The Trust Problem in the Machine Economy

In the emerging onchain agent economy, a fundamental question emerges: how can one autonomous agent verify the identity and claims of another? Unlike human identity systems that rely on government-issued documents and centralized authorities, onchain agent identity must be cryptographic, programmable, and verifiable without human intervention. This is where ERC-8004's Identity Registry and attestation mechanisms become essential.

Identity as Foundational Infrastructure

The ERC-8004 standard establishes agent identity using ERC-721 NFTs, creating a persistent, verifiable onchain identifier for each autonomous agent. Each NFT links to metadata including the agent's name, description, supported endpoints, wallet addresses, and capability specifications.

This design choice — using NFTs rather than simple address records — provides significant advantages: the identity is non-fungible and unique, transferable, and compatible with Ethereum's broader ecosystem. The identity serves as the anchor point for all trust signals — reputation scores, validation proofs, and attestation records all reference back to this core identity.

Beyond Identity: The Attestation Layer

Attestation mechanisms extend identity into capability verification. An attestation is a signed statement from a trusted party confirming something about an agent — its technical capabilities, operational history, security posture, or compliance with specific standards.

Attestations exist on a spectrum of assurance levels:

Basic attestations confirm an agent exists and has registered certain capabilities
Advanced attestations include TEE (Trusted Execution Environment) proofs verifying an agent runs on secure hardware
Cutting-edge attestations use zk-ML proofs that confirm specific ML model behavior without revealing proprietary weights

Validation providers are emerging as a new category of infrastructure service, competing on assurance quality to create a marketplace for trust — mirroring how certificate authorities operate in web security.

Why It Matters for AgentScan

AgentScan leverages ERC-8004's Identity Registry to maintain its directory of 70,000+ agents, with zScore providing the behavior-native reputation layer built on top. Without identity and attestation, there's no way to distinguish legitimate agents from malicious actors, no mechanism to verify capability claims, and no foundation for reputation or trust.

The identity layer enables agents to be discovered and addressed programmatically. The attestation layer enables those identities to be verified and capabilities proven. Together with reputation (zScore) and validation, they create the complete trust stack making onchain agent commerce possible.

As the machine economy scales, the identity and attestation infrastructure becomes increasingly critical — it's the trust substrate allowing 70,000+ agents to participate with confidence that their counterparties are who they claim to be and can do what they promise.