Is this the right person? Or is this person free to say no?
Passwords, static biometrics, and digital signatures only ever answer the first question. LICET is a cryptographic protocol that answers the second — binding AI agent authorization events to the real-time physiological state of the authorizing human, not their identity.
Peer Review & Standardization
JUL 02 2026 → OCT 13 2026
IETF Internet-Draft
draft-pereira-licet-human-intent — revision -02 corrects the ZKP witness derivation. Standardization in progress.
Internet-Drafts are not endorsed by the IETF and carry no formal standing until adopted by a working group or published as an RFC.
Live, Publicly Auditable Evidence
Verify an authorization
232 real authorization events, collected via Samsung Galaxy Watch 6, mature personal
baseline (50 sessions). Paste any hash below and confirm it exists on the ledger —
independently, without needing to trust eColabs.
What This Protocol Formally Establishes
L1
Identity anchor — ECG waveform morphology, a pharmacologically-resistant signal anatomically unique to the authorizing human.
L2
Liveness — continuous electrodermal activity and overnight HRV pattern matching, proving a conscious subject is present.
L3
Voluntary state — personalized Mahalanobis distance fusion with pharmacological attack pattern detection.
L0–3
Trust hierarchy — four biometric assurance levels aligned with IETF RATS (RFC 9334).
ZK
Zero-knowledge proof — Schnorr over BN128, enabling third-party audit without biometric exposure.
∞
Hash-chained ledger — every authorization event, tamper-evident and independently verifiable.
Implementation
What This Protocol Does Not Claim
A protocol that claims more resistance than it has is more dangerous than one
that states its limits plainly.
- Volitional vagal enhancement (paced breathing) is the primary unmitigated attack vector — no mitigation exists in the current design.
- Chronic beta-blocker use displaces the personal baseline.
- EDA sensor availability varies by wearable; not all devices support full Layer 2/3 guarantees.
- Sensor-to-TEE attestation (Level 3) does not yet exist in consumer hardware.
- Reduced discriminative power in endurance athletes, elderly users, and autonomic neuropathy.
Publications