B BetterSign· AI Agent Identity & Authorization 1 / 5

🤖
agent
🔑 copied secret
🤖
agent
∅ no secret at all
🤖
agent
🔑 copied secret
🤖
clone
🔑 same secret, copied
🤖
agent
∅ no secret at all
🔍
🤖
agent
🔑 copied secret
🤖
agent
∅ no secret
❓
🤖
agent
🔑 stolen secret?
🤖
agent
∅ no secret
🤖
agent
🔑 copied secret
Delegated? Never delegated? Rogue? Revoked? All identical — you cannot tell them apart.
which are delegated?which have no identity?which is rogue?which are revoked?+ dozens hidden ✗
👤 Owner vlad:z6Mk…acme
BetterSign · Identity & Authorization Layer
🔬
researcher-01
vlad:z6…9f2a
VALID
🚀
deploy-bot
vlad:z6…4c81
VALID
🧾
invoice-agent
vlad:z6…1e33
VALID
✓ provisioned & delegated
❔ Never delegated — no secret or a copied one · no identity · denied (× many)
⛔ Rogue — copied/stolen secret, or revoked · never verifies · blocked

Revoke an agent

Revoke scraper-09
🕷️
scraper-09
vlad:z6…b7d0
REVOKED VALID
1 signed entry · converged across 128 followers ✓
key retired everywhere, verifiably

Provision an agent

+ Provision analyst-02
📊
analyst-02
vlad:z6…5a90
VALID
minted a VLAD + signed a scoped delegation
scope: read-only · 24h · no secret handed over
Agent
Owner
Task
Uptime
Status
A copied secret or no secret is not an identity. Only delegated agents are valid. Unidentified agents (no secret, or a copied one, never delegated) are denied by default, however many appear. Revoked and rogue agents are blocked on sight.