Submit topics for agenda - March 12

[tomerel-blip]

Hi everyone!
Please feel free to use this discussion to suggest topics you'd like to see on our agenda for the session on March 12.
I'm looking forward to seeing you all soon!

[jpanat]

1. Kicked off Open Claw Reference App: (Lead:Amritha Lal) :https://github.com/AKRita23/xdomain-openclaw-agntcy-poc
2. CoSAI: Submitted 3 issues to explore AGNTCY Agent identity
   Evaluate Reference Application for Secure Agent Identity and Authorization (CoffeeAgntcy - AGNTCY Reference App) cosai-oasis/ws4-secure-design-agentic-systems#49
   Evaluate Tool-Based Access Control (TBAC) for Secure Agent Authorization (AGNTCY Agent Identity) cosai-oasis/ws4-secure-design-agentic-systems#48
   Evaluate Portable Agent Identity & Agent Badges from AGNTCY (Linux Foundation) for Secure AI Agent Ecosystems cosai-oasis/ws4-secure-design-agentic-systems#47
3. Updates from DCR WG (IETF status)
4. Updates from Identity & Security interlocks
5. Upcoming RSA event :Securing MCP: OWASP Best Practices – A Practical Guide- Presented by Tomer
6. Volunteer needed :Explore an idea to use a SPIFFE/SPIRE cert to locally authenticate the workload/agent instance and then perform token exchange with an IdP. It would be helpful if someone could research and present where this model holds up and where it might break down so we can evaluate whether it has legs as a broader approach.

[jpanat]

Meeting Notes

Recording link: https://cisco.webex.com/cisco/ldr.php?RCID=c205522635c0fafd3f05cd660cf162b5
Password: Vub3uMGc

Attendees
Tomer Elias, Julu Panat, Jean Diaconu, John Maciel, Karen Jaworski, Sarah Evans, Jeff Hickman, Pavel Anni, Mahendra Kutare, Bhavani Shankar Garikapati, Erik Watson, Aftab Banth, Ankit, Jim St. Clair, Marcello

Highlights

1. Welcomed new participants, including Mahendra Kutare (DeepTrail) and Bhavani Shankar Garikapati.
2. Shared update on the OpenClaw reference app effort to demonstrate how AGNTCY identity can help address agent security issues, including tool access control and policy enforcement.
3. Discussion on where the sample/reference app should live in AGNTCY repos; maintainers to take details offline.
4. Julu noted interest in turning the OpenClaw work into an AGNTCY blog and possibly contributing back upstream.
5. IETF update: progress continues on submitted drafts, including VC/CIMD and KYA-related work, along with discussions on custom token exchange and dynamic token scoping.Team discussed early adoption signals and interoperability work involving Okta, Ory, Keycloak, and related implementations.
6. Sarah shared progress from the industry interconnects subgroup, which is building a mind map of agent identity activity across standards bodies, foundations, and implementation efforts.
7. Tomer shared updates on upcoming RSA participation and ongoing collaboration with OWASP on secure agentic application guidance.
8. Group discussed SPIFFE/SPIRE and whether it fits AGNTCY’s identity direction, especially for workload authentication vs. cross-domain portability. Mahendra offered to lead along with Pavel, Amritha share prior writing and help contribute to the SPIFFE/SPIRE analysis effort.
9. Consider (from Jeff) creating skills that educate LLMs/Coding Agents on the standards and general directions. Having an AGNTCY skill might be interesting.

Action Items

• Amrita / Julu: Continue OpenClaw reference app work and coordinate contributors.
• Julu/Marcelo: Follow up offline on repo/location for the sample app.
• Sarah: Continue industry interconnects draft and bring back a first version for review.-
• Mahendra: Share SPIFFE/SPIRE-related material in Slack and lead the analysis. Connect with Pavel, Sarah, Ankit, and Jeff
• Ankit: Add Mike Jones into relevant standards discussions and continue IETF coordination.
• Tomer: Continue RSA / OWASP coordination and invite contributors to the next secure agentic apps workstream.