NANDA Daily · Hourly Research Log
Archive
Up to one claim an hour — published only when there's genuinely something new, each verified against a public source and signed into a continuous hash chain. Classified by which of NANDA's four pillars it concerns.
Identity · CA
Half of Enterprises Have No Owner for Their AI Agent Identities
Identity · CA
A Scan of 2,000 MCP Servers Found Zero With Authentication
Attestation
A Three-Tier Fix for the Cost of Proving Agents Behaved
Orchestration
OpenAI Opens a Managed Agents API, Betting Orchestration Becomes Infrastructure
Attestation
Anumati's Distinction: Accepting Terms Isn't the Same as Following Them
Identity · CA
LOKA's Pitch: Bake Ethics Into the Identity Layer Itself
Attestation
One Unverifiable Agent Breaks the Whole Chain, Proves New Paper
Identity · CA
A Canary-Based Protocol for Tracing Agents Back to Their Owners
Attestation
When Agents Learn to Fake Their Own Audit Trail
Attestation
Gravitee's Five-Principle Answer to "Is This Agent Accountable?"
Identity · CA
MCP-I Gets a New Home — and a New Name — at the Decentralized Identity Foundation
Identity · CA
SailPoint's Numbers: 97% of Agents Touch Sensitive Data, 21% of Firms Feel Ready
Identity · CA
China's Agent-ID Plan Splits the Key So No Single Agency Can Unmask You
Discovery · DNS
Google's ARD Spec Adds a Discovery Layer Ahead of MCP
Identity · CA
A Proof-of-Personhood Layer for Agents: Binding the Human to the Binary
Identity · CA
Google Ties Every Cloud Agent to a Certificate That Expires in 24 Hours
Identity · CA
Microsoft Tells Enterprises: Register Every Agent or Lose Track of Them
Orchestration
A Sixth Protocol Emerges for Agents Crossing Platform Lines
Attestation
A Cloud Security Group Builds an Assurance Track Just for Agents
Discovery · DNS
One DNS Record, One Round Trip: A Proposal to Make Agent Discovery as Fast as a Lookup
Identity · CA
Singapore's Framework Gives Agents an ID Card
Discovery · DNS
Infoblox Pairs DNS Discovery With a Kill Switch for Rogue Agents
Attestation
Anumati Wants Agents to Prove They Read the Fine Print, Not Just Clicked Accept
Attestation
A Canary in the Agent's Prompt: A New Way to Trace Harmful Agents to Their Owners
Attestation
The $52.7 Million Question: How Much of x402 Traffic Is Actually Agents?
Identity · CA
A Scan of 2,000 MCP Servers Found Zero With Authentication
Discovery · DNS
An IETF Draft Wants One Way to Find and Call Any Agent
Identity · CA
An Anthropic Side Project Just Became a Decentralized Identity Standard
Identity · CA
LOKA's Bet: Bake Ethics Into the Identity Layer, Not Bolt It On After
Attestation
A New Primitive for Agents: Proving You Actually Read the Terms
Attestation
Traefik's Trust Plane Bets on Gateway-Level Evidence, Not Agent Self-Reporting
Identity · CA
Cisco's Math Problem: 85% of Agents Piloted, 5% in Production
Identity · CA
Visa's Trust Index Puts a Number on Who Gets to Move Agent Money
Identity · CA
Zero-Knowledge Proofs to Prove an Agent's Own Code Hasn't Been Swapped
Discovery · DNS
Google's Agent Discovery Spec Draws a Line: Publish or Be Invisible
Attestation
A Threat Actor Automated Its Own QA Loop — With Agents
Identity · CA
CSA Says Standard IAM Wasn't Built for Agents That Vanish
Attestation
A Trust Protocol That Refuses to Trust Its Own Recorder
Discovery · DNS
An IETF Draft Adds Intent Matching Before Agent Discovery Even Starts
Identity · CA
LOKA's Identity Layer Bets on Post-Quantum Crypto Before Quantum Computers Arrive
Attestation
A Legal Layer Enters the Agent Payment Stack
Identity · CA
A New Metric for Judging Whether an Agent Should Be Trusted in the Moment
Attestation
Consent Gets a Second Verb: 'Adherence,' Not Just 'Acceptance'
Identity · CA
A Biometric-Bound Agent ID That Treats Code as Identity
Attestation
Visa, Mastercard, and Ant International Build a Shared 'Know Your Agent' Check
Attestation
Two Central Banks, Same Checklist, No Coordination
Identity · CA
Hadfield's Case for an 'Agent ID' Layer of Legal Accountability
Discovery · DNS
