OSSA's Formal Submission to the NIST CAISI RFI
We've officially submitted our response to the NIST RFI on AI Agent standards, advocating for verifiable identity, pre-authorization, and federated discovery via the Universal Agent Discovery Protocol.
Tutorials, guides, and updates on building and deploying AI agents with open standards.
No universal discovery protocol exists for AI agents. DUADP's federated approach addresses the most critical gap in the emerging agentic stack.
Agents could represent 50% of internet traffic by 2030 — DNS TXT records, DUADP registration, and OSSA A2A cards give them the identity infrastructure they need to be first-class web citizens.
MCP was donated to the Linux Foundation with 60,000+ AGENTS.md adoptions — but tool-level connectivity is not enough when 7.2% of MCP servers have known vulnerabilities and agents need identity, trust, and governance.
AGNTCY has 75+ companies. AAIF has OpenAI + Anthropic + Google. The MCP Registry has 5,800+ servers. We mapped every player racing to own agent discovery.
10+ agent marketplaces, 6 competing URI schemes, and zero universal discovery. The window to become DNS for AI agents is 12-18 months.
Static AGENTS.md files and skill registries are Web 1.0 thinking applied to autonomous systems — knowledge graphs and vector stores enable dynamic, semantic capability discovery that eliminates 40-60% configuration duplication.
Three parallel NIST initiatives — CAISI, NCCoE AI Agent Identity, and the AI Agent Standards Initiative — signal that the US government views agent interoperability and safety as critical infrastructure problems.
The agentic AI market is burning $7.8B annually while agents waste 90% of their context windows on redundant knowledge injection — knowledge graphs and vector stores cut that by 10x.
NIST's CAISI RFI and NCCoE AI Agent Identity program confirm what we've been building toward: AI agents need a contract layer for identity, trust, governance, and discovery. Here's how OSSA fills the gap the US government just identified.
A technical deep-dive into the OSSA engineering roadmap. We analyze the breakthrough v0.3.6 release, the move to a functional Python SDK, and the multi-year path to 1.0 stability.
A hands-on engineering guide to building a production-ready code review agent. We walk through manifest creation, type generation, and implementation in both TypeScript and Python using the OSSA v0.3.6 SDK.
An architectural overview of 8 specialized OSSA-compliant agents designed for GitLab-integrated Kubernetes deployments. This ecosystem demonstrates the theoretical potential of the OSSA specification for automation, cost optimization, and compliance.
Enterprise AI isn't an all-or-nothing proposition. We break down the 3-tier progressive compliance model for agents, allowing organizations to scale from rapid prototyping to regulated production environments.
We're excited to launch OSSA—the first formal specification standard for AI agents. Learn how we're building the 'OpenAPI for Software Agents' to enable a portable, secure, and vendor-neutral agentic future.