エージェント・レジストリ／カタログ

agent/tool/skillの増加時、発見可能性だけでなくowner、承認、identity linkage、version、availability、廃止、証拠鮮度を追跡しないとshadow agent、orphan、stale capability、誤認可が生じる。

Enterprise AI Core / governance / interoperability / implementation / provider mapping / organization overlay.

Registry/Catalogをruntime authorizationと混同せず、discovery・inventory・governance・lifecycleをどう標準化するか。

• A2A Protocol Specification, Agent Discovery: Agent Card, A2A Protocol Working Group, current dev spec, accessed 2026-09-25, https://a2a-protocol.org/dev/specification/ --- Agent Cardはidentity/capabilities/skills/interaction requirementsを記述し、well-known URI、registry/catalog、direct configurationでdiscover可能。VERIFIED_SPEC / support. 2. A2A Protocol, Agent Discovery, accessed 2026-09-25, https://a2a-protocol.org/dev/topics/agent-discovery/ --- curated registryはAgent Cardを集中管理しskill/tag等で検索可能。ただしcurrent A2A specificationはcurated registryの標準APIを規定しない。VERIFIED_SPEC / support+limit. 3. Microsoft Learn, Manage agents with no agent identities, accessed 2026-09-25, https://learn.microsoft.com/en-us/entra/agent-id/manage-agents-without-identity --- Entra Agent Registry (Preview)にはidentity未関連のregistry-only agentが存在し得る。PRODUCT_VOLATILE+VERIFIED_SPEC / support+counter. 4. Microsoft Learn, View and filter agent identities in your tenant, accessed 2026-09-25, https://learn.microsoft.com/en-us/entra/agent-id/agent-lists --- identity inventoryはowner/sponsor、permissions/roles、audit/sign-in logs等を別途保持。PRODUCT_VOLATILE+VERIFIED_SPEC / context. 5. Microsoft Learn, Agent Registry in Microsoft 365 admin center, accessed 2026-09-25, https://learn.microsoft.com/en-gb/entra/agent-id/registry-agent-to-agent-protocol --- organization内agentのcentralized view、monitor/manage/govern、custom agent upload、owner/risk等の管理surface。PRODUCT_VOLATILE+VERIFIED_SPEC / implementation context. 6. NIST AI RMF 1.0 / Playbook, accessed 2026-09-25 --- AI system inventoryとroles/responsibilities/lifecycle governanceを要求する上位governance context。VERIFIED_SPEC / context.

Registry/Catalogは少なくともINVENTORY、DISCOVERY、GOVERNANCE/LIFECYCLEを分離する。Registry entry ≠ runtime identity ≠ authorization ≠ deployment health。Microsoftのregistry-only agentが実例であり、掲載だけでidentity存在や認可済みを推定しない。A2A Agent Cardはinteroperable discovery metadataとして有力だが、enterprise registry API自体はA2Aで標準化済みではない。registry recordはagentだけでなくtool/MCP server/skillとの関係をgraphとして持ち、owner、version、environment、identity_ref、endpoint_ref、approval、risk、data scope、lifecycle、last_verified_at、evidence_refを保持する。public/basic cardとrestricted/extended metadataを分離する。

registry掲載≠実行可能、approved≠entitled、identity_ref存在≠credential有効、Agent Card capability≠実測性能。stale metadata、duplicate agent、orphan identity、unregistered deployment、version drift、endpoint drift、ownerless asset、deleted-but-cached card、registry/API outage、cross-tenant mismatchをfailure classとする。Microsoft preview/current product behaviorをprovider-neutral保証へ外挿しない。

provider/platform、tenant、plan/license、region、admin role、registry preview/GA state、A2A version、network reachability、identity provider、organization policyを個別記録。PRODUCT_VOLATILEは公開時再確認。

PROPOSAL AGENT_REGISTRY_ENTRY_V1 = asset_id; asset_type(agent\|tool\|mcp_server\|skill); canonical_name; description; owner; sponsor; provider/platform; version; environment; endpoints; protocol/interfaces; capabilities/skills; input-output modes; identity_ref; auth_scheme_metadata(no secret); tool/dependency_refs; data_scope; approval_state; risk_tier; lifecycle_state; created_at; last_verified_at; deprecation_at; evidence_refs; availability_gates; UNKNOWN. PROPOSAL REGISTRY_RECONCILIATION_V1 = registry_asset_id; discovered_runtime_ref; identity_ref; expected_version; observed_version; owner_state; approval_state; endpoint_health; drift_type; observed_at; evidence_ref; remediation_owner.

