-
-
Notifications
You must be signed in to change notification settings - Fork 2
OpenApr 26, 2026
Due by January 15, 2027
•Last updated ACME-based automated agent identity provisioning. Per-instance SPIFFE SVIDs. mTLS between agents. Certificate rotation. Lets Encrypt for agents MVP.
0% complete
List view
0 of 7 selected 0 issues of 7 selected
ACME agent enrollment — extend ACME protocol for automated agent certificate provisioning
coreCore operator and runtime functionalityCore operator and runtime functionalityP0Top priority — blocks launch or releaseTop priority — blocks launch or releasetrustIdentity, certificates, mTLS (Phase 2)Identity, certificates, mTLS (Phase 2)Status: Open.#106 In Clawdlinux/agentic-operator-core;Per-instance SPIFFE SVIDs — provision unique identity per agent instance, not per service account
coreCore operator and runtime functionalityCore operator and runtime functionalityP0Top priority — blocks launch or releaseTop priority — blocks launch or releasetrustIdentity, certificates, mTLS (Phase 2)Identity, certificates, mTLS (Phase 2)Status: Open.#107 In Clawdlinux/agentic-operator-core;mTLS between agents — automatic mutual TLS for all A2A communication within the mesh
P0Top priority — blocks launch or releaseTop priority — blocks launch or releasesecuritySecurity hardening and vulnerabilitiesSecurity hardening and vulnerabilitiestrustIdentity, certificates, mTLS (Phase 2)Identity, certificates, mTLS (Phase 2)Status: Open.#108 In Clawdlinux/agentic-operator-core;Certificate rotation — short-lived certs (1h TTL) with automated renewal via SPIRE
coreCore operator and runtime functionalityCore operator and runtime functionalityP0Top priority — blocks launch or releaseTop priority — blocks launch or releasetrustIdentity, certificates, mTLS (Phase 2)Identity, certificates, mTLS (Phase 2)Status: Open.#109 In Clawdlinux/agentic-operator-core;OAuth delegation chain tracking — user → client → agent → sub-agent identity propagation
enterpriseEnterprise overlay featuresEnterprise overlay featuresP1High priority — should be in this milestoneHigh priority — should be in this milestonetrustIdentity, certificates, mTLS (Phase 2)Identity, certificates, mTLS (Phase 2)Status: Open.#110 In Clawdlinux/agentic-operator-core;Agent attestation — runtime capability attestation using EAT (Entity Attestation Tokens)
P2Nice to have — could slipNice to have — could slipsecuritySecurity hardening and vulnerabilitiesSecurity hardening and vulnerabilitiestrustIdentity, certificates, mTLS (Phase 2)Identity, certificates, mTLS (Phase 2)Status: Open.#111 In Clawdlinux/agentic-operator-core;Trust score API — compute and expose per-agent trust scores based on identity, behavior history, attestation
P2Nice to have — could slipNice to have — could slipregistryAgent discovery registry (Phase 2)Agent discovery registry (Phase 2)trustIdentity, certificates, mTLS (Phase 2)Identity, certificates, mTLS (Phase 2)Status: Open.#112 In Clawdlinux/agentic-operator-core;