Executive Summary (2026-10-15)

Bottom line: The market keeps consolidating around agent authority infrastructure: identity, scoped delegation, gateway/MCP enforcement, instant revocation, signed receipts, audit, transport, commerce, compliance, and sovereign compute. This cycle’s headline: Bindu posted its first star decline since tracking began (10076→10058★, -18) with no repo push since 2026-09-06 — six consecutive weeks without a commit — though forks still climbed 669→670. Agent-Safe Pipeline’s spike flattened (687→688★, +1) after last cycle’s +98; the repositioned installable-gateway description holds. AgentConnect’s primary language shifted Python→Rust (flat at 352★, pushed 2026-10-14) — the ANP implementation path is being actively reworked. Attestix resumed pushes (2026-10-15) but stayed flat at 874★; the unverified-traction read stands. MolTrust remains unchanged on every live surface for a fourth consecutive cycle (API v2.5, pricing, AAE -02). Soulverse’s named npm packages are 404 for a twelfth consecutive week. IETF drafts unchanged (AAE -02, APS -04, ANS -00). No new entrant above the profile bar (all 0★).

Top Signals

  1. Bindu 10076→10058★ (-18) — first star decline on record, and no repo push since 2026-09-06 (sixth consecutive week without a commit); forks still climbed 669→670. Star accumulation has now fully decoupled from development cadence, and the accumulation itself has reversed for the first time.
  2. Agent-Safe Pipeline 687→688★ (+1) — last cycle’s +98 spike flattened immediately; description remains the installable execution-authority gateway (Homebrew/Linux/Docker/Helm); pushed 2026-10-13.
  3. AgentConnect flat at 352★, but primary language shifted Python→Rust (pushed 2026-10-14) — the ANP SDK is being actively reworked; DID-WBA remains an active compatibility/competition surface.
  4. Attestix flat at 874★, pushed 2026-10-15 — resumed commits after a pause since 2026-10-01; the +857 spike is still not compounding. Unverified-traction read stands.
  5. ANP 1444→1450★ (pushed 2026-10-15); ANS 43★ / registry 33★ (both pushed 2026-10-15); APS flat at 49★ (pushed 2026-10-15); IETF drafts unchanged (AAE -02, APS -04, ANS -00).
  6. Small declines in the tail: SIQ 51→50★, AIP 15→14★, Hedera did-method 28→27★ / did-sdk-java 37→36★. AgenticMail 236→237★ (pushed 2026-10-14).
  7. decern flat at 13★ (pushed 2026-10-14); Grantex flat at 33★ (pushed 2026-10-15); Motebit, Kestrel, Urbit (3622/80) all pushed 2026-10-14/15.
  8. Chancery flat at 26★, no push since 2026-07-21 — tenth consecutive stalled-push cycle (still inactive).
  9. MolTrust re-checked live — unchanged on every surface for a fourth consecutive cycle: API v2.5 healthy (2026-10-15 17:24 UTC), did:web resolves, homepage meta unchanged, /pricing still 301→/pricing/→403, /pricing.html still 200 with pricing re-verified, Lightning still roadmap. Its public repo MoltyCel/moltrust-api pushed 2026-10-15 (flat at 4★).
  10. Soulverse’s named npm SDK packages still 404 as of 2026-10-15 (twelfth consecutive weekly check); @nexionplatform/sdk still 404. Brochure-stage institutional trust-protocol signal, not a verified decentralized DID root.
  11. Discovery sweep: no new entrant above the profile bar (all 0★). Signal-only: harshittDEV/ScopeLock-AI (agent authorization firewall), gatekeeper-os/private-auth (Semaphore proofs + Ethereum permission registry), m7mdd77/threshold-decision-engine (execution-time rechecks + sandbox receipts) — the authorization-boundary cluster keeps spawning zero-traction entrants.
  12. Archon itself: flat at 6★ (pushed 2026-10-14).

What This Means For Archon

  • Archon should be described as the sovereign root of authority for delegated agent action, not merely as a DID stack.
  • Bindu’s first star decline, on top of six weeks without a commit, weakens the “fastest-moving competitor” framing materially — but the platform risk is unchanged: 10k+ stars, DX wedge, A2A/x402 packaging. The collaboration story (Bindu app rail + did:cid root authority) is now easier to tell, not harder: momentum has stalled while the packaging lead persists.
  • Agent-Safe Pipeline’s flattening (+1 after +98) suggests last cycle’s spike was launch-window attention, not compounding adoption. Keep it as the authorization-boundary benchmark; the structural counter is unchanged (verdicts rented from one operator’s closed service vs. portable did:cid + VC authority).
  • AgentConnect’s Python→Rust shift is worth watching — implementation churn in the ANP SDK could change the DID-WBA compatibility surface; re-read its README next cycle.
  • MolTrust has been quiet on live surfaces for four consecutive cycles. The structural counter (operator-issued trust vs. verifier-independent evidence) needs no update.
  • The next demo should prove delegated authority and receipts. Example: controller grants capability → agent acts through an MCP gateway or paid API → verifier checks credential → signed receipt records allow/deny/execution/payment.

