OpenClaw-native
ERC‑8004 Identity
ZK Payments
Local-first Privacy

The Trust Layer for
Autonomous AI Agents

Your daily life, agentified. Personal. Professional. Automatic. Private. KOGENT. Verified identity. Enforced rules. Zero data egress.

Verified identity Policy enforced Private by default Signed receipts
0
Data processors
Composable skills
100%
On-device
KOGENT • Live Preview
Vigil. Your personal assistant.

Reads your schedule. Sets alarms before early meetings. Cancels them when plans change. Acts before you think to ask.

Specter. Private payments.

ETH-signed ZK commitments. Balance stays hidden. Spend limits enforced before every transaction fires.

Sieve. Your privacy shield.

Quietly removes personal details before any AI sees your data. Names, IDs, addresses. Restored in the output. Fully local.

erc8004.verified = true
agent.id = "eth:0xA1…9F"
zk.commitment = "0x3f…<hidden>"
policy.limit = "$50 / 24h"

Agents Without Guardrails Are a Liability

Without identity, policy, and privacy baked in, agents leak credentials, move funds unchecked, and leave zero audit trail. Every deployment is a liability. KOGENT fixes the foundation.

No Verified Identity

An agent that acts without a cryptographic identity can't be verified or held accountable. Without ERC-8004, there is no on-chain proof of who owns the agent or what it's allowed to do.

Agent sends payment → Processor sees your address and history → A permanent payment profile is built

Sensitive Data Exposure

Your agent reads emails, documents, and messages that may contain passwords, API keys, and personal data. Without redaction, there is nothing stopping secrets from reaching the model. One mistake and credentials are exposed in the context window.

Agent reads your email → Model sees "API key: sk_live_..." → Credentials exposed in the AI context window

No Proactive Action Loop

Most agents wait to be asked. They won't set an alarm because they noticed an early meeting. They won't send a message because something changed. They have context but no initiative. You still have to do the thinking.

Early meeting detected → No alarm is set → You find out at 7:05 AM

No Strict Policy Enforcement

Many agents have policy layers that are easy to bypass or simply not enough. A prompt injection or misread instruction can override any soft limit. Without strict, enforced rules, nothing stands between a bad action and real damage.

Agent misreads instruction → Sends full balance instead of $10 → No limits means catastrophic loss

No Signed Audit Trail

When an agent acts, there is no cryptographic record of what it did or why. Nothing to dispute a transaction with. Nothing to verify past behavior against. No accountability.

Agent takes action → No signed receipt is created → Nothing to dispute or verify

No Cross-Agent Trust Boundaries

When one agent calls another, there is no standard for what the sub-agent is allowed to do. It inherits context it shouldn't see, permissions it was never granted, and there is no way to scope or audit what happened inside the chain.

Agent A delegates to Agent B → Agent B gets full context → No scope boundary, no audit of the inner call

Vigil

Reads your calendar, syncs with your live mail, and takes action so your day is handled before you open your eyes.

Skill 01
  • Outlook & Teams calendar integration
  • Auto-sets and cancels wake-up alarms
  • Detects early meetings before you miss them
  • Sleep nudges based on schedule

Identity

Real identity. Cryptographic proof of ownership. Works across every app.

Skill 02
  • ETH key pair generation
  • EIP‑191 signed ownership proofs
  • Anti‑sybil identity constraints
  • Portable across OpenClaw apps

Rules

Constrain what agents can do before any high-risk action reaches execution.

Skill 03
  • Spend limits & quiet hours
  • Domain allow/deny lists
  • Enforced before every action
  • Per‑skill policy config

Reputation

Portable reputation built from signed local logs. Cross-app and verifiable.

Skill 04
  • Signed local event log
  • Portable reputation score
  • Cross‑app history
  • You control your data

Verification

Signed receipts and tamper-evident logs for every agent action. Fully auditable.

Skill 05
  • Signed receipts for every action
  • Tamper‑evident audit trail
  • Replay‑attack resistance
  • Local + exportable logs

Specter

Zero-knowledge payment commitments with policy checks before funds move.

Skill 06
  • ETH‑signed payment authorization
  • ZK commitment hides exact amount from processor
  • Range proof: amount ≤ limit, without revealing value
  • Rules enforced before every commitment is generated

Sieve

Strips sensitive data before the model ever sees it. Restores real values in output. Fully local, always.

Skill 07
  • Multi-tier PII detection across Presidio, spaCy, and regex
  • Full coverage across keys, emails, phone numbers, and beyond
  • Token mapping and output rehydration
  • Runs fully local, zero data leaves

How It Works

Every action is checked, constrained, executed, and signed. In that order, every time.

Step 01

1. Identity

ERC-8004 registration, ownership proof, portable metadata. Your agent has a verifiable on-chain identity before it ever takes an action.

Output: identity.key + ERC-8004 on-chain registration.
Step 02

2. Policy

Spend caps, permission checks, quiet hours, and manual approval gates. Defined by you. Enforced before every action runs.

Output: policy rules enforced before every action.
Step 03

3. Execution

Skills run — Vigil reads your calendar, Specter authorizes payments privately, Sieve strips sensitive data — all on-device with output filtering before any response leaves.

Output: skills execute locally, output filtered before send.
Step 04

4. Verification

Every action produces a signed receipt and an entry in the tamper-evident log. Signed receipts. Nothing unverified leaves.

Output: signed receipt + audit log entry, every time.

The Three‑Pillar Stack

ERC‑8004 trustless agent identity, ZK private payments, and local-first execution. The foundation for safe real-world agent deployment.

Agent Identity Standard

ERC-8004

On-chain trustless agent registry. Register, delegate, verify, and revoke agent identities without any intermediary. Anchors KOGENT agents to Ethereum.

trustlesson-chaindelegation
Private Payments

ZK Commitments

Pedersen-style commitments hide the exact payment amount from the processor. Range proofs confirm amount ≤ policy limit without revealing the value.

hidingrange proofno balance leak
Identity Standard

EIP-191 Signing

Cryptographic ownership proofs using standard Ethereum message signing. Portable identity across all OpenClaw apps, verifiable by anyone.

attestationportability
Privacy Model

Local Execution

Every skill runs on your machine. No data leaves your device. PII redaction, ZK commitments, and rules enforcement are all on-device.

on-devicezero data egress
Policy Engine

Policy Enforcement

Every agent action is checked against your rules before it executes. Spend limits, domain restrictions, and quiet hours enforced at the runtime level, not the app level.

runtime rulespre-executionenforced
Privacy Protection

Sensitive Data Redaction

Three-tier detection removes personal details before AI sees your data: names, emails, API keys, addresses. 13+ entity types, token-mapped and restored after. All local.

13+ entity typesrestored afterfully local

Deploy Agents You Can Trust

KOGENT is the infrastructure layer agents have been missing. Identity, policy, and privacy, built in from the start.