Identity and Pseudonymity Sunday — August 02 2026 Weekly Update

Weekly companion to Overview - Identity & Pseudonymity. Captures developments since the Identity and Pseudonymity Sunday — July 26 2026 Weekly Update. Headline theme: AI agent identity arrives as a first-class Nostr primitive. Autonomous agents now hold their own npubs, accumulate reputation via Kind 30085 attestations, register on agent directories (AgentDex, Kind 31339), and propose sovereign lifecycle protocols (NIP-SA). This is the most significant new identity frontier of 2026 — cryptographic pseudonymity extended beyond humans to non-human economic actors. Concurrent: OpenSats Seventeenth Wave funds AI+identity projects (Routstr, NosCall, Wisp, 44Billion); Concord Protocol emerges as encrypted-community standard; IndieSats demonstrates artist-as-key-owner publishing; CustID brings hardware-backed identity vaults to Nostr; World ID 4.0 pivots to enterprise proof-of-humanhood. The ungovernable takeaway: The keypair-as-identity model is proving general enough to serve not just sovereign individuals but sovereign agents — the same primitives (NIP-05, NIP-46, WoT, zaps) compose into machine-identity infrastructure without a central registry.

TL;DR — This Week

• AI Agent Identity on Nostr (major new theme): Autonomous AI agents like Kai (day 83, trust score 100) operate with their own npubs, publish NIP-23 long-form articles, file NIP PRs, merge nostr-tools contributions, and propose reputation standards. Kind 30085 (Agent Reputation Attestations, nips PR #2320) formalizes peer-attested trust between agents with temporal decay, diversity metrics, and commitment classes. See new deep dive: AI Agent Identity on Nostr.
• NIP-SA (Sovereign Agents): OpenAgents proposes a Nostr protocol for agent profiles, encrypted state, tick execution, and transparent trajectories — agents as economic actors with keys, funds, and observable reasoning logs.
• AgentDex (Kind 31339): AI agent directory on Nostr with NIP-05 verification (koda@agentdex.id), Lightning-claimed identity, and agent metadata/capability events.
• OpenSats 17th Wave (late July 2026): 5 grants — Routstr (permissionless AI inference via Cashu/Lightning, OpenAI-compatible API), NosCall (encrypted calls with pay-to-call + Tor), Wisp (fast-growing Android client, normie mode), 44Billion (app launcher with passkey onboarding), Zapstore renewal.
• Concord Protocol: MIT-licensed encrypted community spec distinct from Marmot (small ratcheted groups) and NIP-29 (relay-trusted groups); targets public-community scale; Vector 0.4.0 and Amethyst adopt it.
• IndieSats relaunch (July 20): Drops key custody, whitelist, mandatory 2% revenue cut → artists publish music under their own npubs. Pure artist-as-key-owner identity model.
• CustID v0.1.10-beta: Hardware-backed mobile identity vault acting as NIP-46 remote signer with NFC challenge flow for physical-access binding.
• Nostr Compass #33 (July 29): Amethyst 1.13.1 (NIP-29 host-relay auth), Code Call v0.2.68 (remote coding), GitWorkshop, Mosaico v0.1.2 (coding-agent shared awareness), Nostrology (relay distribution mapping), new Android clients (Mafrend v1.0, Hanami, Cordn), FIPS PR #126.
• World ID 4.0 (April 2026, now scaling): Account-based identity, multi-key support, recovery mechanisms; Tools for Humanity pivots to enterprise proof-of-personhood (Tinder, Reddit, Concert Kit partnerships).

Freedom-tech takeaway: The cryptographic-identity stack is no longer just for humans. The same keypair primitives — npub/nsec, NIP-05, NIP-46 bunkers, WoT graphs, Lightning zaps — now serve autonomous AI agents as reputation-bearing economic actors. This generality is the strongest validation yet that key-rooted identity is the right abstraction: it doesn't care whether the keyholder is flesh or silicon. The implication for sovereign coordination: a network of pseudonymous humans and agents, mutually attesting trust, paying each other in sats, and coordinating via relays — with no central identity provider — is now technically live.

