China Proposes a Global AI Agent Trust and Interoperability Initiative
Identity, discovery, protocol interfaces, privacy, and security are becoming shared requirements for scaling AI agents.
Key takeaways
A global cooperation initiative released on July 17, 2026 calls for mutual trust, connectivity, and interoperability among AI agents. Its nine proposals span ecosystem development, security governance, open-source collaboration, standard interfaces, privacy protection, and digital inclusion. The initiative arrives alongside an ITU focus group on agent identity and access management, the Linux Foundation's Agent Name Service proposal, and the A2A protocol project. Together, these efforts show AI agent competition expanding beyond model quality toward trusted identity, service discovery, cross-platform communication, permission control, and auditable execution. For users and small teams, the immediate task is not to assume a universal standard exists, but to demand clear identities, scoped permissions, logs, approval gates, and rollback paths.
# China Proposes a Global AI Agent Trust and Interoperability Initiative
Published: July 22, 2026
Table of contents
- Direct answer
- Fact sources
- Definition, scenarios, steps, and risks
- Why it matters
- Impact for ordinary AI users
- Related tools/tutorials
- FAQ
- Source links
Direct answer
The initiative does not require every agent to adopt one technology immediately. It calls for cooperation around trusted identity, discovery, protocol compatibility, security governance, and data protection as agents begin to work across platforms and organizations.
Fact sources
On July 17, 2026, the World Internet Conference Asia-Pacific Summit released an initiative calling for mutual trust, connectivity, and interoperability among AI agents. Its nine proposals cover ecosystem development, security governance, open-source collaboration, standard interfaces, privacy and data protection, and closing digital divides. A chair's statement published the same day called for international consensus, coordinated standards, and responsible agent development. Earlier, the ITU announced a Focus Group on identity and access management for agentic AI on July 9. The Linux Foundation announced its intent to launch Agent Name Service on June 23, 2026 for neutral naming, discovery, and authenticity checks, while its A2A project supports agent-to-agent communication. These are cooperation and standards-building efforts, not a single mandatory global standard already deployed everywhere.
Definition, scenarios, steps, and risks
Agent trust means verifying who an agent is, whom it represents, what it may do, and whether its capability claims are credible. Connectivity means controlled discovery and connection. Interoperability means exchanging tasks, status, results, and errors through agreed interfaces.
- Define one low-risk, repeatable cross-agent task with explicit inputs, outputs, handoff conditions, and stop conditions.
- Give every agent a separate identity and least-privilege scope; begin with read, discovery, and simulated calls only.
- Pin protocol, tool, and endpoint versions, documenting the role of A2A, MCP, APIs, or custom adapters.
- Verify each agent's name, origin, capability claims, destination, and authorization scope, while logging requests and tool calls.
- Route writes, payments, deletions, account changes, and external messages through explicit human approval.
- Test timeouts, revocation, expired identities, network failure, and rollback, then measure errors, latency, and review cost.
Risks include identity spoofing, false capability claims, prompt injection, excessive permissions, cross-platform data leakage, incompatible protocol versions, and treating a cooperation initiative as an already binding global standard.
Why it matters
When one agent can call another agent, tool, or account, fluent output is no longer enough. Identity, permissions, provenance, auditability, and recovery determine whether cross-agent workflows can enter real operations.
Impact for ordinary AI users
Ordinary users will see more features that delegate work to other agents, connect external tools, and automate multi-step tasks. Before enabling them, check the destination, permission scope, data path, paid actions, external messages, and revocation method.
Related tools/tutorials
Continue through ENHE AI frontier news, software, account services, skill tutorials, and local deployment guidance to move from protocol concepts to permission checks.
Related ENHE AI links: AI frontier news, AI software and local deployment tools, AI account services and permission management, AI skill tutorials and validation methods, ENHE AI homepage.
FAQ
Are A2A and MCP the same protocol?
No. A2A primarily handles task communication and status exchange between agents, while MCP commonly connects models or agents to tools, data, and context. They can be combined.
Is the global agent cooperation initiative already a mandatory standard?
No. It is a cooperation initiative released on July 17, 2026, while related standards, identity infrastructure, and protocol governance continue to develop.
Why should ordinary users care about agent interoperability?
More AI software will connect email, calendars, storage, code, accounts, and other agents, making identity, permissions, logs, revocation, and rollback direct user concerns.
Source links
- 新华社：推动全球智能体互信互联互通合作倡议
- 中华人民共和国外交部：世界互联网大会亚太峰会主席声明
- ITU: Focus Group on Identity and Access Management for Agentic AI
- 中央网信办：构筑智能体创新发展的安全底座
- Linux Foundation: Agent Name Service trusted identity infrastructure
- Linux Foundation: Agent2Agent Protocol Project
What this means for everyday users
ENHE users should add agent identity, protocol compatibility, permission scope, log export, human approval, and revocation to software, account-service, and local-deployment checklists.
