No audit trails
OAuth 2.1 single-hop. Reconstructing "which human → which agent → what scope" is impossible after the fact.
A Claude Code agent commits to your main branch. An Atlas agent buys flights on your card. A Comet agent exfiltrates a 1Password vault — actually documented, Nov 2025. There is no cryptographic chain of custody answering who authorized what, on whose behalf, scope, validity. OAuth 2.1 is single-hop. No standard satisfies more than 4/7 properties for genuine agentic delegation.
OAuth 2.1 single-hop. Reconstructing "which human → which agent → what scope" is impossible after the fact.
Stripe SPT, Visa TAP, Google AP2 cryptographically authorize a payment. None carry forward to dispute or audit.
Worldcoin, Humanity, Alien, Spruce, ENS own node primitives. Nobody ships the verifiable edge.
30B+ items on atma.io. Volvo cobalt. Moncler tokens. None connect issuing org → employee → AI agent.
EU AI Act (2 Aug). ESPR Registry (19 Jul). Battery Passport (18 Feb 2027). EUDI, EUDR, Sunrise stacking.
a16z named "Know Your Agent" the 2026 primitive. Catena Labs raised $18M for it — in payments only.
Worldcoin proved humanity.— The four nodes are not parallel categories. They are vertices of a single tetrahedron. Every legitimate autonomous act requires all four edges to verify simultaneously. Single-node players cannot rebuild the edges retroactively. We were architected as the graph from day zero.
ENS proved naming.
Stripe proved payment.
Avery Dennison proved the product passport.
Tetract proves the relationship.
Each entity gets a W3C DID. Each "passport" is a profile of Verifiable Credentials 2.0. Each edge — employed-by, produced-by, delegated-by, owned-by, authorized-for, attested-by — is itself a signed, scope-attenuated, revocable credential.
PoP (World ID / Humanity / Billions / EUDI 2.0 PID), KYC/AML, ZKP-disclosed roles.
eIDAS 2.0 LPID. GS1 GLN. LEI. CIRPASS. The legal-person liability anchor.
GS1 Digital Link → ESPR-compliant VC bundle. Fluxy.One backbone, 27 languages, AI parsing.
Architecture, training-data lineage, AI-Act risk. MCP, A2A, AP2, ERC-8004 compatible.
Eleven parallel agent-identity protocols are alive in 2026 (MCP, A2A, AP2, x402, AGNTCY, NANDA, Web Bot Auth, ENSIP-25, ERC-8004…). Tetract emits the right attestation per surface. Single integration; eleven verifier compatibilities.
Ed25519 + secp256k1. Optional post-quantum migration. Hardware-backed (Secure Enclave / StrongBox / YubiKey).
did:human · did:org · did:agent · did:product. Multi-source PoP aggregator (no biometric vendor lock-in).
VCDM 2.0 (May 2025). 4 entity schemas + 7 EdgeCredentials. Bitstring Status List for hourly revocation.
MIT/Oxford Authenticated Delegation + IETF HDP + AIP + UCAN typed scopes. 340–380 bytes/delegation, sub-ms verify at depth 5.
Emits MCP OAuth 2.1, A2A signed VPs, Web Bot Auth (RFC 9421), Visa TAP, Stripe ACP, AP2, x402, AGNTCY, NANDA, ENSIP-25.
GS1 Digital Link resolver, AI doc parsing, 27-lang hosting, prEN 18220 + ISO/IEC 15459 + 18004. Every DPP is an LPID-anchored VC.
SD-JWT (default) · BBS+ unlinkable · ZK-SNARK (Iden3/Circom) · TEE attestation (Alien CHVP, AWS Nitro, Intel TDX).
EU's regulatory window opens in 12 months. Every agent platform shipped in 2025–26. Every standard hit Recommendation. Every vendor staked one node. Nobody shipped the graph.
Start where pain is highest and integration is fastest. Ride into compliance once dev adoption de-risks the buy. Land in the enterprise control-plane category once both lower wedges generate a policy graph nobody else has.
Every Claude Code / Cursor / Devin commit signed with the agent's DID + delegation credential. CodeOwners + merge gates enforce per-agent scope.
Same delegation chain attached to every DPP update. ESPR + EU AI Act Article 50 + Article 14 oversight in one credential.
Cross-protocol identity portability. NHI governance with consumer + product included. Compliance-as-a-service.
Every chain reduces to agent → human → org → product. Every chain is what traditional IAM cannot represent. Tetract was architected for it.
Claude Code / Cursor / Devin commits signed and scoped.
Atlas / Comet buy with merchant-verifiable authority.
MCP agents update DPPs hourly — ESPR + EUDR satisfied.
Clinical agent → physician license → hospital DID.
Latvia SIA ↔ Delaware C-Corp. x402 stablecoin.
Article 50(1) + GDPR + sector authorization in one VC.
Vestiaire agent presents chained ownership credentials.
Byline carries publisher + editor countersignature.
>2 kWh: lifecycle credentials. GBA / Catena-X aligned.
Planner → executors with attenuated scope. NHI gap.
Even at conservative 1–3% capture across regulated EU agent + DPP issuance over the 2026–2030 deadline window. All forward numbers are hypothesis-marked and pinned to pilot data before any series-A claim.
ID infrastructure ($30B+) · NHI governance ($25B, Astrix-category) · DPP tooling ($8B, CIRPASS) · Agent-economy rails ($50B+, a16z/Bessemer thesis range).
1.5% capture × $9 effective ACV blends to ~$140M ARR by year 4.
Avery Dennison has no agent stack. Worldcoin has no DPP. Catena Labs has no products. Stripe has no humans. Vertical integration is what no individual leader has the right to ship.
Slava brings 12 years of fintech-grade compliance and the Identity.Global / Nansen.ID research arc. Maksim brings the only EU-compliant DPP pipeline ready for ESPR delegated acts and the only GS1 Solution Partner relationship in our category.
12 years of fintech / regulated-industry investing. Founder of Life.SREDA, the first fintech-only VC. Author of the Money of the Future reports (2014–2018). Steward of the Identity.Global / Nansen.ID research arc and the Retro-Futuristic Optimism design movement.
Founder of Fluxy.One — GS1 Belgium-Luxembourg Solution Partner, CIRPASS member, the only EU-compliant DPP pipeline ready for ESPR delegated acts at SME pricing (€1 per passport, AI parsing, 27 languages).
Use of proceeds:
Lead investor · regulatory infrastructure thesis (a16z crypto, Bessemer infra, Index, YC W26/S26, Sequoia, Lightspeed).
Strategic angels · W3C VCWG / DIF / ENS / Worldcoin / Stripe / Visa AP / Cloudflare / Spruce / Arianee / Avery Dennison / Anthropic / OpenAI alumni.
Design partners · 3 agent platforms · 3 ESPR-priority manufacturers · 3 enterprise compliance teams.