Update nexus: fix conflicts and sync local changes
This commit is contained in:
@@ -1,58 +1,58 @@
|
||||
---
|
||||
title: "Peer-Verification"
|
||||
type: concept
|
||||
tags: [verification, authentication, protocol]
|
||||
sources: [agentic-identity-trust.md]
|
||||
last_updated: 2026-04-25
|
||||
---
|
||||
|
||||
## Definition
|
||||
|
||||
Peer-Verification(对等验证)是一种 Agent 间在接受委托工作前互相验证身份和授权的安全协议。在 Agent 接受来自其他 Agent 的工作请求前,必须完成五项独立验证——全部通过才接受工作。
|
||||
|
||||
## Verification Checks
|
||||
|
||||
```python
|
||||
checks = {
|
||||
"identity_valid": # 1. 密码学身份证明是否有效
|
||||
"credential_current": # 2. 凭证是否在有效期内
|
||||
"scope_sufficient": # 3. 授权范围是否覆盖请求的操作
|
||||
"trust_above_threshold": # 4. 信任评分是否 ≥ 0.5
|
||||
"delegation_chain_valid": # 5. 委托链是否完整(如涉及委托)
|
||||
}
|
||||
# 全部通过才接受工作(Fail-Closed)
|
||||
```
|
||||
|
||||
## Protocol Flow
|
||||
|
||||
```
|
||||
Agent A Agent B
|
||||
│ │
|
||||
│──── request_work ─────────>│
|
||||
│ │
|
||||
│<--- identity_proof -------│ (Agent B 提供公钥 + 签名)
|
||||
│<--- credential -----------│ (Agent B 提供凭证 + 过期时间)
|
||||
│<--- delegation_chain -----│ (如为委托工作)
|
||||
│ │
|
||||
│ 验证身份 → 验证凭证 → 验证作用域 → 验证信任分 → 验证委托链
|
||||
│ │
|
||||
│<--- verification_result --│
|
||||
│ │
|
||||
if all_passed:
|
||||
Agent A 接受 Agent B 的工作
|
||||
else:
|
||||
Agent A 拒绝 Agent B 的工作
|
||||
```
|
||||
|
||||
## Performance Requirement
|
||||
|
||||
- **P99 延迟 < 50ms**:验证过程不得成为系统性能瓶颈
|
||||
|
||||
## Relationships
|
||||
- [[Zero-Trust]]:Peer-Verification 是 Zero-Trust 在 Agent 间交互中的实现
|
||||
- [[Trust-Scoring]]:Trust-Scoring 提供 Peer-Verification 的决策依据
|
||||
- [[Delegation-Chain]]:当 Agent 间存在委托关系时,Peer-Verification 必须验证 Delegation-Chain
|
||||
- [[Fail-Closed]]:所有检查项均采用 Fail-Closed 策略
|
||||
|
||||
## Sources
|
||||
- [[agentic-identity-trust.md]]
|
||||
---
|
||||
title: "Peer-Verification"
|
||||
type: concept
|
||||
tags: [verification, authentication, protocol]
|
||||
sources: [agentic-identity-trust.md]
|
||||
last_updated: 2026-04-25
|
||||
---
|
||||
|
||||
## Definition
|
||||
|
||||
Peer-Verification(对等验证)是一种 Agent 间在接受委托工作前互相验证身份和授权的安全协议。在 Agent 接受来自其他 Agent 的工作请求前,必须完成五项独立验证——全部通过才接受工作。
|
||||
|
||||
## Verification Checks
|
||||
|
||||
```python
|
||||
checks = {
|
||||
"identity_valid": # 1. 密码学身份证明是否有效
|
||||
"credential_current": # 2. 凭证是否在有效期内
|
||||
"scope_sufficient": # 3. 授权范围是否覆盖请求的操作
|
||||
"trust_above_threshold": # 4. 信任评分是否 ≥ 0.5
|
||||
"delegation_chain_valid": # 5. 委托链是否完整(如涉及委托)
|
||||
}
|
||||
# 全部通过才接受工作(Fail-Closed)
|
||||
```
|
||||
|
||||
## Protocol Flow
|
||||
|
||||
```
|
||||
Agent A Agent B
|
||||
│ │
|
||||
│──── request_work ─────────>│
|
||||
│ │
|
||||
│<--- identity_proof -------│ (Agent B 提供公钥 + 签名)
|
||||
│<--- credential -----------│ (Agent B 提供凭证 + 过期时间)
|
||||
│<--- delegation_chain -----│ (如为委托工作)
|
||||
│ │
|
||||
│ 验证身份 → 验证凭证 → 验证作用域 → 验证信任分 → 验证委托链
|
||||
│ │
|
||||
│<--- verification_result --│
|
||||
│ │
|
||||
if all_passed:
|
||||
Agent A 接受 Agent B 的工作
|
||||
else:
|
||||
Agent A 拒绝 Agent B 的工作
|
||||
```
|
||||
|
||||
## Performance Requirement
|
||||
|
||||
- **P99 延迟 < 50ms**:验证过程不得成为系统性能瓶颈
|
||||
|
||||
## Relationships
|
||||
- [[Zero-Trust]]:Peer-Verification 是 Zero-Trust 在 Agent 间交互中的实现
|
||||
- [[Trust-Scoring]]:Trust-Scoring 提供 Peer-Verification 的决策依据
|
||||
- [[Delegation-Chain]]:当 Agent 间存在委托关系时,Peer-Verification 必须验证 Delegation-Chain
|
||||
- [[Fail-Closed]]:所有检查项均采用 Fail-Closed 策略
|
||||
|
||||
## Sources
|
||||
- [[agentic-identity-trust.md]]
|
||||
|
||||
Reference in New Issue
Block a user