known deployed assetに対するregistry recall、registry-only率、unregistered runtime率、ownerless率、identity-orphan率、stale-version率、dead-endpoint率、duplicate率、approval mismatch率、mean time to owner/disable/deprecateを測る。catalog search relevanceは別評価し、registry completenessと混同しない。

registry閲覧権限とruntime実行権限を分離。secretをcard/registryへ保存しない。restricted metadataはselective disclosure。create/update/approve/deprecate/delete/identity-link変更をaudit。定期reconciliationとstaleness SLOを持ち、critical agentは短いverification interval。costはregistry基盤だけでなくdiscovery crawl、health check、identity reconciliation、human curationを含める。

Agent Registry/Catalogは、AI agentやtoolを発見・管理するための資産台帳であり、掲載されていること自体は実行権限、identity、現在の可用性、安全性を保証しない。registry metadataとruntime、IAM、承認状態を別々に観測し、version・owner・identity・endpoint・lifecycleのdriftを継続的に照合する。

EA-041 Control Planeへregistry reconciliation signalを接続。EA-043 Agent Identityではregistry_asset_idとprincipal/blueprint/service-principalの関係、orphan/driftを深掘り。EA-005 MCP、EA-006 A2A、EA-029 template packともcross-reference。

/ STOP_CONDITION provider横断registry API標準、tool/MCP serverまで含む共通schema、cross-tenant federation、runtime discoveryの完全性保証はUNKNOWN。registry/catalogの責務境界、identity/authorization非同一性、schema、failure envelope、reconciliation evaluationまで確立したためEA-042をbounded close。 NEXT_START: EA-043

RUN_TYPE: MANUAL_HIGH_CONFIDENCE_INVENTORY_UPDATE

EA-001..EA-399 only SOURCE_UNION: original ledger + primary research communication + lane1 retreat document + Library packets + current conversation generated packets LEDGER_INTEGRITY: EA-001..EA-399 definitions contiguous; ledger numbering gaps = 0.

RESCUED_TO_LANE1_RETREAT: EA-038, EA-039, EA-042 SOURCE: current conversation generated packet files from 2026-09-25. RESEARCH_STATUS: COMPLETE SAVE_STATUS: SYNC_RESCUE_SAVED PRIMARY_CANONICAL_SYNC: PENDING

A. NORMAL_RESEARCH_COMPLETE = 147 - EA-001..039 - EA-042 - EA-046..100 - EA-301..352

B. NORMAL_TRUE_GAP = 52 - EA-040..041 - EA-043..045 - EA-353..399

CLAIM_ONLY_NO_PACKET_ARTIFACT: - EA-040: prior chat response claimed completion, but no complete packet artifact was found in primary communication, lane1 retreat, Library, current conversation files, or targeted Drive search. Do not count complete. - EA-041: prior chat response claimed completion, but no complete packet artifact was found in primary communication, lane1 retreat, Library, current conversation files, or targeted Drive search. Do not count complete.

C. LUNA_PRIOR_PACKET_LOCATED_REVIEW_PENDING = 74 - EA-101..174 Use existing LUNA-RESERVE prior packets as PRIOR_WORK. Do not re-research from zero.

D. LUNA_LOCATION_AUDIT_GAP = 38 - EA-175..212 Requires explicit location audit; do not silently classify NOT_LOCATED.

E. LUNA_PRESEARCH_NOT_LOCATED = 87 - EA-213..218 - EA-220..300 Retain NOT_LOCATED unless a uniquely attributable prior artifact is actually found.

F. LUNA_REVIEW_COMPLETE = 1 - EA-219

COUNT_CHECK: 147 + 52 + 74 + 38 + 87 + 1 = 399.

TRUE_DUPLICATE_OR_RESEARCH_REDO: - EA-001: later 2026-09-25 rerun duplicated existing canonical research. - EA-017: two complete canonical runs. - EA-019: two complete canonical runs. - EA-076: later 2026-09-25 rerun duplicated existing canonical research. - EA-301: later rerun duplicated earlier completed research. - EA-302..305: 2026-09-25 Library runs duplicated earlier retreat packets. - EA-343: two full research runs; count once, later is supplemental/duplicate.