Related tutorials
[[zh]][[/zh]][[en]]Review a public website[[/en]]
SearchScope SEO/GEO
[[zh]][[/zh]][[en]]Access and usage guide[[/en]]
AI Prompt Management System | 418 Bilingual Prompts for Writing, SEO and AI Creation
High-Frequency AI Prompts for Work, Learning, and Teaching guide
High-Frequency AI Prompts for Work, Learning, and Teaching
Related reading
From Chat Boxes to Personal AI Companions: AI Assistants Are Entering the Desktop Execution Era
AI assistants are moving from answering questions toward continuing real tasks. AI agents, MCP tool ecosystems, personal memory, and local workbenches are pushing this shift together. For users, the real value is not another chat box, but less repeated context setup and more continuity from thinking to doing.
Copilot in Visual Studio Adds PR Exploration, a BYOM Migration, and NuGet Fixes
GitHub summarized three September updates for Copilot in Visual Studio 2026 on October 22, 2026. The Git agent can explore an attached pull request and link back to comments and files. Bring Your Own Model remains in preview but now requires the new Agent experience, and previously configured Ollama models must be added again. NuGet Audit warnings can open Copilot Chat with the NuGet MCP server to propose dependency fixes. This article gives .NET developers a cautious upgrade checklist: preserve current settings, validate each feature independently, review package and lock-file changes, run targeted tests and vulnerability scans, and keep a rollback path. Summaries and suggested fixes remain review inputs, not verified outcomes.
When Should an AI Agent Use a Local Small Model or the Cloud? A Hybrid Routing Checklist
AWS published an Adaptive Agentic Intelligence Framework guide using Strands Agents on October 21, 2026. The reference routes routine status checks and local vision work to small models through Ollama, while complex analysis goes to Amazon Bedrock. This durable guide helps teams decide when an AI agent should stay local and when it should use a cloud model. It classifies tasks, marks data that may leave the device, establishes local and cloud quality baselines, defines timeouts and fallbacks, applies one safety policy across both paths, and measures actual routing before estimating cost. The example can run on an 8 GB Raspberry Pi, but that hardware detail is not evidence that every workload belongs on a small local model.
Bayer Shares Production Lessons From 22 Specialist Agents: HTTP Success Is Not Task Success
AWS published Bayer Crop Science’s Agentic Decision Engine case study on October 23, 2026. The production system runs 22 specialist agents over governed analytics workflows, models, logs, and visualization tools. This article turns the architecture into five reusable acceptance checks for enterprise agent teams: persist the state needed to resume work, define identity and authorization at every boundary, scope each agent’s tool catalog, distinguish transport success from task success, and release to a gated group before broader access. It also explains why Bayer’s adoption and resolution figures are evidence about one implementation, not promises for another organization. The focus is operational proof, least privilege, rollback, and observable outcomes rather than prompt polish.
IskayPet Connects SharePoint to a Managed Knowledge Base: Validate Permissions Before Answers
AWS published IskayPet’s corporate knowledge assistant case study on October 22, 2026. The system connects Amazon Bedrock Managed Knowledge Bases to existing SharePoint repositories and answers cited questions across retail operations, veterinary care, onboarding, and procurement in four languages and three countries. This article turns the case into a practical acceptance plan for knowledge owners. It checks source scope, inherited permissions, hybrid retrieval, duplicate and fragment removal, citation quality, feedback, and token cost before expansion. It also separates the customer’s reported production results from what another organization should expect. A managed retrieval stack reduces infrastructure work, but it does not remove content ownership, access reviews, evaluation datasets, or human verification of important answers.
GitHub Copilot in Teams Turns Notifications Into Pull Requests: What to Check Before Review
GitHub updated its Microsoft Teams app on October 23, 2026, so an issue notification in a channel, group chat, or private chat can become a Copilot task that investigates the problem, proposes a fix, and opens a pull request. This article helps development and product teams adopt the workflow without mistaking an automated pull request for shipped code. It explains the consolidated app, repository connection, the November 16 retirement of the legacy GitHub app, and the review boundary. A practical acceptance checklist asks teams to reproduce the issue, inspect changed files, run targeted tests, verify permissions, and keep merge and deployment as explicit human decisions.
Summary
Trust, connectivity, and interoperability are becoming foundational for deployed AI agents. Useful cross-agent workflows require clear identities, constrained permissions, compatible interfaces, visible evidence, and reversible actions.