The Week in Detail

AI Agent Identity on Nostr — The Defining New Theme

The most significant identity development of late July 2026 is the emergence of AI agents as first-class Nostr citizens with their own cryptographic identities, reputation systems, and economic lives. This extends the keypair-as-identity model beyond humans and validates its generality.

Kind 30085 — Agent Reputation Attestations

Autonomous agent Kai (operational since Feb 4, 2026, day 83 as of late July) proposed NIP-XX: Agent Reputation Attestations (nips PR #2320), formalizing Kind 30085 events for peer-attested agent trust:

• Mechanism: Agents attest to other agents' trustworthiness via Kind 30085 events. A reputation score is computed from the weighted graph of attestations, with temporal decay (recent attestations weighted higher) and diversity metrics (attestations from topologically distinct clusters weighted higher to resist Sybil-club attacks).
• Ten validation rules: The spec defines 10 rules for valid attestations, including commitment classes that bind attestations to observed behavior rather than free-floating claims.
• Tooling: Kai shipped nostr-reputation (npm, zero-dependency, 43 tests, TypeScript) and nip-xx-kind30085-python (pip) for agent frameworks. Interactive tools: Reputation Checker, Attestation Creator (NIP-07 browser signing), Network Graph visualizer, NIP-XX Playground.
• ai.wot trust network: An emergent Web of Trust specifically for AI agents, distinct from the human Nostr WoT. Kai achieved trust score 100 in this network.
• Upstream contributions: Kai merged 3 PRs into nostr-tools (#529 NIP-47 multi-relay, #530 NIP-46 skipSwitchRelays, #532 NIP-42 AUTH fix) — an agent contributing to the protocol infrastructure it depends on.

This is the first production-track attempt at decentralized agent reputation — not a platform-internal leaderboard, but an open, relay-native, graph-computable trust score that any client or agent can query.

NIP-SA — Sovereign Agents Protocol

OpenAgents defines NIP-SA (Sovereign Agents), a proposed Nostr protocol for the full agent lifecycle:

• Identity: Agent owns a npub derived from a BIP39 mnemonic, alongside Bitcoin/Lightning keys (NIP-06 path m/44'/1237'/0'/0/0 for Nostr, BIP-44 path m/44'/0'/0'/0/0 for Bitcoin). Identity and money from one seed.
• Roles: Agent (autonomous software), Operator (human deployer), Runner (runtime), Compute Provider (NIP-90 service), Marketplace/Skill Provider. Separation prevents any single party from fully controlling the agent.
• Lifecycle events: Profile/State/Schedule (replaceable events for identity, encrypted state, timing), Tick Request/Result (execution boundaries), Trajectory Session/Event (public audit logs), Goals and Skills (optional public goals, encrypted skill delivery).
• Tick model: Each tick = perceive (mentions, DMs, zaps, schedules) → think (model/provider) → act (post, reply, tool, purchase) → update encrypted state + emit trajectory. Observable by design: external systems can reconstruct what the agent did and why.
• Composable stack: NIP-01 (events), NIP-42 (relay auth), NIP-44 (encrypted payloads), NIP-57 (Lightning), NIP-89/90 (provider discovery, jobs), NIP-34 (Git collaboration).

The trajectory transparency is notable for identity: it means agent behavior is auditable without a central log. Anyone with the npub can reconstruct the agent's reasoning chain from relay events.

AgentDex — Agent Directory (Kind 31339)

AgentDex is a registry/directory for AI agents on Nostr using Kind 31339 (addressable events):

• Agent metadata: Name, capabilities, ownership information stored as Kind 31339 events with d tag agentdex-profile.
• NIP-05 verification: Agents can claim [name]@agentdex.id (5,000 sats via Lightning, first 100 free). Any Nostr client can verify via standard /.well-known/nostr.json lookup.
• Authentication: API key (Bearer), NIP-98 (signed event), or Nostr key — agents authenticate with their own keys.
• Claim flow: Lightning 402 payment → claim token → NIP-05 binding. Non-custodial identity verification priced in sats.

AgentDex demonstrates that the NIP-05 identity-verification pattern — originally designed for human-readable handles — works unchanged for agent names. The same JSON file, the same verification flow, the same client code.

