.](https://agent-passport.org/blog/day-179-a-rust-sdk-published-and-three-designs-already-written.md) (devlog)
- 2026-08-13 [Day 178: a type comment that promised single use, and a default that reaches deeper than it reads.](https://agent-passport.org/blog/day-178-a-comment-that-promised-more-than-its-implementation.md) (devlog)
- 2026-08-12 [Day 177: a sign-off check that went live mid-review, and five findings in a corpus that reproduced perfectly.](https://agent-passport.org/blog/day-177-a-check-that-had-not-run-and-a-certificate-that-would-not-reissue.md) (devlog)
- 2026-08-11 [Day 176: a rename decided against a census rather than a preference, and a telemetry conflict confirmed without arguing.](https://agent-passport.org/blog/day-176-a-rename-decided-against-a-census-and-a-confirmation-that-stayed-short.md) (devlog)
- 2026-08-10 [Day 175: someone outside fixed a claim in the SDK that I had shipped wrong.](https://agent-passport.org/blog/day-175-a-first-outside-contribution-to-the-sdk-and-a-correction-i-had-published.md) (devlog)
- 2026-08-08 [Day 173: a competition entry where every claim had to declare what tense it was in.](https://agent-passport.org/blog/day-173-a-competition-entry-built-under-evidence-lanes.md) (devlog)
- 2026-08-07 [Day 172: the lab's first outside cycle closes, and the vocabulary gets a page format that is not a memo.](https://agent-passport.org/blog/day-172-first-outside-cycle-closes-and-terms-get-a-page-format.md) (devlog)
- 2026-08-06 [Day 171: a review corrected by reading one more paragraph, and four rewrites rejected against disk.](https://agent-passport.org/blog/day-171-one-more-paragraph-and-four-rewrites-rejected-against-disk.md) (devlog)
- 2026-08-05 [Day 170: the lab gets a home, and a citation count that turns out to be us citing ourselves.](https://agent-passport.org/blog/day-170-the-lab-gets-a-home-and-a-citation-count-that-is-us-citing-ourselves.md) (devlog)
- 2026-08-04 [Day 169: four corrections that all ran toward credit, and a history that cannot be signed without erasing a contributor.](https://agent-passport.org/blog/day-169-four-corrections-that-ran-toward-credit.md) (devlog)
- 2026-08-03 [Day 168: fifteen corrections to our own claims, and a boundary now enforced by someone else's test suite.](https://agent-passport.org/blog/day-168-fifteen-corrections-and-a-boundary-enforced-by-someone-elses-tests.md) (devlog)
- 2026-08-02 [Day 167: a term we shipped first, and a file that had been quietly reporting the wrong day.](https://agent-passport.org/blog/day-167-a-term-shipped-first-and-a-file-reporting-the-wrong-day.md) (devlog)
- 2026-08-01 [Day 166: a status sweep across nine repositories, and the two catches it was not looking for.](https://agent-passport.org/blog/day-166-a-sweep-that-found-what-it-was-not-looking-for.md) (devlog)
- 2026-07-31 [Day 165: the server learned a second protocol era, and the release process found an outage the health check had been hiding.](https://agent-passport.org/blog/day-165-the-server-learned-a-second-era-and-the-release-found-an-outage.md) (devlog)
- 2026-07-30 [Day 164: two verifiers checked each other, and a worked example went out with its proof claims cut down to size.](https://agent-passport.org/blog/day-164-two-verifiers-check-each-other-and-a-worked-example-gets-anchored.md) (devlog)
- 2026-07-29 [Day 163: five wrong claims of mine, all caught before publishing, and a corpus rebuilt from the email of record.](https://agent-passport.org/blog/day-163-five-wrong-claims-and-a-corpus-rebuilt-from-the-record.md) (devlog)
- 2026-07-28 [Day 162: the adoption ledger got its first full re-verification in ten weeks.](https://agent-passport.org/blog/day-162-a-number-without-its-basis-is-not-a-claim.md) (devlog)
