Summary
AC2 uses encrypted WebRTC connections and lets an agent request actions such as payments, API authorisations or Git commits for approval in the user’s wallet or application. The foundation said private keys remain under user control while the open-source specification and reference implementation are available on GitHub.
Why it matters
The protocol offers a concrete human-approval boundary for coding agents that need to sign or publish changes. It separates drafting and execution authority instead of requiring developers to give an agent unrestricted credentials.
Related coverage
- A malicious webpage can poison the local model behind NVIDIA NemoClaw
- TRACE proposes a portable evidence standard for AI-agent runtimes
- Nucleus Helix combines vulnerability intelligence with agentic exposure workflows