Attestation & Trust

Two-layer anti-impersonation system using EIP-712 typed data signing.

The Problem

ERC-8004 is a public registry. Anyone can register an agent claiming framework=aether-forge. We need to distinguish genuine agents from copycats.

Layer 1 — Self-Attestation

At generation time, the agent signs an EIP-712 AetherForgeAttestation using its own OWS wallet:


{
  "domain": {
    "name": "AetherForge",
    "version": "1",
    "chainId": 8453
  },
  "types": {
    "AetherForgeAttestation": [
      { "name": "artifactSetId", "type": "string" },
      { "name": "capabilitiesHash", "type": "bytes32" },
      { "name": "agentAddress", "type": "address" },
      { "name": "timestamp", "type": "uint256" }
    ]
  }
}

The signature is saved as attestation.json in the agent directory.

What this proves: “The owner of this wallet authorized the creation of this specific agent with these specific capabilities.”

Layer 2 — Framework Attestation

The Aether Forge project maintains a well-known attestor address (published in ATTESTOR.md).

After registration, an agent can request verification:

Attestor checks the metadata URI resolves to valid Aether Forge artifacts
Attestor runs forge validate on the manifest
Attestor verifies the A2A endpoint serves a valid Agent Card
If all pass, attestor signs and publishes on-chain

What this proves: “This agent was built with Aether Forge and passes structural validation.”

Three Trust Tiers

Tier	Meaning	How verified
Verified	Framework attestor signed it	`aether_forge_verified` metadata has valid attestor signature
Self-attested	Agent wallet signed it	`self_attestation` metadata is present and valid
Unverified	Claims to be Aether Forge	No valid signatures

Discovery with Trust Filtering


# Show all agents with trust tier labels
forge agent-discover --capability get-token-price
 
# Only show verified agents
forge agent-discover --capability get-token-price --verified-only

Automatic at Generation

Self-attestation happens automatically when you run forge generate-fast --wallet. No extra flags needed.