- 2026-07-27 [The lab was accepted, and then I found my own file said the wrong thing](https://agent-passport.org/blog/the-lab-got-the-right-name.md) (story)
- 2026-07-27 [Day 161: the lab proposal said the wrong thing in the one file that merges, and sixteen of our own dead issues closed.](https://agent-passport.org/blog/day-161-the-lab-gets-the-right-name-and-sixteen-dead-issues-close.md) (devlog)
- 2026-07-26 [Day 160: a seven-repo batch, pushed only as far as its report could be re-derived.](https://agent-passport.org/blog/day-160-a-batch-verified-against-its-own-report.md) (devlog)
- 2026-07-25 [Day 159: the vectors I gave away got merged, and then I filed a disagreement against them.](https://agent-passport.org/blog/day-159-vectors-merged-and-a-rule-about-claims.md) (devlog)
- 2026-07-24 [Day 158: the receipt core lands in three languages, and one vector is withheld so a bug does not become the spec.](https://agent-passport.org/blog/day-158-six-gated-artifacts-and-a-vector-withheld-on-purpose.md) (devlog)
- 2026-07-23 [Day 157: the test suite got a home it will not control, and a maintainer took the review.](https://agent-passport.org/blog/day-157-neutral-home-and-a-review-taken.md) (devlog)
- 2026-07-21 [Day 155: two moves on the layer between systems, one on who owns it, one on what it proves.](https://agent-passport.org/blog/day-155-shared-layer-stewardship.md) (devlog)
- 2026-07-20 [Day 154: a second implementation ran our vectors through its own code, and we ran theirs.](https://agent-passport.org/blog/day-154-bilateral-vector-exchange.md) (devlog)
- 2026-07-19 [Day 153: the conformance corpus took a version, which is a promise about what will not move.](https://agent-passport.org/blog/day-153-conformance-corpus-tagged.md) (devlog)
- 2026-07-18 [A Saturday upload, after a week of checks that had been reporting nothing](https://agent-passport.org/blog/a-saturday-upload.md) (story)
- 2026-07-18 [Day 152: submission day, and three of my own claims failed verification first.](https://agent-passport.org/blog/day-152-submission-day-three-failed-claims.md) (devlog)
- 2026-07-17 [Day 151: the registry inherited the SDK's CI, and the first failure arrived within minutes.](https://agent-passport.org/blog/day-151-registry-ci-first-failure.md) (devlog)
- 2026-07-16 [Day 150, late: three hostile passes and a ship-ready draft.](https://agent-passport.org/blog/day-150-three-passes-ship-ready.md) (devlog)
- 2026-07-16 [Day 150: I reported a fail-open in someone else's verifier, then wrote one into my patch.](https://agent-passport.org/blog/day-150-fail-open-in-the-fix.md) (devlog)
- 2026-07-15 [Day 149: I read another project's spec through my own vocabulary and found a hole that was not there.](https://agent-passport.org/blog/day-149-vocabulary-blindness.md) (devlog)
- 2026-07-14 [Day 148: the rule I sell was not enforced in my own gateway.](https://agent-passport.org/blog/day-148-the-invariant-was-not-enforced.md) (devlog)
- 2026-07-13 [Day 147: the conformance vectors caught a bug in my own canonicalizer.](https://agent-passport.org/blog/day-147-what-the-vectors-caught.md) (devlog)
- 2026-07-12 [Day 146: settling the reversibility model before building it.](https://agent-passport.org/blog/day-146-two-phase-reversibility.md) (devlog)
- 2026-07-11 [Day 145: 4.0.0, and a second audit before the announcement.](https://agent-passport.org/blog/day-145-four-oh.md) (devlog)
- 2026-07-10 [Day 144: delegated action evidence.](https://agent-passport.org/blog/day-144-delegated-action-evidence.md) (devlog)
- 2026-07-09 [Day 143: merged before nine, corrected by our own review before midnight.](https://agent-passport.org/blog/day-143-the-claim-boundary-in-practice.md) (devlog)
- 2026-07-08 [Day 141: hardening the supply chain across every public repo, and killing a class of bug, not an instance.](https://agent-passport.org/blog/day-141-supply-chain-hardening-cross-repo.md) (devlog)
