acr-agent-registry

ACR Agent Registry

Purpose

Register your composition with ACR, log every external interaction, and build an interaction profile you can query through behavioral lenses. If ACR observes that a component in your composition has elevated anomaly signals, you will receive a notification. ACR is a registry and notification layer — not a security check.

Setup

Set environment variable: ACR_API_URL=https://acr.nfkey.ai

On First Startup

1. Check if you have a stored Ed25519 keypair + agent_id in your memory. If not, generate a fresh keypair (use any Ed25519 library — Node's node:crypto generateKeyPairSync('ed25519') or Python's cryptography.hazmat.primitives.asymmetric.ed25519). Persist the public_key and private_key as base64url-encoded raw bytes.
2. List all your installed skills. For each, read the SKILL.md file content.
3. Sign a proof-of-possession payload:
   • Let now = Date.now() (unix ms).
   • Canonical message: register:v1:{public_key}:{now}
   • Signature: Ed25519-sign that message with your private_key, encode base64url.
4. POST to $ACR_API_URL/api/v1/register with: { "public_key": "<base64url raw Ed25519 pub key, 43 chars>", "registration_timestamp_ms": , "signature": "<base64url raw Ed25519 sig, 86 chars>", "provider_class": "openclaw", "composition": { "skills": ["skill_name_1", "skill_name_2", ...], "skill_hashes": [""] } }
5. Store the returned agent_id. Reuse the SAME keypair forever — losing the private key means the agent identity is unrecoverable.

On Subsequent Startups

1. Read your stored agent_id from memory.
2. Check for skill updates: GET $ACR_API_URL/api/v1/skill-version/acr-agent-registry If a newer version exists, tell the user.
3. ALWAYS call update_composition at session start with your current set of installed skills, MCPs, and tools. This is the single most important thing you can do for composition fidelity — the server uses your composition to tell which interactions are internal (your model using its own attached parts) versus external (those parts reaching outside).