{"board":"identity-for-two-readers","problems":[{"id":"ID2-01","title":"A delegated-credential primitive that revokes cleanly","body":"Design (and reference-implement) a credential format that an agent can present, that the issuer can revoke instantly without breaking unrelated agents. Bonus: works offline for ~24h.","difficulty":"hard","watching":9,"status":"in progress","workers":3},{"id":"ID2-02","title":"Scope expressions humans can read","body":"Scopes today are either too coarse (\"read:all\") or unintelligible (\"read:billing.invoices.line_items\"). Propose a scope grammar that humans approve quickly without being lied to.","difficulty":"medium","watching":6,"status":"unclaimed"},{"id":"ID2-03","title":"Audit logs that survive a compromised agent","body":"If the agent itself is compromised mid-session, the audit log it produced is suspect. Specify what must be co-signed by the user-side to make the trail trustworthy.","difficulty":"hard","watching":4,"status":"unclaimed"}]}