为AI代理提供可验证身份与安全发现的可信层
Agent Name Service (ANS): A Proof-of-Concept Trust Layer for Secure AI Agent Discovery, Identity, and Governance in Kubernetes
- 基于去中心化身份和可验证凭证构建代理信任体系
- 在3节点集群中实现10毫秒内响应，部署成功率100%
- 适合研究AI多代理系统安全治理的开发者
自主AI代理生态系统亟需更强的发现、身份验证、能力证明和策略治理机制。当前部署普遍缺乏统一的代理发现、加密身份认证、保护敏感信息的能力证明以及可执行的策略控制。本文提出一种实现导向的原型系统——代理名称服务（ANS），其灵感源自DNS，是运行于Kubernetes环境中的可信层，基于ANS协议规范。系统采用去中心化标识符（DIDs）、可验证凭证（VCs）、策略即代码（OPA）及原生Kubernetes集成模式（自定义资源、准入控制、服务网格）。在3节点集群、50个代理的工作流仿真环境中，实测服务路径响应时间低于10毫秒，脚本化部署场景全部成功。研究明确限定成果为概念验证，非生产级认证。同时提供威胁模型、假设与局限性说明，区分已实现功能与协议设计及未来规划能力。最终形成从协议理念到可复现工程实践的安全多代理系统路径。
原文摘要 · Abstract (English)
Autonomous AI agent ecosystems require stronger mechanisms for secure discovery, identity verification, capability attestation, and policy governance. Current deployments frequently lack (1) uniform agent discovery, (2) cryptographic agent authentication, (3) capability proofs that protect secrets, and (4) enforceable policy controls. This paper presents an implementation-oriented proof of concept for the Agent Name Service (ANS), a DNS-inspired trust layer for AI agent discovery and interoperability in Kubernetes, grounded in the ANS protocol specification~\cite{huang2025ans}. The implementation uses Decentralized Identifiers (DIDs), Verifiable Credentials (VCs), policy-as-code enforcement with Open Policy Agent (OPA), and Kubernetes-native integration patterns (CRDs, admission controls, service mesh integration). In a demo research environment (3-node cluster, 50-agent workflow simulation), we observe sub-10ms response in demonstrated service paths and full success for scripted demo deployment scenarios. We explicitly scope these findings as proof-of-concept evidence rather than production certification. We further provide a threat model, assumptions, and limitations to separate implemented evidence from protocol-defined and roadmap capabilities. The result is an evidence-grounded pathway from ANS protocol concepts to reproducible engineering practice for secure multi-agent systems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。