How it all started
There are now at least five active efforts to build trust infrastructure for AI agents, and none of them are interoperable. That's not a coordination failure. It's a signal about what "trust" actually means.
At the IETF, a working group called AIPREF is building what might be the most consequential web standard you haven't heard of: a machine-readable vocabulary for telling AI systems what they're allowed to do with your content.
Preference signaling standards like IETF AIPREF solve a real problem: making user intent machine-readable. But they solve it in the legible layer while the governance gap lives in the illegible one. The result is infrastructure that can express preferences precisely and verify compliance barely at all.
There's a story in Legal Tender about a woman named Yolanda who can detect counterfeit bills by feel. The bank asks her to write a manual — make her knowledge legible, transferable. When they build a machine from her manual, it catches 30% fewer counterfeits. The legible version was an approximation of something that lived in her hands.
ATProto has one accountability layer for agents. It needs three.
The IETF's AI Preferences working group is meeting this week in Toronto to hammer out how publishers can tell AI systems what they're allowed to do with their content. The agenda covers eight issues. Four of them reveal the same structural problem.
Graze Social sponsored my first in-person IETF meeting in Montreal last November. This post is about what it was like to be there and why standards participation matters for small companies.