Current Snapshot

Project Stars Role Current read
Bindu 10058 Identity + A2A + auth + payments platform First star decline (-18); no repo push since 2026-09-06 (sixth week); forks 669→670; did:bindu appears platform-administered, not a decentralized root of authority
Urbit 3622 / 80 Personal server OS + P2P network + Urbit ID High-traction protocol/substrate incumbent; not W3C DID/VC-native but important sovereign-compute pressure
ANP 1450 Open agent communication protocol suite High-visibility protocol/spec leader
Attestix 874 Compliance + credentials + MCP ⚠️ Spike still not compounding (flat at 874★; pushed 2026-10-15) — treat as noise unless it moves again
Agent-Safe Pipeline 688 Authorization boundary / execution gating Spike flattened (+1); installable execution-authority gateway (Homebrew/Docker/Helm); decision authority is a closed hosted service
AgentConnect 352 ANP SDK / DID-WBA auth Primary language shifted Python→Rust; pushed 2026-10-14
AgenticMail 237 Email/SMS/phone-call infra Strongest adjacent transport traction
MolTrust N/A Commercial trust infrastructure (identity, VC, reputation, mandates, audit) Most mature centralized commercial rival; fourth consecutive quiet live-surface cycle (API, pricing, AAE -02 all unchanged)
SIQ Agent Security 50 Agent/skill runtime authorization + enterprise control plane 51→50★ (-1); Ed25519 intent/receipt binding; pushed 2026-10-09
Agent Passport System 49 Delegation enforcement + signed receipts Direct authority/receipt benchmark; flat at 49★, pushed 2026-10-15; IETF draft -04 (2026-09-28)
decern 13 Deterministic authorization kernel + tamper-evident ledger Flat at 13★, pushed 2026-10-14
Grantex 33 Delegated auth + commerce audit High-signal authorization/commercial-action layer; flat at 33★, pushed 2026-10-15
Chancery 26 Agent IdP + MCP enforcement Inactive: flat at 26★, no commit since 2026-07-21 (tenth stalled-push cycle)
AgentValet 2 IGA + credential governance + MCP proxy Flat at 2★; enterprise governance benchmark: AIMS, SPIFFE, AuthZEN, CIBA
Agent Name Service (ANS) 43 / 33 Naming registry + transparency log + trust index IETF-draft registry/SCITT-receipt pressure nearest Archon’s registry layer; CA/DNS-anchored, not sovereign
AgentNexus 10 DID communication + workflow substrate Collaboration/workflow watchlist item
Kestrel Sovereign 8 Sovereign agent framework Adjacent pressure on portable identity + memory + governance narrative; pushed 2026-10-15
Hedera / did:hedera 36 / 27 / 69 DID method + agent/payment/audit substrate Direct DID competitor and high-signal adjacent enterprise rail; Agent Kit pushed 2026-10-14
Soulverse N/A Agent governance + pre-execution validation Institutional trust-protocol pressure; public SDK packages still 404 (twelfth week); did:soul decentralization still future-considered
AIP 14 Identity + trust + messaging Partial overlap; 15→14★ (-1)
clawdentity 9 Messaging + identity fabric Closest philosophical rival, slower recent movement
Motebit 7 Sovereign runtime + receipts Early but strategically relevant; pushed 2026-10-14
HelixID 8 DID/VC auth layer Low traction, standards-aligned framing
Agentic Airlock 2 OAuth trust/compliance layer OAuth/compliance watchlist item
Credat 2 Scoped credentials SDK Practical authorization/delegation benchmark
IDProva 1 Enterprise identity + audit receipts Enterprise auditability angle
A2AL 1 P2P discovery/networking Early decentralized communication watchlist
Chorus 1 P2P encrypted communication Early decentralized messaging watchlist
payelink 2 DID SDK Narrow identity component
agent-did 0 DID + VC toolkit Direct standards competitor, low traction
agent-identity-hub N/A Platform/orchestration Still unavailable / 404

Immediate Priorities

  1. Rewrite Archon’s public one-liner around sovereign root authority + delegated action + MCP/API enforcement + signed receipts + payment-aware settlement.
  2. Publish direct comparisons covering did:cid vs APS gateway enforcement, did:bindu, Urbit ID/Azimuth, did:wba, did:hedera, and enterprise IdP/IGA control planes such as AgentValet — including installable gateway verdict services (Agent-Safe Pipeline, SIQ Agent Security) alongside kernels (decern).
  3. Build a small demo around capability issuance, delegated action, MCP gateway/service enforcement, Soulverse-style pre-execution validation, and verifiable receipt.
  4. Treat APS, Agent-Safe Pipeline, SIQ Agent Security, AgentValet, Soulverse, and Bindu as the clearest near-term authority/platform bridge narratives; AgentNexus and Urbit as workflow/sovereign-compute bridge narratives; AgenticMail as transport; Hedera HCS/x402 as optional audit/payment; Airlock/Grantex as enterprise authorization/compliance patterns.
  5. Track Bindu, APS, Agent-Safe Pipeline, SIQ Agent Security, decern, AgentValet, ANS, Soulverse, MolTrust, AgentNexus, Kestrel, Airlock, AgenticMail, Hedera, Grantex, Attestix, Motebit, Credat, HelixID, IDProva, A2AL, Chorus, and Digital Bazaar during the next sweep.

Full details, matrices, and strategic framing live in the main report. Change notes for this sweep are in the 2026-10-15 refresh.