GoKawiilNew AC2 Protocol Adds Cryptographic Human Approval Layer to AI Agents
AC2 is a new open protocol designed to let AI agents request verifiable human sign-off before taking consequential actions, such as merging code, sending client messages, calling APIs, or executing payments. It installs into existing frameworks via a plugin and single command, using DIDComm v2.0 messaging and passkey authentication through Liquid Auth (FIDO2/WebAuthn), without needing a central relay server or blockchain.
GoKawiil's interpretation of the reporting above, not reported fact.
As autonomous agents take on more consequential tasks, the lack of a standard way to prove a human actually authorized an action has been a major trust and liability gap. By cryptographically binding approvals to exact request content, AC2 offers an auditable accountability layer that could become foundational infrastructure as agentic AI spreads into finance, software deployment, and business communications.
- AC2 adds hardware-backed human approval signatures to AI agent actions like deploys, payments, and messaging.
- It works without central relays or blockchain, using DIDComm v2.0 and FIDO2/WebAuthn passkeys.
- Supports custom workflows via JSON-LD schemas, including integration with Google AP2 intent mandates and x402 payments.
YubiKey 5C NFC Security Key — AC2's passkey-based authentication runs on FIDO2/WebAuthn, and the YubiKey 5C NFC is the classic hardware key for exactly that standard. It gives you a physical device to prove a human approved the commit, message, or payment, and it works over USB-C or NFC with phones and laptops alike.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: ac2protocol.org — Algorand Foundation Us, 2026-08-27
Published there as: “AC2 Protocol: The missing security layer for AI agents”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.