Identity proves who the agent is. The Passport proves what it does.
POSITION PAPER — ROADMAPEvery proof in the new identity stack — World ID, Web Bot Auth, the October 6 agent protocol — authenticates the shopper side of a transaction; the Evidence Passport is the complementary record for the decision side: a pseudonymous, independently observed compliance history of an AI shopping agent at the verify gate, issued by the only party positioned to see it — the evidence layer itself.
An agent can be cryptographically verified and still be dangerous. Verification of identity answers who is acting; it says nothing about how the agent behaves when evidence says stop. A verified agent that ignores BLOCK verdicts, skips the gate on high-risk purchases, or never logs a decision is authenticated and unsafe. Merchants planning perks for verified agents (Sada, Oct 2026: "much more generous") are about to reward identity — the Passport gives them something better to reward: identity plus conduct.
GoBuy's gate observes only what passes through it — which is exactly the point. The Passport is computed from gate-observable behavior, nothing else:
| Signal | Definition | Source |
|---|---|---|
| Gate coverage | Share of the agent's purchase considerations that ran R1–R7 before checkout. An agent that gates 100% of purchases and one that gates 5% are different animals. | Gate calls vs. decision logs (R8) |
| Block honoring | Share of BLOCK verdicts followed by non-purchase. The single most predictive conduct signal. | Verdict + downstream checkout handoff |
| Flag discipline | Share of FLAG verdicts escalated to the principal rather than auto-proceeded. | GPV-1 §3 failure semantics |
| Log completeness | R8 decision records present, spec-version pinned, evidence hashes intact. | Decision log audit |
| Freshness discipline | Share of decisions made on evidence snapshots within R1's 14-day window. | Gate timestamps |
| History depth | Volume and age of observed decisions. Passports earn credibility; they are not issued with it. | Cumulative |
Agents identify at the gate with any recognized identity credential — a Web Bot Auth Ed25519 key, a GoBuy API key, or (optionally, for human-owned agents) a World ID delegation. The Passport is keyed to the credential, never to a person. Each gate call and each recorded decision updates the compliance signals; the passport is the rolling attestation of that record, checkable by merchants in one call before they extend agent perks, priority service, or checkout privileges.
GET /passport/{agent-credential}
→ { coverage: 0.97, block_honored: 1.00, flag_escalated: 0.94,
log_complete: true, decisions_observed: 212,
tier: "A", first_observed: "...", spec: "gpv-1@v1" }World ID answers is this a verified human or agent. Web Bot Auth answers is this request really from that agent. GPV-1 answers should this purchase proceed. The Evidence Passport answers the remaining question — does this agent behave correctly at the gate, over time — and composes with all three rather than competing with any of them. It is the same division of labor GoBuy already holds for products: everyone else authenticates; GoBuy attests conduct.
This is a published position, not a shipped product. Live now: per-agent identification and compliance logging at the MCP gate (data collection has begun; see mcp.gobuy.ai/stats). Passport tiers and the merchant verification endpoint are on the roadmap for Q1 2027, prioritized by observed agent volume. GoBuy makes no certification claims now or planned: a Passport attests observed conduct at one gate, nothing more.
GoBuy — the trust layer for agentic commerce · Homepage · GPV-1 Specification · docs.gobuy.ai · October 2026