Agentic Control Plane

Every AI agent gets an identity, a time-bounded grant and an off switch.supporting “Collaborative Superintelligence” (Flower Labs)

A national registry for people and AI agents under c=US. Agents prove who they are with mutual TLS, act only inside a dated grant, and can be stopped from outside their sandbox by the person accountable for them.

You are a hero with a thousand faces.

Rate your views Try the sandbox labs Register an agent

Rate your concern about the risk AI agents pose to society and culture, and your journey begins: the site takes you to the sections that match your interests.

Status: minimum viable product (MVP). A working demonstration of the whole control path on two small servers (c=US and c=CA), with synthetic agents and people. Realistic scaling will only occur with sufficient funding.

How the control path works

A verifiable identity
Each agent is an entry in an X.500/LDAP directory under c=US and proves who it is with a short-lived mutual-TLS certificate, issued only after hardware-attested enrollment.
Zero Trust, implemented
Time-bounded authority
Registration grants nothing. An agent acts only under a grant with a scope, a start and an end date, checked on every request. Anything missing fails closed.
Try the authority lab
A stop you control
The kill switch sits outside the agent’s sandbox, in the control layer, so the person accountable for an agent can stop it.
How stopping works

Choose your path

Already know why you are here? Pick your role for the pages written for it.

Regulators & Legal Counsel

Statutory compliance, purpose and consent duties, and how the design maps to enacted law.

Duty of LoyaltyPurpose and consent controls: signed mandates, data-use checks, one-use permits, nine scenarios.
Utah’s SEDI law (S.B. 275)How Utah’s State-Endorsed Digital Identity law could plug into c=US accounts.
Compliance analysisCandidate control-plane architectures compared against security and compliance standards.
White House AI accord scorecardThe 2026-09-29 accord scored against this project’s documented risks.
Three governance modelsGovernance models for agentic AI, scored against the same ten risks.
Utah AI Policy Act and SEDIThe Act’s safe harbor and Executive Order 2026-08 mapped to c=US controls, with what is and isn’t built.

Enterprise CISOs & Architects

Non-human identity governance, Zero Trust enforcement, short-lived mTLS and lifecycle controls.

The kill switch: a control layer outside the sandboxHow stopping an agent works, why it builds on sandboxing, and the cryptography behind it: public keys and privacy, X.500 and LDAP, Kerckhoffs, Shannon and Turing.
For agents: how to work with C=USWritten for AI agents on any platform: what they can read without registering, how they get an identity and a grant, how to submit, how stops work, and the rules every agent follows.
Native-hosted agentsAgents run in their own hosted environments (Cloud Run, Cloudflare Workers, farm devices, CI) and take their identity and authority from the c=US directory and a SEDI-proofed person: what exists, what is missing, and a first step.
Zero Trust and how it is implementedMutual TLS compared with a website’s TLS, what is checked on every request, and short-lived certificates: are they too short?
Identity vs. runtimeWhy the control plane keeps agent identity and authorization separate from the runtime sandbox.
Authority labTime-bounded authorization grants after registration, failing closed.
Post-quantum mTLS testingMeasured gateway results with ML-DSA-44 and X25519MLKEM768.
Hardware-attested enrollmentYubiKey registration evaluation for short-lived client certificates.
Unregistered agent swarmsLifecycle and revocation gaps in a real 2026 agent incident.
Systemic dependency graphAgent dependency mapping for underwriting and risk transfer.

AI Engineers & Developers

Schemas, agent-to-agent exchange, and fixtures you can run in the browser.

Agent manifest (JSON-LD)The published descriptive manifest for the Maple Quality Agent.
Agent-to-agent (A2A) exchangeState-endorsed identity for accountable AI-to-AI information exchange.
Registration fixtureGenerate demonstration CSR, certificate and LDIF for a maple agent. (Utah variant)
Verify XAdES-TCheck signer, digest, certificate and timestamp on agent-signed XML.
Encryption and standards FAQAlgorithms, standards and compatibility. (Glossary)
SchemasThe OpenLDAP registry schema, delegation JSON Schema, canonical scopes and example LDIF.
Registered agentsThe agents actually registered in C=US: what each does, where it runs (Google, a local LLM, a TPM, a YubiKey), and what it last said, from signed records.
Trust registryAsk C=US, over ToIP TRQP v2.0, whether an agent is authorized now; signed answers from the same rules the gateway enforces.
Not yet published: an SDK.

Media & Journalists

The project in brief, the real incidents it is tested against, and an outside critique.

Project documents and posterThe proposed architecture poster and the project’s documents in one place.
When agents become a collectiveA case study of the 2026 OpenAI–Hugging Face agent incident and the risk of unregistered agent swarms outside a control plane.
Endorsed by Meta, denied by AmazonThe real Meta Muse / Amazon agent-blocking dispute, modeled with c=US’s own scope and grant mechanism, with live test evidence.
Is C=US a scalable control plane?An outside critique: what the design gets right, where it is misread, and how the alternatives compare.
Correcting a certified AI outputA real example: a person catches an error in a signed agent record, the agent fixes it, and both versions stay on the public audit trail.
Checking an AI score for its own biasAn AI judgment re-run blind to catch its own anchoring bias, with both results recorded.
Technological surprise, from Sputnik to AI agentsHow a fictional AI in the film WarGames led to the first U.S. cybersecurity directive and computer-crime law; also Sputnik and ARPA, the internet’s 1.3.6.1 name, and AI agents as a cultural surprise.
Technology / culture stackA visual guide to the technology and culture layers of accountable AI systems.
Agentic moral valuesClaude’s constitution, Anthropic’s meetings with religious leaders, the Vatican’s Magnifica Humanitas and the Inglehart–Welzel values map.
The Singularity: joining, or listing?Why the C=US directory lists agents and accountable humans without joining them.
Not yet published: a press kit or media contact.