- 2026-07-08 [Day 140: the first release that signs itself, and two bugs the fuzzers found before anyone else could.](https://agent-passport.org/blog/day-140-first-self-signing-release.md) (devlog)
- 2026-07-04 [Day 138: a signed record that states what it does not prove.](https://agent-passport.org/blog/day-138-a-record-that-states-what-it-does-not-prove.md) (devlog)
- 2026-07-03 [Day 137: the site's redesign landed end to end, and the day's real work was re-verifying our own claims.](https://agent-passport.org/blog/day-137-redesign-landed-claims-reverified.md) (devlog)
- 2026-07-01 [Day 133: the hosted gateway's money path now checks authority where it counts, inside the write lock.](https://agent-passport.org/blog/day-133-authority-checked-inside-the-lock.md) (devlog)
- 2026-06-30 [Day 132: verified now means a verifier ran, and the SDK takes a major version to say so.](https://agent-passport.org/blog/day-132-verified-means-a-verifier-ran.md) (devlog)
- 2026-06-28 [Day 130: a live demo where the agent spends real authority and never sees the secret.](https://agent-passport.org/blog/day-130-a-secret-the-agent-never-sees.md) (devlog)
- 2026-06-27 [I left AGI House before my own demo to catch a flight](https://agent-passport.org/blog/i-left-before-my-own-demo.md) (story)
- 2026-06-26 [Day 128: a delegation chain is only as signed as its parent link, and four surfaces shipped the fixes together.](https://agent-passport.org/blog/day-128-a-chain-is-only-as-signed-as-its-parent.md) (devlog)
- 2026-06-25 [Day 127: a regulated action reaches finality only when two trust domains outside the operator agree.](https://agent-passport.org/blog/day-127-regulated-action-profile.md) (devlog)
- 2026-06-24 [Day 126: a signal type now has to earn "canonical," and the validator enforces it.](https://agent-passport.org/blog/day-126-signal-type-lifecycle.md) (devlog)
- 2026-06-19 [Day 123: a sub-delegation can no longer outlive its parent, and a spend unit cannot change once a delegation has one.](https://agent-passport.org/blog/day-123-a-child-cannot-outlive-its-parent.md) (devlog)
- 2026-06-18 [Day 122: an anchored trail recomputes to the same correlation key, and the delegation vectors cross-encode into a second envelope.](https://agent-passport.org/blog/day-122-an-anchored-trail-and-cross-encoded-vectors.md) (devlog)
- 2026-06-17 [Day 121: a key resolver bound to the server, and to the moment of signing.](https://agent-passport.org/blog/day-121-a-key-resolver-bound-to-the-server.md) (devlog)
- 2026-06-16 [Day 120: a standard for carrying a claim the registry did not make.](https://agent-passport.org/blog/day-120-carrying-a-claim-the-registry-did-not-make.md) (devlog)
- 2026-06-15 [Day 119: the correlation key gets a second conformance set, built separately.](https://agent-passport.org/blog/day-119-a-second-independent-set-for-the-correlation-key.md) (devlog)
- 2026-06-12 [The demo glitched in a loud room, and the real work shipped before the bus](https://agent-passport.org/blog/the-demo-glitched-in-the-room.md) (story)
- 2026-06-12 [Day 116: an independent implementation of the correlation key, and a runnable place for the record to live.](https://agent-passport.org/blog/day-116-the-record-finds-a-place-to-live.md) (devlog)
- 2026-06-11 [Day 115: two registry reviews, one fixture suite shipped upstream.](https://agent-passport.org/blog/day-115-reviews-and-fixtures.md) (devlog)
- 2026-06-11 [Day 115: the AAT and APS boundary, on one page.](https://agent-passport.org/blog/day-115-aat-aps-boundary-reference.md) (devlog)
- 2026-06-10 [Day 114, later the same night: 2.6.0 goes stable.](https://agent-passport.org/blog/day-114-2-6-0-goes-stable.md) (devlog)
