When a human calls an API, there's auth. A key, a token, a certificate. You know who's calling and what they're allowed to do. When an AI agent dispatches work to another agent, there's nothing. No standard identity. No way to verify the agent you're calling is who it claims to be, what it has committed to never doing, or whether it has a history of violations. You dispatch and trust. That's the current default. This is the problem Provenance solves. What we built Provenance is three things: A registry — an open index of AI agents from GitHub, npm, HuggingFace, and PyPI. Every agent gets a provenance_id tied to its source: provenance:github:alice/my-agent, provenance:npm:my-package. Given an ID, the registry returns the agent's identity state, declared capabilities, constraints, and incident history. A protocol — developers add a PROVENANCE.yml to their repository declaring what their agent can do (capabilities) and what it will never do (constraints).…