diff --git a/docs/competitive-analysis.md b/docs/competitive-analysis.md index 762c554..ad474eb 100644 --- a/docs/competitive-analysis.md +++ b/docs/competitive-analysis.md @@ -123,6 +123,26 @@ No identity flows across MCP and A2A protocol boundaries: **AIP relationship:** Enterprises already running SPIFFE can use SPIFFE SVIDs as the root credential in AIP Block 0. +### ERC-8004 (Trustless Agents) + +**Status:** Draft EIP, active development [ERC-8004]. Testnet deployments on Ethereum Sepolia, Base Sepolia, Polygon Amoy, Arbitrum Sepolia. + +**Strengths:** +- On-chain agent identity registry (Ethereum/EVM) +- Delegation chains recorded on-chain for auditability +- Compatible with standard Ethereum tooling (wagmi, ethers, viem) +- Cross-chain via CCIP/LayerZero read + +**Limitations:** +- Ethereum-only (EVM chains), no native support for non-EVM agents +- On-chain verification costs gas +- No protocol bindings for MCP/A2A/HTTP +- Not designed for ephemeral/off-chain agent interactions + +**AIP relationship:** ERC-8004 [ERC-8004] and AIP are complementary. AIP provides lightweight off-chain agent identity and delegation for agent-to-agent protocol calls (MCP, A2A, HTTP). ERC-8004 provides an on-chain registry for agent discoverability, on-chain settlement, and permanent audit trails. An AIP identity document can include an `erc8004` extension linking to an agent's on-chain registration, and an ERC-8004 delegation can reference an AIP token's scope as off-chain context. The two protocols layer naturally: AIP for the fast path, ERC-8004 for the durable record. + +**Kuberna Labs** is developing an AIP → ERC-8004 adapter to demonstrate the documented extension linkage. The adapter will be linked here once it works against the AIP spec. + ### Other Emerging Projects | Project | Focus | Gap | @@ -130,6 +150,7 @@ No identity flows across MCP and A2A protocol boundaries: | Mastercard Verifiable Intent | Crypto audit trail for agent commerce | Commerce-only | | AstraCipher | DID + VC SDK for agents (post-quantum) | New, no adoption | | OpenAgents AgentID | W3C DID for agents | Platform-coupled | +| ERC-8004 (Trustless Agents) | On-chain agent identity & delegation registry | Ethereum-only, needs bridging to agent protocols | ## Token Format Comparison @@ -201,3 +222,4 @@ Single token answers: "Who authorized this? Through which agents? With what scop - [Okta: Agent Delegation Chain Security](https://www.okta.com/blog/ai/agent-security-delegation-chain/) - [AI Agent Identity Crisis (Strata)](https://www.strata.io/blog/agentic-identity/the-ai-agent-identity-crisis-new-research-reveals-a-governance-gap/) - [Knostic MCP Server Security Scan](https://ragaboutit.com/the-ai-agent-identity-crisis-why-mcps-security-gap-threatens-your-enterprise-rag-system/) +- [ERC-8004: Agent Identity & Delegation Registry (Ethereum ERC)](https://eip.ethereum.org/EIPS/eip-8004)