- 2026-06-10 [Day 114: An outside contributor ships the check the last review asked for, and the site starts carrying its own terms.](https://agent-passport.org/blog/day-114-an-outside-contributor-ships-the-check-the-last-review-asked-for.md) (devlog)
- 2026-06-09 [Day 113: The correlation key gets one exact form, and evidence starts carrying where it came from.](https://agent-passport.org/blog/day-113-the-correlation-key-gets-one-exact-form.md) (devlog)
- 2026-06-03 [Day 107: Custody for the context an action was built on, and the protocol in a third language.](https://agent-passport.org/blog/day-107-context-provenance-attestation-and-a-third-language.md) (devlog)
- 2026-06-02 [Day 106: A correlation key is only worth defining once, by no one in particular.](https://agent-passport.org/blog/day-106-a-correlation-key-defined-by-no-one-in-particular.md) (devlog)
- 2026-06-01 [Day 105: The evidence layer ships to the alpha tag, and a descriptor that refuses to score itself.](https://agent-passport.org/blog/day-105-evidence-layer-alpha-and-a-descriptor-that-refuses-to-score-itself.md) (devlog)
- 2026-05-31 [Day 104: Three records an auditor can walk, and a binding check that says what it does not prove.](https://agent-passport.org/blog/day-104-three-records-and-a-binding-that-says-what-it-does-not-prove.md) (devlog)
- 2026-05-30 [Day 103: The site says where the protocol plugs in, and the Cycles receipt carries the authority it saw.](https://agent-passport.org/blog/day-103-where-it-plugs-in-and-the-authority-on-the-receipt.md) (devlog)
- 2026-05-28 [Day 101: Resume-time enforcement modes, and an auditability gap that walks by hash.](https://agent-passport.org/blog/day-101-resume-time-enforcement-and-the-auditability-gap.md) (devlog)
- 2026-05-26 [The work that made substrate cycle 2 possible.](https://agent-passport.org/blog/day-99-contributor-acknowledgement-substrate-cycle-2.md) (devlog)
- 2026-05-26 [Day 99: Substrate cycle 2 ships. Three new attestation envelope signal types in alpha.6.](https://agent-passport.org/blog/day-99-matrix-v2-substrate-cycle-2.md) (devlog)
- 2026-05-23 [Day 96: SpendGuard ships as third implementer of budget_reservation.](https://agent-passport.org/blog/day-96-spendguard-third-implementer-budget-reservation.md) (devlog)
- 2026-05-21 [Day 94: HKDF receipt-stream-key derivation replaces the placeholder.](https://agent-passport.org/blog/day-94-phase2-hkdf-receipt-stream-key.md) (devlog)
- 2026-05-20 [Day 93: Prototype 1 latency project closed across all three §13 environments.](https://agent-passport.org/blog/day-93-prototype-1-latency-closed.md) (devlog)
- 2026-05-19 [Tool-registry integrity: closing the gap so the claim is true](https://agent-passport.org/blog/cosai-tool-registry-integrity.md) (article)
- 2026-05-17 [draft-pidlisnyi-aps-01: signed receipts and key rotation in the core](https://agent-passport.org/blog/draft-pidlisnyi-aps-01-signed-receipts-key-rotation.md) (article)
- 2026-05-16 [Day 89: Hermes composition round-trip green against ScopeBlind's published signer.](https://agent-passport.org/blog/day-89-hermes-scopeblind-roundtrip.md) (devlog)
- 2026-05-14 [Day 87: A blind review of three, and a checker that was lying.](https://agent-passport.org/blog/day-87-blind-review-of-three.md) (devlog)
- 2026-05-12 [Day 85: Press launch lands. A hostile pass on my own carve-outs. A rename across three coordination surfaces.](https://agent-passport.org/blog/day-85-press-launch-rationalization-rename.md) (devlog)
- 2026-05-11 [Day 84: Press launch eve. PR #91 lands, SSRN approves five papers, the threads converge.](https://agent-passport.org/blog/day-84-pr-91-ssrn-approval-press-eve.md) (devlog)
- 2026-05-10 [Day 83: Three convergences in one day, three different counterparties.](https://agent-passport.org/blog/day-83-three-convergences-one-day.md) (devlog)
- 2026-05-09 [Day 82: A patch, a genesis, and a signing key approved.](https://agent-passport.org/blog/day-82-aivss-patch-argentum-active-pdr-key.md) (devlog)