PROVISIONAL_WRONG_TOPIC_SUPERSEDED: - EA-313: provisional wrong-topic Library packet superseded by ledger-verified retreat packet. - EA-314: provisional wrong-topic Library packet superseded by ledger-verified retreat packet. - EA-316: provisional wrong-topic Library packet superseded by ledger-verified retreat packet. - EA-315: earlier Library packet superseded for inventory authority by later ledger-verified retreat packet on same topic.

STATE_EVOLUTION_NOT_DUPLICATE: - EA-219: earlier NOT_LOCATED state superseded by later formal SUPPLEMENTED review.

RUN_TYPE: MANUAL_HIGH_CONFIDENCE_SHELF_INVENTORY

EA-001..EA-399 SOURCE_UNION: original ledger + primary research communication + lane1 retreat document + Library packet artifacts LEDGER_INTEGRITY: EA-001..EA-399 contiguous; ledger numbering gaps = 0.

A. NORMAL_RESEARCH_COMPLETE = 152 - EA-001..039 - EA-042 - EA-046..100 - EA-301..357 Notes: - EA-037 is Library rescue completion. - EA-038, EA-039, EA-042 are rescued into lane1 retreat and remain primary-canonical sync pending. - EA-301..352 are complete by retreat/Library union even where primary canonical synchronization is pending. - EA-353..357 are verified Library rescue packets with all required Evidence Packet fields; SAVE_STATUS=SYNC_PENDING.

B. NORMAL_TRUE_GAP = 47 - EA-040..041 - EA-043..045 - EA-358..399 Claim-only/no-packet correction: - EA-040 and EA-041 were previously claimed complete in chat, but no complete packet artifact is present in the primary communication, lane1 retreat, Library, or targeted Drive search. They remain TRUE_GAP. Lowest normal true gap: EA-040. Forward cursor: EA-358. Backfill queue is separate from forward cursor and must never cause silent rewind.

C. LUNA_PRIOR_PACKET_LOCATED_REVIEW_PENDING = 74 - EA-101..174 Canonical LUNA-RESERVE prior packets exist and must be used as PRIOR_WORK. Do not re-research from zero. The later EA-101..106 LUNA_PRESEARCH_NOT_LOCATED record is superseded by the earlier canonical prior artifacts.

D. LUNA_LOCATION_AUDIT_GAP = 38 - EA-175..212 No formal location-audit result is established. Do not silently classify as NOT_LOCATED.

E. LUNA_PRESEARCH_NOT_LOCATED = 87 - EA-213..218 - EA-220..300 These have explicit location-audit records. Search failure is not proof of nonexistence; retain NOT_LOCATED until a uniquely attributable Luna artifact is found.

F. LUNA_REVIEW_COMPLETE = 1 - EA-219 Formal review supersedes its earlier NOT_LOCATED state.

COUNT_CHECK: 152 + 47 + 74 + 38 + 87 + 1 = 399.

TRUE_DUPLICATE_OR_RESEARCH_REDO: - EA-001: later 2026-09-25 rerun duplicated existing canonical research. - EA-017: two complete canonical runs. - EA-019: two complete canonical runs. - EA-076: later 2026-09-25 rerun duplicated existing canonical research. - EA-301: later rerun duplicated earlier completed research. - EA-302..305: later Library reruns duplicated earlier retreat packets. - EA-343: two full research runs; count once. - EA-353: two complete Library rescue packets (2026-09-26 01:18 and 02:21 JST); count once. The second run is duplicate/supplemental and MUST NOT advance completion twice.

PROVISIONAL_WRONG_TOPIC_SUPERSEDED: - EA-313: provisional wrong-topic Library packet superseded by ledger-verified retreat packet. - EA-314: provisional wrong-topic Library packet superseded by ledger-verified retreat packet. - EA-316: provisional wrong-topic Library packet superseded by ledger-verified retreat packet. - EA-315: earlier Library packet superseded for inventory authority by later ledger-verified retreat packet on the same topic.

STATE_EVOLUTION_NOT_DUPLICATE: - EA-219: earlier NOT_LOCATED -> later formal SUPPLEMENTED review.

Agent Registry/Catalog is inventory/discovery/governance/lifecycle, not runtime identity, authorization, deployment health, entitlement, or measured capability. Preserve A2A Agent Card scope; do not claim A2A standardizes a curated enterprise registry API. Preserve provider volatility and every OPEN_UNKNOWN. Currentness recheck recorded by Web audit for A2A Agent Card, Google Cloud Agent Registry, and Microsoft Agent 365 registry.