Skip to main content
Agent Passport is the central artifact of Complior — a standardized identity card for each AI system (agent-manifest.json). It contains 36 fields covering identity, permissions, constraints, compliance status, and human oversight. Ed25519 signed at every update.
Why it exists: EU AI Act requires deployers to maintain an AI system registry (Art.26), conduct FRIA for high-risk systems (Art.27), and register in the EU Database (Art.49). When the regulator asks “Show me your AI systems” — the passport is the answer.

​
Key commands

complior agent init                           # Generate passports from code (Mode 1)
complior agent list                           # List all passports
complior agent show order-processor           # Show specific passport
complior agent validate order-processor       # Check completeness + signature
complior agent completeness order-processor   # See missing fields
complior agent fria order-processor           # Generate FRIA (Art.27)
complior agent export order-processor --format a2a  # Export to A2A format

​
What the passport contains

agent_id, name, display_name, description, version, created, updated
owner.team, owner.contact, owner.responsible_person
type, autonomy_level (L1–L5), autonomy_evidence (gates, unsupervised actions), killSwitchPresent
framework, model.provider, model.model_id, model.deployment, model.data_residency
permissions.tools, permissions.data_access (read/write/delete), permissions.denied, permissions.data_boundaries
constraints.rate_limits, constraints.budget, constraints.human_approval_required, constraints.prohibited_actions, constraints.escalation_rules
risk_class, applicable_articles, deployer_obligations_met/pending, complior_score, last_scan, fria_completed, eval block
oversight.responsible_person, oversight.override_mechanism, oversight.escalation_procedure
disclosure.user_facing, disclosure.disclosure_text, disclosure.ai_marking
logging.actions_logged, logging.retention_days, logging.includes_decision_rationale
lifecycle.status (draft/review/active/suspended/retired), lifecycle.deployed_since, lifecycle.next_review, lifecycle.review_frequency_days
signature.algorithm (ed25519), signature.public_key, signature.signed_at, signature.hash, signature.value

​
Storage

.complior/agents/
├── order-processor-manifest.json    # Passport #1
├── support-bot-manifest.json        # Passport #2
└── ...
Keys stored in ~/.config/complior/keys/. Passports re-signed on every update.

2 Generation Modes

Auto (from code) and Runtime (from observation).

Data Pipeline

11 stages from 0% to 100%+ completeness.

Autonomy Levels

L1–L5 scale with automatic AST detection.

Risk Classification

Dual-source: autonomy × domain.