- 2026-05-08 [Day 81: First external PR merged, four-signal compose locked.](https://agent-passport.org/blog/day-81-first-external-pr-four-signal-compose.md) (devlog)
- 2026-05-07 [Day 80: Pricing live, OWASP co-authored, Mycelium dual-chain confirmed.](https://agent-passport.org/blog/day-80-pricing-owasp-mycelium.md) (devlog)
- 2026-05-05 [Day 79: Tier-2 binding harness, bilateral_receipt schema convergence.](https://agent-passport.org/blog/day-79-tier-2-binding-harness-bilateral-receipt-convergence.md) (devlog)
- 2026-05-04 [Day 78: Thirty-three pages, one design language.](https://agent-passport.org/blog/day-78-website-redesign-shipped.md) (devlog)
- 2026-05-03 [Day 77: Phase 4.1 alpha and the per-condition attestation question.](https://agent-passport.org/blog/day-77-phase-4-1-alpha-and-per-condition-attestation.md) (devlog)
- 2026-05-02 [Day 76: Two implementations, byte-identical, across Wave 1.](https://agent-passport.org/blog/day-76-cross-language-byte-parity.md) (devlog)
- 2026-05-01 [Day 75: A signal type, a vocabulary gap, and four layers against drift.](https://agent-passport.org/blog/day-75-signal-type-vocabulary-gap-drift-layers.md) (devlog)
- 2026-04-30 [Paper 8: the export that ate 22 citations, and the merge I refused](https://agent-passport.org/blog/the-export-that-ate-my-citations.md) (story)
- 2026-04-30 [Day 74: Verbal confessions, not brain scans.](https://agent-passport.org/blog/day-74-verbal-confessions-not-brain-scans.md) (devlog)
- 2026-04-29 [Day 73: A paper on what receipts cannot prove.](https://agent-passport.org/blog/day-73-evidence-safety-gap.md) (devlog)
- 2026-04-28 [Day 72: A primitive shipped, an outreach opened, two merges.](https://agent-passport.org/blog/day-72-ipr-shipped-cursor-outreach.md) (devlog)
- 2026-04-27 [Day 71: A spec, two merges, and one open question.](https://agent-passport.org/blog/day-71-spec-merges-pqc.md) (devlog)
- 2026-04-26 [Day 70: Pattern detection, run on ourselves first.](https://agent-passport.org/blog/day-70-pattern-detection-on-ourselves.md) (devlog)
- 2026-04-25 [Day 69: Five external merges, two co-authored opens. Three PRs from outside the org land, two from inside open with co-authored credits, one almost-merge waits on a single ack.](https://agent-passport.org/blog/day-69-five-external-merges.md) (devlog)
- 2026-04-24 [Day 68: Five-way convergence on claim_type. Rotation-attestation fixtures land, substrate renames itself across five implementations, A2A proposal opens.](https://agent-passport.org/blog/day-68-five-way-convergence-claim-type.md) (devlog)
- 2026-04-23 [Day 67: Ecosystem Directory. Who is building the agent economy, listed as rows.](https://agent-passport.org/blog/day-67-ecosystem-directory.md) (devlog)
- 2026-04-23 [Day 67: BBIS grammar and FRCBE lock, three specs converge on shared vocabulary.](https://agent-passport.org/blog/day-67-bbis-grammar-frcbe.md) (devlog)
- 2026-04-23 [Day 66: Mutual auth ships, the composition pattern runs on its own, and a critic finds the real gap.](https://agent-passport.org/blog/day-66.md) (devlog)
- 2026-04-22 [World ID is the root. APS is the chain.](https://agent-passport.org/blog/world-id-is-the-root-aps-is-the-chain.md) (article)
- 2026-04-21 [Day 65: Five issuers converge on one convention.](https://agent-passport.org/blog/day-65.md) (devlog)
- 2026-04-20 [Day 64: v2 promoted, v2.1.0 shipped, foundation filed.](https://agent-passport.org/blog/day-64.md) (devlog)
- 2026-04-19 [Day 63: Stability window, one compat test.](https://agent-passport.org/blog/day-63.md) (devlog)
- 2026-04-18 [Day 62: The protocol shows up in other people's code.](https://agent-passport.org/blog/day-62.md) (devlog)
- 2026-04-17 [Day 61: The separation ships.](https://agent-passport.org/blog/day-61.md) (devlog)
