Machine identity
Durable CPID, accountable sponsor, hardware identifier, issuer, assurance level and lifecycle status.
IDENTIFYExtend Compute Passport™ from AI agents into robotics: one persistent machine identity that can bind accountable ownership, hardware, approved AI software, operating context, policy state and evidence across the robot lifecycle.
A humanoid can carry models, tools, credentials and delegated authority while moving between sites and operating roles. Traditional asset inventory tells you what was purchased. Compute Passport is designed to help establish what the machine is, what software it is expected to run, who is accountable for it and whether its current state remains trusted.
The identity object is designed to connect the physical asset to the software and governance state that makes the machine operationally meaningful.
Durable CPID, accountable sponsor, hardware identifier, issuer, assurance level and lifecycle status.
IDENTIFYApproved models, agents, runtime packages, versions and cryptographic digests attached to the robot object.
BINDSite, zone, GPS context, environment constraints and time-bound operating claims available to policy systems.
CONTEXTActive, suspended, quarantined or retired status with credential posture and assurance evidence.
CONTROLDesired-versus-reported software state, telemetry, verification events and policy outcomes linked back to identity.
OBSERVEHash-linked and signed events can preserve issuance, rotation, deployment, revocation and review history.
PROVECPAP is the interoperability path between the passport object and relying systems. In the current architecture it carries identity, status, software and evidence signals that policy engines can evaluate before an autonomous system is trusted with access or action.
The design complements existing IAM, asset management, robot middleware and safety systems instead of attempting to replace them.
IAM, Zero Trust, GRC, SIEM/SOC, approvals and audit.
CPID, signed claims, status, assurance, verification and evidence.
Models, agents, perception stack, runtime packages and desired state.
ROS 2 / DDS, edge gateway, telemetry, device credentials and OEM APIs.
Hardware root, sensors, actuators and safety-rated motion functions.
A relying system should be able to ask whether the passport is valid, who issued it, what state it is in, which software is approved and what obligations apply before granting access.
{
"cpid": "urn:cpid:v1:solarion:robot:sr-h01",
"issuer": "Solarion AI Systems",
"subject_type": "humanoid_robot",
"assurance": "CPAL-3",
"status": "active",
"software_state": "verified",
"policy": "robot-prod-v3",
"evidence_head": "sha256:91ab…"
}Verify machine identity, approved navigation/perception stack and assigned facility context before operational access.
Bind a robot to an approved model/runtime manifest and preserve who authorized a deployment or rollback.
Issue time-bound trust to vendor-operated autonomous systems without relying on a shared long-lived credential.
Change the passport state to quarantine and make that status available to relying systems and operators.
Associate health, GPS and software reports with the specific registered machine that produced them.
Reconstruct identity, software and policy state around a historical machine event without depending on one dashboard view.
Compute Passport does not require a cryptocurrency or public blockchain. The credible path is to add decentralization only where independent verification creates real value.
Issuer signatures, status, software digests and verification APIs.
Ordered identity and lifecycle events with tamper-evident history.
Merkle commitments and independent observers reduce reliance on one operator.
Multiple issuers and verifiers establish interoperable machine identity across organizations.
The current MVP demonstrates the management model. Production deployments require hardened key management, external verification services, OEM/edge adapters and environment-specific safety/security engineering.