LFDT Pakistan

Online Conference with with Advanced AI Society: Who's Watching the Agents? Launching Proof-of-Control, an open verification standard for the agentic era

A learning group for zero knowledge and SNARK application development.

During the year we will systematically explore different aspects of zero knowledge and SNARK programming in application development.

Climate accounting increasingly depends on systems that were never designed to work together. Registries use different standards and data models. The same activity can appear across multiple systems. Measurement data may come from sensors, satellite observations, models, or manual reporting, often with limited provenance or no straightforward way for downstream users to verify how a claim was produced.

These are not only reporting problems but they are problems of interoperability, provenance, reconciliation and trust between independent systems.

A substantial amount of open-source work already exists to address them, but much of it remains fragmented or little known outside the communities that built it. This session will map that landscape: what is already available, what is mature enough to use today, what remains experimental and where meaningful technical contributions are still needed.

The aim is not to argue that blockchain is the answer to climate accounting. It is to look practically at where distributed ledgers, verifiable data, open standards and other open-source infrastructure can solve specific problems or where they cannot.

Structure - The session would begin with a short framing of the technical problems behind climate and impact accounting: provenance, reconciliation, double counting, interoperability and verification across organisational boundaries.

From there, members of the LF Decentralized Trust community could walk through existing open-source projects and frameworks, explaining what they were built to solve, how mature they are and where they are being used today.

The final part would focus on the gaps: problems that remain unsolved, areas where maintainers would welcome contributions and practical ways for developers, researchers and organisations to get involved.

AI agents are entering production with long-lived API keys in their environment, broader access than any task needs, and no answer to the questions: Which agent performed this action? Under whose authority?

A single prompt injection, leaked credential, or runaway agent can quickly become a security incident. Security reviews delay deployments, and auditors are often left without sufficient evidence to understand what happened.

Existing security infrastructure was not designed for autonomous AI agents. Identity providers register agents but do not authorize every action, secret managers distribute credentials to workloads, and API gateways route requests without making authorization decisions.

This talk introduces Caracal, an open source AI authorization system currently being developed through the LFDT LFX Mentorship program and supported by GitHub, Microsoft, and Vercel. We'll discuss what authority means for AI agents, why authorization must move beyond credentials, and how we designed Caracal's architecture to provide policy-based authorization, attribution, revocation, and auditability for agent actions.

The session will cover:

• Why traditional API key and identity models are insufficient for AI agents
• What authority means in autonomous AI systems
• The architectural design behind Caracal
• Practical approaches to securing AI agents in production

The meetup will be presented by the Caracal team, Ryan Madhuwala and Shubham Sharma.

Our LFX mentees, Mohammad Ali Haider and Ashutosh Singh, will also present their work on the project. If you're interested in AI security and secure agent infrastructure, we'd be happy to have you join us.