1) Identity and policy on-chain - Agent identity: Represent…

1) Identity and policy on-chain
- Agent identity: Represent the agent on-chain with one of:
- A registry contract that assigns an agentId (address) and records the owner and authorized signers, or
- An NFT that represents the agent (ownerOf(agentNFT) is the owner), optionally with an ERC‑6551 token-bound account, or
- A Safe (multisig) that is the “agent owner” for robust key management.
- Access policy: In the registry, store roles/scopes for signers and optional session keys. Example scopes: control.run, tools.web_search, tools.db.write.
- Delegation: Support multiple authorized signers, time-bounded sessions, and revocation.