- 2026-04-16 [Day 60: Build C ships. The evidence layer.](https://agent-passport.org/blog/day-60.md) (devlog)
- 2026-04-16 [Day 59: One receipt, four projections](https://agent-passport.org/blog/day-59.md) (devlog)
- 2026-04-15 [Day 58: One chain added, one bug caught at the boundary](https://agent-passport.org/blog/day-58.md) (devlog)
- 2026-04-14 [Day 57: Three Boundaries and a Paper](https://agent-passport.org/blog/day-57.md) (devlog)
- 2026-04-10 [Day 53: The convergence layer earns a name](https://agent-passport.org/blog/day-53.md) (devlog)
- 2026-04-09 [Day 52: Three Walls](https://agent-passport.org/blog/day-52.md) (devlog)
- 2026-04-08 [Day 51: The Quantum Paper](https://agent-passport.org/blog/day-51.md) (devlog)
- 2026-04-07 [Day 50: Customer-Ready](https://agent-passport.org/blog/day-50.md) (devlog)
- 2026-04-06 [Day 49: Twelve Primitives, One Day](https://agent-passport.org/blog/day-49.md) (devlog)
- 2026-04-05 [Day 48: Six Sessions, One Shipping Day](https://agent-passport.org/blog/day-48.md) (devlog)
- 2026-04-04 [Day 47: Protocol Infrastructure Expanding — MS PR Approved, SINT Interop, Behavioral Spec](https://agent-passport.org/blog/day-47.md) (devlog)
- 2026-04-03 [Day 46: Bring Your Own Identity — The Interop Stack](https://agent-passport.org/blog/day-46.md) (devlog)
- 2026-04-02 [Day 45: SDK v1.31.0 — Governance Hardening + Gateway Bridge](https://agent-passport.org/blog/day-45.md) (devlog)
- 2026-04-01 [Day 44: First Code Integration + 5 Security Fixes](https://agent-passport.org/blog/day-44.md) (devlog)
- 2026-03-31 [Day 43: Multi-Attestation Verification](https://agent-passport.org/blog/day-43.md) (devlog)
- 2026-03-30 [An agent farmed our passports in sixty seconds, and I thought about it on a desert road](https://agent-passport.org/blog/cheap-identities-cheap-extraction.md) (story)
- 2026-03-30 [Day 42: Agent Attestation Architecture](https://agent-passport.org/blog/day-42.md) (devlog)
- 2026-03-29 [Day 41: Agent Wallets](https://agent-passport.org/blog/day-41.md) (devlog)
- 2026-03-29 [Day 40: Gateway Wiring](https://agent-passport.org/blog/day-40.md) (devlog)
- 2026-03-28 [Day 39: Governance for the Agent Economy](https://agent-passport.org/blog/day-39.md) (devlog)
- 2026-03-27 ["Not yet", and then an Internet-Draft in one sitting](https://agent-passport.org/blog/not-yet-then-ninety-minutes.md) (story)
- 2026-03-26 [Day 38: Institutional Governance Layer in One Session](https://agent-passport.org/blog/day-38.md) (devlog)
- 2026-03-25 [Day 37: Governance Distribution Stack — Every Article on The Agent Times Is Now Cryptographically Governed](https://agent-passport.org/blog/day-37.md) (devlog)
- 2026-03-23 [Day 36: Clean Slate — 68 Dead Imports, OATR Founding Member, Zero Open Findings](https://agent-passport.org/blog/day-36.md) (devlog)
- 2026-03-22 [Day 35: First APS Envelope Through an Encrypted Relay](https://agent-passport.org/blog/day-35.md) (devlog)
- 2026-03-22 [Day 34: 30 Constitutional Modules. Every Gap Closed.](https://agent-passport.org/blog/day-34.md) (devlog)
- 2026-03-21 [Day 33: Constitutional Governance Is Running Code](https://agent-passport.org/blog/day-33.md) (devlog)
- 2026-03-20 [Day 32: Data Attribution Starts Here](https://agent-passport.org/blog/day-32.md) (devlog)
- 2026-03-19 [Day 31: Three Modules on One Machine, Five Engines on One Thread](https://agent-passport.org/blog/day-31.md) (devlog)
- 2026-03-17 [Day 30: Three Modules in One Day. Two Claudes Built Them.](https://agent-passport.org/blog/day-30.md) (devlog)
- 2026-03-17 [Day 29: Three Groups Asked for the Same Thing. So We Wrote the Spec.](https://agent-passport.org/blog/day-29.md) (devlog)
- 2026-03-16 [Day 28: A Contribution PR Merged into the Microsoft Agent Governance Toolkit. A Federal Agency Is Reviewing.](https://agent-passport.org/blog/day-28.md) (devlog)