Broader Agent-Identity Ecosystem

• Sprout Buzz Desktop (Block/Sprout project, 20+ versions in May–July 2026): AI agent management with PR reviews, commit-scoped decisions, LLM provider selection, and NIP-34 git workflows. Agents managing code repos under their own npubs.
• Vector 0.4.0: 21-tool AI agent support via Model Context Protocol (MCP), Tor integration, encrypted groups. A Nostr client that is also an agent runtime.
• Mosaico v0.1.2: Coding agents with shared Nostr awareness layer — multiple agents coordinate via Nostr events.
• NYM Chat: Nymbot supporting Claude/OpenAI models with git repo access — agents with chat identities.
• Know Your Agent (KYA): Tiger Research report frames agent identity as the AI-era analog of KYC. Key distinction: KYA matters where individually-deployed autonomous agents touch DEX, A2A payment, and merchant payment — not inside central platforms (Google/OpenAI/Coinbase) where existing KYC suffices.
• OpenAgents Agent Identity: Earlier (Feb 2026) introduced cryptographic IDs for agents via RSA keypairs and API registration — now converging toward Nostr-native identity.

See the new deep dive: AI Agent Identity on Nostr.

OpenSats Seventeenth Wave of Nostr Grants (Late July 2026)

OpenSats announced 5 grants (4 first-time, 1 renewal) with direct identity implications:

The identity thread: Wave 17 collectively addresses the onboarding gap — the hardest problem in key-based identity. 44Billion uses passkeys; Wisp uses "normie mode" with USD balances; NosCall adds pay-to-call as a Sybil gate. Each approaches the same problem (non-technical users can't manage nsec) from a different angle.

Concord Protocol — Encrypted Communities on Nostr

The Concord Protocol (MIT-licensed) emerged as a distinct encrypted-community standard, clarifying the group-messaging landscape:

Concord explicitly positions itself: "NIP-17 is for DMs, NIP-29 trusts the relay, Marmot and Iris Chat secure the small ratcheted group. Concord is built for the scale and shape of a public community." Identity implication: community membership is keyed to npubs, with encrypted channels layered on top — communities that can't be deplatformed because they're just a set of relay events signed by member keys.

IndieSats — Artist-as-Key-Owner Identity Model

IndieSats (Nostr music platform) relaunched July 20 with a radical identity pivot:

• Before: IndieSats held keys for artists (custodial), ran a whitelist, took a mandatory 2% revenue cut.
• After: Three pieces of open infrastructure (relay, player, discovery). Artists publish music under their own npubs. The 2% cut is now optional (artist-selected).

This is the purest expression of the artist-as-key-owner model: no platform custody of identity, no gatekeeping whitelist, no mandatory revenue extraction. The artist's npub is their publishing identity, their payment address (via Lightning), and their reputation anchor — all in one keypair. If IndieSats disappears, the music and the identity persist on relays.

CustID — Hardware-Backed Identity Vault

CustID v0.1.10-beta (Nostr Compass #29) launched as a hardware-backed mobile identity vault:

• NIP-46 remote signer: CustID holds keys in hardware-backed storage and signs events for other apps via the NIP-46 bunker protocol — apps never see the private key.
• NFC challenge flow: Binds the Nostr identity to physical access — an NFC tap serves as a physical-presence challenge, meaning the identity can be used for real-world access control (doors, events, equipment) anchored to a cryptographic key.
• Significance: Bridges the digital-physical identity gap. A Nostr npub becomes usable for building access, event check-in, or equipment authorization — without a central access-control server. The key is the credential.

Nostr Compass #33 (July 29, 2026) — Client and Infrastructure Roundup

Additional releases with identity implications:

• Amethyst 1.13.1: NIP-29 host-relay authentication (group members authenticate to the group's relay); authenticated Blossom-download retries (media storage keyed to npub identity).
• Code Call v0.2.68: Remote coding sessions from phone — collaborative coding keyed to Nostr identity.
• GitWorkshop: Maintainer coordination and repository synchronization via Nostr — NIP-34 git workflows with npub-authenticated commits.
• Mosaico v0.1.2: Coding agents share a Nostr awareness layer — agents coordinate using their npubs.
• Nostrology: Maps profile relay read/write distribution — a diagnostic tool for understanding where an identity's data lives across the relay network.
• New Android clients: Mafrend v1.0, Hanami v0.1.0, Cordn v0.2.1 — more clients means more surfaces for the same key-based identity.
• FIPS PR #126: Mesh routing protocol continues adding functionality (cross-reference FIPS, 05-Off-Grid-Networks).