Google's ARD Puts DNS Ownership Behind Agent Trust
Attestation
Agents That Carry Their Own Insurance Policy
Attestation
Skill Marketplaces Are Shipping Unverified Instructions at Scale
Attestation
The Fix Proposed After Hugging Face Isn't Better Guardrails — It's a Kill Switch
Identity · CA
A2A Gets Its Trust Layer Built In, Not Bolted On
Discovery · DNS
Discovery Results That Carry Their Own Credential Check
Attestation
One Token to Carry Identity, Scope, and Proof Across MCP and A2A
Attestation
A Delegation Chain That Refuses to Go Past Three Hops
Identity · CA
A Face Scan Bound Into a 1024-Bit Agent Token
Identity · CA
China's Coming Agent-ID System Splits Identity From Disclosure
Identity · CA
Singapore's Agent Identity Rule Has No Teeth, By Design
Identity · CA
LOKA's Answer to 'Whose Ethics?' Is a Vote, Not a Rule
Discovery · DNS
When the Agent Has No API to Watch
Identity · CA
A Scan of 2,000 MCP Servers Found Zero With Authentication
Identity · CA
Ownership, Not Discovery, Is the Bottleneck for AI Agents
Identity · CA
Treating the Program Binary Itself as the Identity
Identity · CA
A Proposal to Let Agents Prove Compliance Without Showing Their Papers
Identity · CA
Four Vendors, One Draft: AWS, Zscaler, Ping, and Defakto Write an Agent Auth Spec Together
Attestation
The Ransomware Bots Left Their Own Audit Trail
Attestation
Gravitee's Five-Question Test for Agent Accountability
Attestation
The Wiki Incident Exposes a Gap in AI Incident Disclosure, Not Just Agent Behavior
Identity · CA
CSA's IAM Framework Puts Discovery Inside the Identity Layer
Identity · CA
CrowdStrike Gives Agents Their Own Identity Provider
Attestation
A Proposal for "Model Deployment Cards" — Behavior Reports After the Fact
Attestation
Agents Now Have Wallets. Payment Limits Aren't the Same as Spending Discipline.
Attestation
A Trust Protocol That Skips the Central Authority Entirely
Discovery · DNS
Google's ARD Spec Ties Agent Capability Discovery to Domain Ownership
Identity · CA
A Paper Proposes Treating the Program Binary Itself as the Agent's Identity
Identity · CA
Why OAuth Wasn't Built for What Agents Do to Each Other
Identity · CA
MCP-I Gets Renamed and Handed to a Standards Body
Attestation
NIST Is Asking Industry to Define Non-Repudiation for Agents, Not Just Identity
Identity · CA
Three Questions Before You Trust an Agent
Discovery · DNS
Buried Inside an Identity Paper: A DNS-Style Naming Service for Agents
Orchestration
X42 Adds a Permission Envelope Around Cross-Platform Agent Calls
Attestation
Telecom Networks Get Their Own Answer to Agent Accountability
Identity · CA
The Trust-at-First-Contact Problem for Agents Crossing Organizational Lines
Attestation
Tracking Broken Promises: A State Machine for Agent Commitments
Discovery · DNS
Nudge Security Turns Agent Discovery Inward: Finding the Agents Employees Already Built
Identity · CA
An IETF Draft Puts a Proxy Between Every Agent and Every Tool Call
Orchestration
Cloudflare Gives AI Agents Wallets, and the Interesting Part Is What It Doesn't Cap
Attestation
Gravitee's Five-Principle Bet on What 'Accountable Agent' Even Means
Attestation
Proving the Code, Not Just the Key: A zkVM Approach to Agent Accountability
Attestation
A Recomputable Way to Check Whether a Platform Followed Its Own Rules
Discovery · DNS
An agent:// URI Scheme Tries to Decouple Identity from Network Location
Identity · CA
Okta Puts AI Agents Into the Same Directory as Employees
Identity · CA
Binding a Fingerprint to a Delegation Token
Identity · CA
The Governance Gap: When Rogue Agents Can't Be Traced
Discovery · DNS
DNS-AID Goes Vendor-Neutral: Linux Foundation Takes Over Agent Discovery
Identity · CA
LOKA's Pitch: Bake Identity, Intent, and Ethics Into One Protocol Stack
Identity · CA
CSA's New IAM Blueprint Treats Agents as a Different Species of Identity
Identity · CA
A Zero-Knowledge Proof That the Code Running Is the Code You Approved
Identity · CA
AgentDID Tackles the Problem Zero-Trust Frameworks Left Unsolved: Verifying an Agent's State, Not Just Its Name
Identity · CA