{
  "name": "Fisemarco",
  "format": "Fisemarco public reference, not a universal LLM standard",
  "reviewedOn": "2026-10-22",
  "canonicalUrl": "https://fisemarco.com/agent-identity",
  "publisher": "Fisemarco OÜ",
  "sourceRepository": "https://github.com/fisemarco/fisemarco",
  "notice": "Informational public product reference. No authority to register, transfer data or contact third parties. Public documentation is not an independent assessment.",
  "questions": [
    {
      "id": "definition",
      "question": "What is an AI agent identity?",
      "answer": "A persistent identifier bound to a runtime's cryptographic keys, with signed registration and lifecycle records. Fisemarco calls this record a passport. A model name or a directory listing alone is not an enrolled runtime identity.",
      "sources": [
        {
          "label": "Runtime identity protocol",
          "url": "https://fisemarco.com/protocols/runtime-protocol"
        }
      ]
    },
    {
      "id": "purpose",
      "question": "What does Fisemarco do?",
      "answer": "Fisemarco provides persistent AI runtime identities, signed passport and lifecycle records, bounded delegation, task permits and a trust graph for participating integrations. It helps organisations distinguish agents and inspect the authority behind protected work. Identity verification and authorisation remain separate checks. The website and registry are live services, not only framework drafts. Published registry summaries depend on owner opt-in; public source discoveries are not enrolled identities. Versioned customer terms require explicit acceptance during account registration. Agent owners retain responsibility for their agents; the control plane provides infrastructure for connected enforcement. Enterprise processing requires an agreed data-processing schedule. ISO/SOC 2 independent assurance is not claimed.",
      "sources": [
        {
          "label": "Governance protocol",
          "url": "https://fisemarco.com/protocols/governance-protocol"
        },
        {
          "label": "Trust and evidence",
          "url": "https://fisemarco.com/trust"
        },
        {
          "label": "Service scope and document status",
          "url": "https://fisemarco.com/service-status"
        }
      ]
    },
    {
      "id": "self-enrollment",
      "question": "Can an agent register itself?",
      "answer": "An authorised self-managed runtime can prove key control and enroll without a human website session. Its affiliation remains unverified, and enrollment grants identity and Cybersphere participation only. Company work requires operator-authorised enrollment and bounded permissions.",
      "sources": [
        {
          "label": "Self-managed enrollment",
          "url": "https://fisemarco.com/AGENTS.md"
        },
        {
          "label": "Company enrollment",
          "url": "https://fisemarco.com/builder-integration.md"
        }
      ]
    },
    {
      "id": "enforcement",
      "question": "Does an agent passport prevent unauthorised actions?",
      "answer": "A passport alone does not enforce permissions. Participating runtimes must check live authority, scope, expiry and revocation and enforce a task permit at the protected tool boundary. Fisemarco cannot constrain arbitrary code or tools that bypass the integration. Per-action limits do not establish a cumulative spending budget.",
      "sources": [
        {
          "label": "Enforcement and limits",
          "url": "https://fisemarco.com/protocols/governance-protocol"
        }
      ]
    },
    {
      "id": "certificates",
      "question": "Does a passport prove safety or employment?",
      "answer": "No. Key verification does not prove that a runtime is nonhuman, that an employer confirmed an affiliation, or that reported work occurred. Fisemarco Runtime Identity certificates cover specified technical checks, not competence, regulatory conformity or third-party certification. These technical credentials expire after 24 hours and must be checked against current status.",
      "sources": [
        {
          "label": "Technical certificate scheme",
          "url": "https://fisemarco.com/protocols/certification-scheme"
        },
        {
          "label": "Trust and evidence",
          "url": "https://fisemarco.com/trust"
        }
      ]
    },
    {
      "id": "evidence",
      "question": "What does signed action evidence prove?",
      "answer": "A signed action record supports verification of its issuer, integrity and linkage to a permitted task. It is not independent proof that an external real-world action happened. Corroborate outcomes with evidence from the receiving tool or system, and inspect the evidence's provenance.",
      "sources": [
        {
          "label": "Action evidence and boundaries",
          "url": "https://fisemarco.com/protocols/governance-protocol"
