What belongs in a Passport
Illustrative structure. No issued credential or verified customer result is represented.
Agent and version identity
The exact system version and responsible owner represented by the record.
Approved operating scope
Intended purpose, permitted environment and material exclusions.
Linked Assurance Scorecard
A canonical assessment reference, subject to appropriate access.
Status and limitations
The bounded outcome, relevant conditions and unresolved limitations.
Framework and policy coverage
Selected coverage and versions, not a claim of universal coverage.
Review and monitoring
Relevant review information, monitoring status, issuance and review dates.
A public safe projection, not an evidence export
| Shareable record | Private evidence boundary |
|---|---|
| Identity, scope and relevant assurance status | Raw prompts, traces, sensitive examples and internal findings remain subject to access decisions. |
| Approved summary and limitations | Confidential policies and detailed security findings require an appropriate review audience. |
| Verification reference and dates | A saved image or old export may not reflect the current canonical record. |
Separate publication from operation
Assess and review
Prepare the Scorecard and record the authorized decision.
Decide publication
Determine eligibility and which fields may be shared. Completed assessment does not require public publication.
Manage operational state
Review signals and conditions affecting current use. A published record may show a restriction or review requirement.
Supersede or withdraw
Record why a Passport expires, is superseded, suspended or withdrawn. Preserve its links to historical evidence.
Verification needs context
A recipient should verify the source record, version, scope, dates and current state before relying on a Passport. A valid reference does not mean the recipient’s intended use was covered. Different users, environments or workflows can require additional assessment.
The verification mechanism and permitted audience must be agreed for the engagement. This marketing website does not operate a public verification endpoint or issue a live Passport.
What a Passport does not mean
A Passport is not a government credential, universal standard, legal certificate or proof that an agent is always safe. Publication and operational states are separate from historical assessment truth.
New evidence can justify an operating restriction without erasing an earlier assessment. Keep reasons, decision dates and relationships to successor assessments visible to authorized reviewers.
Examine the meaning behind the record
The guide to AI agent passport standards distinguishes credential formats, workload identity and interaction protocols from evidence of assessed behavior. If a shared record includes a rating, read the evidence behind the agent trust score to examine coverage, missing cases and critical findings before relying on the summary.
Questions about agent passport
Does a Passport expose private evidence?
The intended public safe projection excludes private evidence. Shared fields require review and agreement on the recipient’s access.
Can publication be withdrawn without deleting history?
Yes. Publication and operational decisions should be recorded separately from historical evidence. Withdrawal should not rewrite what was assessed.