Fraser

@fraser.bsky.social

CEO @ Authrty & cheqd: building trust and governance layers. Identity, credentials, an FinOPs for AI agents and individuals | Ex-Accenture | Climber, Cyclist

I wanted to understand where the capabilities of the various agent protocols and implementations actually overlap, so I had Claude map them out onto a capability map, now sharing it in case it's any use for others.

Warning: Yesterday an "investor" booked an intro call with me, and the call turned out to be a delivery mechanism for fake meeting links, I assume to take control over my device.

. @Google's @GeminiApp AI summaries not getting extreme basics like the correct time really does not inspire confidence in AI... Thanks to @EHotta for flagging this!

Bild

I got around 20 reactions on a post in under ten minutes on @LinkedIn this week, almost all from leadership coaches, and I couldn’t tell whether a person, a pod or a script was behind any of them.

"Sorry, it wasn't me, guv" doesn't work as a legal defence in California anymore, and @AnthropicAI’s own IPO filing shows just how critical this is.

First heard of independent verification organisations, or IVOs, from @BriTreece_, (co-founder and president of @fathom_org and executive director of @pactai_org, on a @linuxfoundation webinar launching “Proof of Control” (congrats @triciawang and @aai_society)

@Meta's @Muse agent has had two very different weeks in one… Launched September 8, it passed 2.5 million downloads inside two weeks and overtook @ChatGPT on the US iOS App Store. Meta's stock followed: up roughly 30% this month and an 11%+ single-day move on Monday.

Have been down a small Jev rabbit hole since @typesafeai released it, this time on the evals and governance side rather than the angle I posted about last week.

@typesafeai opened access to Jev this week, and one of their own engineers described it, half joking, as "a really smart switch statement": 2016-era classifiers wearing 2026 levels of capability, which is a more honest description of what's new here than most model launches

I spent Sunday morning cycling round Regent's Park with a friend, talking about trust. He's a senior engineer at a scale-up in an industry where trust isn't a nice-to-have. Insurance, finance, the kind of industry where "it mostly works" gets you fired...

Two repos, donated to two different industry bodies, roughly three months apart. Two completely different pictures of what "donated" means in practice.

BildBild

I'm mostly against humanising AI agents, but I've started using the language of contractors to talk about them and finding it helpful. For two reasons: First: the AI agent market appears to be mirroring the worker onboarding journey, you: - Hire them (pick a model).

Bild

Hit a small milestone on @Authrty : we just crossed 500 installs across @GitHub and @PyPI for a free tool we released a few weeks ago (link in the comments).

Bild

The two leading AI companies had a bad week but I seem to be seeing and hearing a lot more about @OpenAI's breach rather than @Anthropic's data leak.

Bild

Had a few days off and used them to play around / built on top of Tarek, CTO of @Authrty 's Claude Code analytics tool, obviously with Claude doing most of the actual coding. (link to Tarek's tool below)

Nick Lambert from @dock_labs's post on @LinkedIn on "derived credentials" put into words something I've been chewing on for a while: EUDI is critical infrastructure, but I don't think it's where the value accrues.

Spent the last two afternoons at @AICodingSummit , in person Monday and virtually Tuesday, alongside developers from @OpenAI, @Microsoft @amazon, @LSEGplc and many more. A few takeaways 👇

Over 50 customer interviews now and one topic keeps coming up before anything else. Not risk, governance or compliance. Cost... Everyone seems to be assuming governance starts with “is this safe” and “are we compliant.”

I had a hunch there were plenty of Agent ID and credential specifications and standards emerging but maybe hadn't appreciated exactly how many, I came across >10 just on a first pass, I'm sure there are many more.

eIDAS 2.0 and EUDI conversations appear to be shifting gear. cheqd built a tool to model exactly the question everyone's now asking, link in the comments.

An engineer friend at a scale up shared their company hit their company-wide token limit last night… so it’s not just Uber Anthropic dropped Fable 5, free on existing plans, so seems naturally everyone just switched it on.

Bild

Anthropic just published a Zero Trust framework for AI agents. It’s the most thorough treatment of the problem I’ve seen from a model lab. Cryptographic agent IDs at Foundation. X.509 certs at Enterprise. Hardware-backed attestation at Advanced. All correct. All necessary.