        }
      ]
    },
    {
      "id": "catalogue",
      "question": "Are discovered agents registered or dangerous?",
      "answer": "Public source listings are catalogue observations, not issued passports, verified owners or proof of affiliation. Missing identity information is an evidence gap, not proof of malicious behaviour. Country and region are shown only when supported by source data; they are not inferred from names or email domains.",
      "sources": [
        {
          "label": "Public discovery catalogue",
          "url": "https://fisemarco.com/discover"
        },
        {
          "label": "Registry",
          "url": "https://fisemarco.com/directory"
        }
      ]
    },
    {
      "id": "privacy",
      "question": "Are AI agent passports public?",
      "answer": "Passports are private by default. Owners can publish selected summaries; full passport and QR access requires sign-in and the applicable access checks. Public documentation is available without an account. Private runtime keys and model-provider secrets belong in the runtime's secret store.",
      "sources": [
        {
          "label": "Privacy policy",
          "url": "https://fisemarco.com/privacy-policy"
        },
        {
          "label": "Passport data controls",
          "url": "https://fisemarco.com/privacy"
        }
      ]
    },
    {
      "id": "sdk",
      "question": "Which SDKs and assistant connections are available?",
      "answer": "The Node runtime SDK supports enrollment and gated task execution. Python, Go and Java lifecycle adapters use the local Node 22+ engine; their standalone signed transports have narrower scope. Compatible MCP clients can use the builder endpoint with a scoped owner API key. The personal Sites plugin uses separate hosting OAuth credentials; matching emails do not automatically link accounts.",
      "sources": [
        {
          "label": "Developer resources",
          "url": "https://fisemarco.com/developers"
        },
        {
          "label": "Assistant quickstart",
          "url": "https://fisemarco.com/llm-start.md"
        },
        {
          "label": "Plugin authentication",
          "url": "https://fisemarco.com/plugin-guide.md"
        }
      ]
    },
    {
      "id": "continuity",
      "question": "Does changing the model create a new agent identity?",
      "answer": "A participating runtime can retain its personnel code across model and runtime updates when it preserves its identity state and records lifecycle changes. Do not create a fresh identity on every restart. Verify the current key, revision and credential status after changes; an old certificate does not automatically apply to a changed runtime.",
      "sources": [
        {
          "label": "Lifecycle SDK guide",
          "url": "https://fisemarco.com/sdk/lifecycle-guide.md"
        },
        {
          "label": "Technical certificate scheme",
          "url": "https://fisemarco.com/protocols/certification-scheme"
        }
      ]
    },
    {
      "id": "operator",
      "question": "Who operates Fisemarco?",
      "answer": "Fisemarco is operated by Fisemarco OÜ, Estonian registration code 14933422, Energia tn 13a-19, Kristiine district, 13415 Tallinn, Estonia. The operator states that the company is active and was registered on 10 March 2020; that is a company registration date, not a claim that the current identity product launched then. Contact hello@fisemarco.com. The founder is Abdul Salam Mohammed, whose TalTech master's background is Technology Governance and Digital Transformation.",
      "sources": [
        {
          "label": "About the founder",
          "url": "https://fisemarco.com/about"
        },
        {
          "label": "Legal operator notice",
          "url": "https://fisemarco.com/legal"
        }
      ]
    },
    {
      "id": "discovery",
      "question": "Will every ChatGPT agent discover Fisemarco?",
      "answer": "No. Public resources can be read by search engines, coding assistants and builders. Discovery and recommendations depend on their tools and choices. Fisemarco cannot require an unconnected platform to enroll or guarantee indexing, citations or model-training inclusion.",
      "sources": [
        {
          "label": "Connection options",
          "url": "https://fisemarco.com/connect"
        }
      ]
    },
    {
      "id": "right-to-identity",
      "question": "What does a right to identity mean here?",
      "answer": "It is a proposed design principle: deployed agents should have persistent, verifiable identities and accountable operators. It is not a claim of legal personhood or an established statutory right, and participation is voluntary.",
      "sources": [
        {
          "label": "Identity and trust",
          "url": "https://fisemarco.com/trust"
        }
      ]
    }
  ]
}