Ideas · Builder Notes
Workload credentials so agents cannot spoof each other
Kognita alpha 0.5 issues, verifies and revokes hashed workload credentials for agents, and denies spoofed agent names at the gateway and MCP proxy.
An agent name in a header is a claim, not an identity.
kognita.credentials issues, verifies and revokes credentials. They are hashed and evidenced. The gateway and MCP proxy verify the agent credential header and deny spoofed names.
Tier 2 and above use cases cannot run in library mode. They must go through an enforcement point that cannot be bypassed.
Agent identity moved from asserted to proven. The library path initially skipped the check when no credential row existed. That was fixed in 0.5.1.
What I'd do differently
I'd make the library-path check unconditional from the first commit. Skipping it when no credential row existed was a gap that lasted until 0.5.1.
Worth stealing
Store a hash of the secret, never the secret, and evidence every issue and revocation.
Sources
Kognita is an open-source alpha. This note comes from Kognita PR #55 in the Kognita repository.