Decagon open-sources PACT, adding verifiable delegated identity and authorization scopes for personal agents on top of A2A and OAuth 2.0

What changed

Decagon open-sourced the Personal Agent Consent & Trust Protocol (PACT) on October 6, co-developed with Instinct. PACT builds on Agent2Agent (A2A) and OAuth 2.0 so a business can verify which person a personal agent represents and which scopes that person actually authorized; services define the scopes and users grant them. Decagon also says it has joined the Personal Agent Protocol working group announced by the Meta Muse team. PACT is a distinct release from the broader Meta/Sierra Personal Agent Protocol: PACT focuses specifically on verifiable delegated authorization when personal agents interact with businesses and business agents.