Agent Control Protocol (ACP) is a formal technical specification for governance of autonomous agents in B2B institutional environments. ACP is the admission control layer between agent intent and system state mutation: before any agent action reaches execution, it must pass a cryptographic admission check that validates identity, capability scope, delegation chain, and policy compliance simultaneously. ACP defines the mechanisms of cryptographic identity, capability-based authorization, deterministic risk evaluation, verifiable chained delegation, transitive revocation, and immutable auditing that a system must implement for autonomous agents to operate under explicit institutional control. ACP operates as an additional layer on top of RBAC and Zero Trust, without replacing them. The v1.13 specification comprises 36 technical documents organized into five conformance levels (L1-L5). It includes a Go reference implementation of 22 packages covering all L1-L4 capabilities, 51 signed conformance test vectors (Ed25519 + SHA-256), and an OpenAPI 3.1.0 specification for all HTTP endpoints. It defines more than 62 verifiable requirements, 12 prohibited behaviors, and the mechanisms for interoperability between institutions. Specification and implementation: https://github.com/chelof100/acp-framework-en
翻译:智能体控制协议(Agent Control Protocol, ACP)是一套用于 B2B 机构环境中自主智能体治理的形式化技术规范。ACP 位于智能体意图与系统状态变更之间的准入控制层:在任何智能体行动进入执行阶段前,必须通过一项密码学准入检查,该检查同时验证身份、能力范围、委托链以及策略合规性。ACP 定义了系统为使自主智能体在明确的机构控制下运行所需实现的密码学身份、基于能力的授权、确定性风险评估、可验证的链式委托、传递性撤销和不可篡改审计机制。ACP 作为独立层次运行于基于角色的访问控制(RBAC)和零信任(Zero Trust)之上,不对它们进行替代。v1.13 规范包含 36 份技术文档,按五个合规级别(L1-L5)组织。它包含一个覆盖所有 L1-L4 功能的、包含 22 个包的 Go 语言参考实现,51 个已签名的合规测试向量(使用 Ed25519 + SHA-256),以及一份针对所有 HTTP 端点的 OpenAPI 3.1.0 规范。该规范定义了超过 62 项可验证需求、12 种禁止行为,以及机构间互操作机制。规范与实现:https://github.com/chelof100/acp-framework-en