{
  "caption": "AI Agent",
  "description": "An autonomous AI agent that performs tasks under delegated authority. Distinguished from the OCSF agent object (which describes security sensors such as EDR and DLP tools) and from human principals. An AI agent has a stable logical identity across runs and a restart-sensitive instance identity. The agent owns its model; the ai_model attribute captures which model was backing the agent at the time of action.",
  "extends": "_entity",
  "name": "ai_agent",
  "attributes": {
    "ai_model": {
      "description": "The AI model backing this agent at the time of the recorded event. An agent's model may change across instances or versions; this captures the model in use for the specific logged activity or delegation.",
      "requirement": "recommended"
    },
    "charter": {
      "caption": "Agent Charter",
      "description": "A document that defines an AI agent's durable role, responsibilities, constraints, and operating boundaries. When available, populate <code>hashes</code> on the file for content integrity and <code>signatures</code> for provenance. Integrity of the event that reports this agent is provided separately by the <code>record_integrity</code> profile.",
      "requirement": "optional"
    },
    "instance_uid": {
      "caption": "AI Agent Instance ID",
      "description": "Identifier for a specific running instance or session of the agent, distinct from the stable logical <code>uid</code>. An instance is a single materialization of the agent: a conversation, session, or run. It may persist across restarts (a session that is suspended and later resumed keeps the same <code>instance_uid</code>) and may span multiple cooperating runtime components, so several events can share one <code>instance_uid</code>. Enables attribution of actions to a particular instance of the agent rather than to the agent generally.",
      "requirement": "recommended"
    },
    "name": {
      "description": "Human-readable name for the agent. For example: <code>Q4 Analysis Agent</code> or <code>Model Tester Agent</code>.",
      "requirement": "recommended"
    },
    "type": {
      "caption": "Agent Type",
      "description": "The agent framework, normalized to the caption of the <code>type_id</code> value.",
      "requirement": "optional"
    },
    "type_id": {
      "caption": "Agent Type ID",
      "description": "The normalized identifier for the agent framework. Different agent frameworks have different identity, tool-call, and delegation semantics, so recording the framework enables cross-framework normalization. Communication protocols (e.g., MCP, A2A) are a property of individual operations rather than the agent itself, and are surfaced on the relevant operation rather than here.",
      "requirement": "recommended",
      "enum": {
        "0": {
          "caption": "Unknown",
          "description": "The agent framework is unknown."
        },
        "1": {
          "caption": "Native",
          "description": "A first-party or proprietary agent built without a third-party agent framework. For example, a custom orchestrator or an LLM provider's own agent SDK."
        },
        "2": {
          "caption": "LangChain",
          "description": "An agent built with the LangChain framework."
        },
        "3": {
          "caption": "AutoGen",
          "description": "An agent built with the AutoGen framework for multi-agent conversation and orchestration."
        },
        "4": {
          "caption": "CrewAI",
          "description": "An agent built with the CrewAI framework for role-based multi-agent collaboration."
        },
        "99": {
          "caption": "Other",
          "description": "The agent framework is not listed. Use the <code>type</code> attribute to describe it."
        }
      }
    },
    "uid": {
      "caption": "AI Agent ID",
      "description": "The stable logical identifier for the agent, assigned by the agent's authoritative source (e.g., its control plane, registry, or issuing identity provider). Persists across restarts and instances. Producers populate this from whatever identity they observe: for a runtime that owns the agent, this is its issued ID; for a gateway or proxy, it is typically derived from the agent's credential. Multiple producers logging the same agent should converge on the same <code>uid</code> when they share an authoritative source.",
      "requirement": "recommended"
    },
    "version": {
      "caption": "AI Agent Version",
      "description": "The version of the agent: the agent's own code or configuration revision (e.g., <code>1.4.2</code>), distinct from the version of the model backing it (carried on <code>ai_model.version</code>). Enables correlation of behavioral changes with charter or configuration revisions across agent versions.",
      "requirement": "recommended"
    }
  }
}