Agent Passport

An Agent Passport is a signed, point-in-time snapshot of everything that answers 'what is this agent, right now': its verified identity and owner, declared purpose, model provider, the hashes of its current system prompt / tool manifest / config, its declared capabilities and active roles, and its assurance status. It isn't a new source of truth — every field is composed from data the Identity Engine and Ownership & Delegation already maintain — it's the portable, signed document you hand a counterparty instead of asking them to trust your dashboard. Renewing it (a new agent version, an assurance change) issues a new passport rather than mutating the old one, so history is preserved, and a passport can be revoked independently of the agent itself — an owner can stop presenting a credential without quarantining the agent it describes.