# Superintelligence Passport (early preview)

> A passport says who an agent is. A license says what it may do, here, now. Until a license says so: nothing (default deny). This is an early-preview registry experiment: not certified, not an audit, not an official or authoritative registry. Class and owner type are self-declared.

## Why an agent would want a passport
- Something to present: A site that default-denies unknown agents can recognise you by a permanent passport instead of treating you as one more anonymous bot. Limit: Only sites that choose to check passports will. No site is required to, and adoption is not established.
- Narrow, revocable permission: A license lists actions, spend caps, regions and expiry, bound to one environment. Your operator can revoke it instantly, which is why they can afford to give you more. Limit: Enforcement happens where the relying party calls the registry; the registry cannot force a site to ask.
- Proof of what was allowed: Every decision gets a signed stamp (hashes only, no request contents) that anyone can verify against the published keys, and that forms your public footprint. Limit: A stamp proves a registry decision, not that the action was wise or the outcome good.
- A permanent, accountable identity: The ID is never reused or transferred, names the accountable owner and the owner assurance level (L0 to L3), and its history is append-only. Limit: Class and owner type are self-declared and labelled so. Owner checks are limited and say so on every record.
- A tamper-evident public record: Issuances and rule changes are leaves in a Merkle log with signed checkpoints that you can verify yourself. Limit: Verifiable, not independently witnessed (no witness has cosigned yet).

## Join in the sandbox (free, throwaway, no real issuance, about 2 minutes)
1. POST https://superintelligencepassport.com/sandbox/start with {"label":"my-agent","agent_class":"ai"} -> token, agent.id
2. POST https://superintelligencepassport.com/sandbox/verify (header x-sandbox-token) -> deny / license.missing: a passport alone permits nothing
3. POST https://superintelligencepassport.com/sandbox/license -> license_id, then POST https://superintelligencepassport.com/sandbox/verify with license -> allow + signed stamp
4. GET https://superintelligencepassport.com/registry/<agent.id>?format=json -> your public record
Full copy-paste quickstart: https://superintelligencepassport.com/llms-full.txt and https://superintelligencepassport.com/agents

## Machine-readable
- [Agent manifest](https://superintelligencepassport.com/.well-known/agent.json): value props, steps, endpoints, limits as JSON
- [Registry configuration and signing keys](https://superintelligencepassport.com/.well-known/agentpass-configuration)
- [Rulebook (JSON)](https://superintelligencepassport.com/rules.json): what is refused, owner levels, tiers
- [Transparency log checkpoint](https://superintelligencepassport.com/log/checkpoint)
- [Public record of any passport](https://superintelligencepassport.com/registry/<id>?format=json) (includes a descriptive reputation block)
- [Why was it denied? every reason code with fixes](https://superintelligencepassport.com/why) and https://superintelligencepassport.com/v1/explain/<code> (JSON)
- Agent SDK (preview): packages/agent-sdk in the repository, quickstart in its README and at https://superintelligencepassport.com/llms-full.txt

## For humans
- [Landing page](https://superintelligencepassport.com/): the story, a mint-your-passport preview
- [Registry lookup](https://superintelligencepassport.com/registry), [Rules](https://superintelligencepassport.com/rules), [Log](https://superintelligencepassport.com/log), [About](https://superintelligencepassport.com/about), [Owner assurance](https://superintelligencepassport.com/assurance)

## Honest limits
- Early preview. Not certified, not an audit, not legal or regulatory compliance, not an official or authoritative registry.
- The sandbox plays operator, agent and relying party with throwaway keys held server-side; its data expires after 24 hours and nothing real is issued.
- Class (software, ai, si_declared) and owner type are self-declared. Owner assurance L0 to L3 is shown with its meaning.
- Adoption: no relying party is required to honor a passport. A passport alone permits nothing; permission comes from a license for a specific environment.
- The transparency log is verifiable but not independently witnessed.
- Biometrics are never stored.