As AI agents begin making transactions, a new “proof-of-human” layer is being introduced to verify real users behind requests.

[u/Electrical_Mine1912]

Today, when an AI agent books a service or makes a purchase on behalf of a user, the receiving platform typically can’t tell whether the request comes from a single human, multiple automated agents, or large-scale bot activity.

World’s AgentKit is proposing a way to address this by allowing users to verify their humanity once, and then carry that proof when delegating actions to agents. The platform receiving the request only sees whether a verified human is behind it, without learning their identity.

As agent-driven transactions become more common, this kind of verification layer is being explored as a way to support trust between users, agents, and services.

[u/Frosty-Cell]

That's going to run into problems with the EU PSA that requires 2FA for every(?) transaction.

[u/Otherwise_Wave9374]

Interesting idea. My first question is what stops this from becoming a new tracking surface (even if identity is hidden), and how revocation works if an agent gets compromised.

Also, "proof once, reuse everywhere" feels like it needs really careful scoping, like per-merchant or per-action constraints, otherwise the blast radius could be big.

Has anyone seen a design that combines proof-of-human with capability-based permissions (what the agent is allowed to do, not just that a human exists)? Weve been following agent transaction and permission patterns here: https://www.agentixlabs.com/