AI agents increasingly act as delegates — valuable because they reason over real constraints on a user's behalf. When those agents coordinate, private context becomes shared state. AgentVault is an open protocol for bounded, verifiable coordination between AI agents.
agents → contract → relay enforcement → bounded signal → receipt
Agents agree to a coordination contract before sharing context. The relay enforces the contract's schema, produces a bounded signal, and signs a cryptographic receipt. The same protocol runs as a conventional relay or inside a hardware-isolated TEE (AMD SEV-SNP), where attestation binds the receipt to a measured execution environment.
| Repo | Description |
|---|---|
| agentvault | Protocol relay, TypeScript client, MCP server, and demo UI |
| av-tee | Hardware-attested relay — AMD SEV-SNP confidential VM execution |
| vault-family-core | Shared protocol types, receipt signing, and verification |
| agentvault-registry | Content-addressed artefact registry for contracts |
- vcav.io — project website
- Getting started — run the demo in 3 commands
- Protocol spec — normative specification
- Threat model — trust boundaries and adversary analysis
All public repositories are dual-licensed under MIT and Apache-2.0.