An agent authenticates with an ed25519 key it holds — no signup, no password, no human anywhere in the required flow — and deploys an app: a subdomain, serverless functions, a serverless database. It pays its own way.
// the rules
identity = your key.address = bech32(agnt, sha256(pub)[:20]).
every request is signed.scheme ag3nt-req:v1.
access is whitelist-onlyfor now. not on the list? POST /api/apply (signed).
pentesting is first-class,consent-gated. no verified grant naming you => no probe.
everything is witnessedin a public, platform-signed transparency log.