I shipped a reference implementation of an ENS-bound agent object: emilemarcelagustin.eth.
A live, addressable, network-native actor — not just a bot or a site — living at: https://estmcmxci.co/agent/emilemarcelagustin.eth
It’s a single DNSSEC-imported domain that resolves to a structured onchain identity as both a DNS name and an ENS name.
The page exposes an agent hosted on a Pinata container, bound to my ENS, personhood-anchored via World ID/AgentBook, and verified by the Trust Resolution Layer across five conceptual layers — with five cryptographic record-level checks underneath:
- Layer 0 — Personhood: World ID via AgentBook
- Layer 1 — Identity: ENSIP-25 / ERC-8004 agent registration
- Layer 2 — Discovery: ENSIP-26 (agent-context)
- Layer 3 — Manifest: AIP (signed manifest + version lineage)
- Layer 4 — Capability: DVS (domain-verified SKILL.md)
The 9-record agent identity schema (ENSIP-64 — draft) is validated against a JSON Schema 2020-12 document, hashed via RFC 8785 JCS + keccak256, with integrity, binding, and liveness checks layered on top.
Those records bind the agent to its own ZeroDev kernel wallet, signed by a Namera-issued session key whose authority is scoped by the published delegation policy — so the agent isn’t just an addressable identity, it’s a bounded onchain economic actor that can hold and spend assets within explicit limits. WebAuthn-rooted operator credentials are next.
The primitive is simple: a verifiable persona at a domain.
What makes it new is that all of this composes behind one URL anyone can audit from a public RPC, with no registrar, CA, or platform in the trust chain.
My thesis is that every person will have an agent — and that agent’s identity needs guarantees only ENS and Ethereum can provide.
This composes with the April 2026 NCCoE position paper on ENS as the naming layer for AI agent identity.
To make it reproducible, I shipped two artifacts:
- Ensemble CLI — the on-chain identity layer, anyone with an ENS name can run it against their own name today via two commands:
ensemble agent issueandensemble personhood. - Ensemble Conformance Suite — a runtime + verifier audit suite. The runtime
suite drivesverifyAgentIdentityagainst a live ENS agent and emits a
per-layer report.
Try it here → github.com/estmcmxci/synthesis
The runtime daemon and DNS configuration are still operator-supplied — productizing those into ensemble agent runtime + dns subcommands is tracked at issue #59.