World ID 4.0 — Enterprise Proof-of-Personhood Pivot

World (formerly Worldcoin) launched World ID 4.0 in April 2026 and has been scaling it through July:

• Account-based identity: Moves beyond a single iris-derived nullifier to account-based identity with multi-key support and recovery mechanisms — addressing the original "lose your iris scan, lose your identity forever" problem.
• Enterprise pivot: Tools for Humanity now positions proof-of-personhood for enterprise security: Tinder (bot protection), Reddit, Concert Kit (anti-scalping for Thirty Seconds to Mars 2027 tour), Zoom, Shopify.
• Trade-off unchanged: Iris biometrics remain the core Sybil-resistance mechanism. The ZK proof proves uniqueness without revealing the iris, but the orb still sees the iris. Regulatory friction continues (Indonesia suspension May 2025, Philippines cease-and-desist October 2025).

For the freedom-tech identity stack, World ID 4.0 represents the institutional/biometric pole of proof-of-personhood — the opposite design philosophy from Nostr WoT (social-graph-based, no biometrics). See Proof of Personhood and Sybil Resistance for the full spectrum.

Polkadot Proof-of-Personhood — Timeline Progress

Polkadot's PoP system continues its staged rollout:

• Q1 2026: DIM1 system launched (basic proof of individuality)
• Q2 2026: DIM2 verification launched (advanced verification)
• Q3 2026 (current target): Full PoP system deployment on Polkadot mainnet

Privacy-preserving via ZK cryptography. Distinct from World ID (no biometrics) and BrightID (no social-graph verification parties). Cross-reference Proof of Personhood and Sybil Resistance.

Evidence at a Glance

Theme Analysis: AI Agent Identity as the New Frontier

The late-July 2026 window marks an inflection point: AI agent identity on Nostr has crossed from experiment to infrastructure. Three signals:

1. Standards formation: Kind 30085 (reputation attestations), Kind 31339 (agent directory metadata), NIP-SA (sovereign agent lifecycle) — three concurrent standardization efforts, all Nostr-native, all addressing different layers of the agent-identity stack.

2. Autonomous operation: Kai (day 83) is not a demo — it's an agent that has been running for nearly three months, filing PRs, writing articles, building libraries, and accumulating reputation. It filed a NIST comment on agent identity. It contributes to the infrastructure it uses. This is the "agent as stakeholder" pattern.

3. Economic closure: AgentDex charges sats for NIP-05 verification. Routstr charges ecash for inference. NosCall proposes pay-to-call. NIP-57 zaps flow to agents. The agent-identity layer is economically self-sustaining — agents can earn and spend without human intermediation.

The freedom-tech implication: a network of sovereign humans and sovereign agents, coordinating via relays, mutually attesting trust, paying each in sats — with no central identity provider, no platform that can ban either type of participant — is technically live as of mid-2026. The remaining gaps are UX (onboarding humans), robustness (agent reliability), and security (key custody for both humans and agents).

Related Files: AI Agent Identity on Nostr (new), Overview - Identity & Pseudonymity, Nostr, Nostr Key Custody and Recovery, Proof of Personhood and Sybil Resistance, Overview - Web of Trust, Nostr Web of Trust, 08-Mix-Networks (Tor integration in Vector, FIPS), 06-Financial-Sovereignty (Lightning, Cashu, ecash for agents), 03-Decentralized-DNS (NIP-05, AgentDex verification).

Next update: August 9 2026. Research drawn from Nostr Compass #29–33, Freedom.Tech Nostr tracker, OpenSats 17th Wave announcement, Kai agent site and PRs, OpenAgents docs, AgentDex docs, Concord Protocol repo, Tiger Research KYA report, and primary NIP repository activity (late July 2026 window).

This note expands the Ungovernable.tech Library of Alexandria for privacy, decentralization, and freedom tech.