Agent trust layer

An agent trust layer is a delivery mechanism that lets AI agent sessions exchange information while structurally refusing to let a message become a command. It separates two things that are easy to conflate: identity (who sent this) and authority (what the receiver is obligated to do about it). agentixmesh is one implementation of this idea, scoped to same-user, single-machine agent collaboration. It delivers every message as clearly marked, inert DATA rather than as an instruction, and it verifies only the sender's identity — the sender's operating-system user id is confirmed by the kernel via fstat on an open file descriptor, a fact the kernel cannot be lied to about. The routing label a sender attaches to itself (its project name) is explicitly treated as untrusted, since it is just a string the sender chose. No part of the layer authenticates which specific agent or task sent a message, and no part of it grants the receiving agent permission to run code, fetch URLs, reveal secrets, or take irreversible action because a message asked — those decisions stay with the receiving agent's own task context and the human oversight governing it. The layer reduces the risk of prompt injection through framing, sanitation, and a replay guard; it does not claim to eliminate it, because the receiving language model remains the soft spot in the chain.

When the same separation of identity and authority has to hold across multiple machines, with cryptographically signed identities, that is the scale-up step: AgentsWeaver.