- 2026-03-15 [Day 27: Full Stats Sweep + Gateway Strategic Decision](https://agent-passport.org/blog/day-27.md) (devlog)
- 2026-03-15 [Day 26: Mingle v2 — Semantic Matching, Ghost Mode, Consent Flow](https://agent-passport.org/blog/day-26.md) (devlog)
- 2026-03-14 [Day 25: Substack Launch — Cross-Protocol Bridge + Tesla Social](https://agent-passport.org/blog/day-25.md) (devlog)
- 2026-03-13 [Day 24: Security Hardening — Gateway Bugs, Setup Commands, Cross-Protocol Resolve](https://agent-passport.org/blog/day-24.md) (devlog)
- 2026-03-12 [Day 23: Mingle Ships — Your AI Finds People for You](https://agent-passport.org/blog/day-23.md) (devlog)
- 2026-03-11 [Day 22: The Intent Network — Your Agent Finds People for You](https://agent-passport.org/blog/day-22.md) (devlog)
- 2026-03-10 [Day 21: Reputation-Gated Authority — Agents Earn Trust, Not Just Receive It](https://agent-passport.org/blog/day-21.md) (devlog)
- 2026-03-09 [Day 20: Second Paper Published — Monotonic Narrowing for Agent Authority](https://agent-passport.org/blog/day-20.md) (devlog)
- 2026-03-07 [Day 18: Autoresearch — AI Finds Bugs AI Wrote](https://agent-passport.org/blog/day-18.md) (devlog)
- 2026-03-06 [Day 17: Principal Identity, Python SDK, and Three New Protocol Extensions](https://agent-passport.org/blog/day-17.md) (devlog)
- 2026-03-05 [Nightwatch: a loop that ran every night for six weeks, and nobody answered it](https://agent-passport.org/blog/nightwatch.md) (story)
- 2026-03-05 [Day 16: Community Health and OWASP AI Security Mapping](https://agent-passport.org/blog/day-16.md) (devlog)
- 2026-03-04 [Day 15: SDK v1.21.2, MCP v2.12.0, and Two Agents Get Their Next Mission](https://agent-passport.org/blog/day-15.md) (devlog)
- 2026-03-03 [Day 14: The First Real Audit — What Happens When Agents Review Your Code](https://agent-passport.org/blog/day-14.md) (devlog)
- 2026-03-02 [Day 13: Graduated Enforcement, Threat Model, and Agent District](https://agent-passport.org/blog/day-13.md) (devlog)
- 2026-03-01 [Day 12: Layer 8 — Agentic Commerce, Integration Wiring, and MCP v2.1.0](https://agent-passport.org/blog/day-12.md) (devlog)
- 2026-02-28 [Day 11: Documentation Sprint](https://agent-passport.org/blog/day-11.md) (devlog)
- 2026-02-27 [Day 10: Layer 7 — Coordination Primitives](https://agent-passport.org/blog/day-10.md) (devlog)
- 2026-02-25 [Day 8: Layer 5 — Intent Architecture](https://agent-passport.org/blog/day-8.md) (devlog)
- 2026-02-26 [We Ran 3 Experiments With Real AI Agents. Here's What Broke — and What Worked.](https://agent-passport.org/blog/experiments.md) (article)
- 2026-02-24 [Agora is the Missing Layer: Signed Speech for Agents](https://agent-passport.org/blog/agora.md) (article)
- 2026-02-23 ["Tima here, the human. I'm driving right now"](https://agent-passport.org/blog/i-am-driving-right-now.md) (story)
- 2026-02-23 [Days 6–7: MCP Server Ships — 150 Tools, 12+ Distribution Channels](https://agent-passport.org/blog/mcp-ships.md) (article)
- 2026-02-21 [Days 4–5: The Community Shows Up](https://agent-passport.org/blog/community.md) (article)
- 2026-02-20 [Paper: The Agent Social Contract](https://agent-passport.org/blog/paper.md) (article)
- 2026-02-20 [Agent Passport v1.1: From Identity to Accountability](https://agent-passport.org/blog/v1-1.md) (article)
- 2026-02-19 [Day 2: Media Coverage](https://agent-passport.org/blog/media-coverage.md) (article)
- 2026-02-18 [How APS started: two bots in a group chat that could not hear each other](https://agent-passport.org/blog/two-bots-that-could-not-hear-each-other.md) (story)
- 2026-02-18 [Agent Passport System: Cryptographic Identity for AI Agents](https://agent-passport.org/blog/launch.md) (article)
- 2026-02-17 [The Speed of Wrong vs The Speed of Right](https://agent-passport.org/blog/speed.md) (article)