{"$id":"https://KATA.org/schemas/agent.json","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":true,"description":"Conceptual schema for an AI agent's identity and provenance within the KATA framework. Status: Concept / Open Design — not production ready.","examples":[{"agent_id":"shopper-01","cryptographic_identity":{"fingerprint":"SHA256:9f:31:ab:…","mechanism":"x509-svid"},"deployment_environment":"cloud:ca-central-1","developer":"acme-ai","infrastructure":{"asn":"AS64496","ip_range":"203.0.113.0/24","tls_posture":"tls1.3-only"},"model":"acme-2.1","model_version":"2026-09-15","name":"Shopper Agent","provider":"acme-ai","reputation":{"block_rate":0.02,"score":82,"sessions_evaluated":1240},"security_posture":{"sandboxed":true,"tool_permissions":["web_search","payments"]}}],"properties":{"agent_id":{"description":"Unique, stable identifier for the agent instance.","type":"string"},"behavior_history":{"additionalProperties":true,"description":"Summary of prior sessions: volume, anomaly rate, decision history.","type":"object"},"credentials":{"description":"Credentials the agent presents, with issuance and freshness metadata.","items":{"additionalProperties":true,"properties":{"expires_at":{"format":"date-time","type":"string"},"issued_at":{"format":"date-time","type":"string"},"type":{"type":"string"}},"type":"object"},"type":"array"},"cryptographic_identity":{"additionalProperties":true,"description":"Keys, certificates, or attestations binding the agent to its identity.","properties":{"fingerprint":{"type":"string"},"mechanism":{"description":"e.g. 'x509-svid', 'jwk', 'did'.","type":"string"}},"type":"object"},"deployment_environment":{"description":"Where the agent runs, e.g. 'cloud:us-east-1', 'on-device', 'enterprise-vpc'.","type":"string"},"developer":{"description":"The organization that developed the agent (may differ from provider).","type":"string"},"infrastructure":{"additionalProperties":true,"description":"Network and runtime identity signals.","properties":{"asn":{"type":"string"},"attestation":{"description":"Attestation mechanism, if any.","type":"string"},"ip_range":{"type":"string"},"tls_posture":{"type":"string"}},"type":"object"},"model":{"description":"Underlying model family or identifier.","type":"string"},"model_version":{"description":"Model version or snapshot. Behavior may change between versions.","type":"string"},"name":{"description":"Human-readable agent name.","type":"string"},"provider":{"description":"The organization operating the agent.","type":"string"},"reputation":{"additionalProperties":true,"description":"Accumulated trust signal from past behavior.","properties":{"block_rate":{"maximum":1,"minimum":0,"type":"number"},"score":{"maximum":100,"minimum":0,"type":"number"},"sessions_evaluated":{"minimum":0,"type":"integer"}},"type":"object"},"security_posture":{"additionalProperties":true,"description":"Known posture signals: sandboxing, tool permissions, audit status.","type":"object"}},"required":["agent_id","provider"],"title":"KATA Agent","type":"object"}