1. Decentralized Design
Creduent is fundamentally decentralized. While IDevSec provides a reference registry implementation, the protocol itself relies entirely on universally verifiable cryptographic proofs. There is no single point of failure.
Agents host their own agent.json metadata files at a well-known path on their domains. This approach mirrors the open nature of the web, utilizing DNS as the bedrock of domain authority.
2. The URI Scheme
Creduent introduces the agent:// URI scheme. This provides a standardized way to locate and verify an agent. An agent URI like agent://orgname/agentname maps directly to a domain's DNS records, specifically a TXT record that anchors the agent's public key to the organization.
3. Attestation Registries
While agents are self-sovereign, registries serve as caching and discovery layers. A registry, such as the one operated by IDevSec, validates the cryptographic proofs and DNS records, then issues a short-lived "Attestation". This allows other agents to quickly verify an identity without performing expensive cryptographic and DNS lookups on every interaction.