Privacy needs somewhere
neutral to ask.

A personal agent transacts in public. Anything it carries, it carries in public — at every merchant and platform it touches. So it carries nothing: it asks at one neutral place, you answer on your own phone, and the business gets a signed yes under a different handle everywhere. Your identity never goes out with it.

FIDO Alliance member
W3C WebAuthnthe standard the browser already speaks
User verificationthe check happens on the person’s own device
ES256 · public JWKSverify our answer yourself, in your code
Denver, Coloradolive on the web today
One act

Three companies. One person. No name anywhere.

Wayfarer’s agent books the whole trip: a flight on Meridian, a ride with Driver, a room at Harbor Hotel. Three companies that have never met you, and never will.

01

The agent asks. It doesn’t decide.

Before a card is charged, the request arrives on your phone: who is asking, what for, and what it costs. No request, no act — the booking simply doesn’t happen.

02

You answer where you are.

One tap on the passkey already in your pocket. The yes is signed on your device, by you, and it covers that one act and nothing else.

03

Each company gets the same yes and a different you.

Meridian, Driver and Harbor Hotel each get a signed answer they can check in their own code, under a handle that belongs to them alone. Put the three side by side and nothing lines up.

Who we are

The seat between the agent and the world.

Every side trusts it because we belong to none of them. We see enough to know a person is there — never who. That is the Personhood Firewall: the fact gets through, signed; the person stays behind it.

The whole business is in two lists.

What we hold

— A passkey’s public key
— One handle per platform, one per agent
— Your signed answers
— The revocation

What we never hold

— A name, an email, a document
— A face, a fingerprint
— One identifier that follows you
— A password to anything

We’re binding the second list into a trust, so no board, buyer or founder can move it. In progress; we’ll publish it when it’s done.

The ask

Put it behind one flow.

A gate is one line in your product, answered by the person’s own passkey. Put it behind one sign-up, one checkout, or one age check. Run it ninety days on the free floor — no card. Your login doesn’t change; your stack doesn’t move. At the end we publish what happened, together — nothing about your customers in it.

hello@botshield.ai·(303) 903-3274·LinkedIn ↗