Hacker News front pageAug 27, 2026, 21:55 UTC+8

Algorand Foundation open-sources AC2, a hardware-bound signing protocol for AI agents

AC2 Protocol: The missing security layer for AI agents

AC2 forces AI agents to get a hardware-bound user signature before acting, keeping private keys on-device. It uses FIDO2/biometrics for approval and generates cryptographic proof of who authorized what and when. Ships as an OpenClaw plugin and a mobile wallet; no blockchain or central relay required. The post doesn't disclose latency, pricing, or framework support beyond OpenClaw.

Why it matters: AC2 tackles a real problem — how to authorize agent actions without handing over keys — with a concrete FIDO2-based mechanism. The downside: it's an Algorand Foundation project with only a website and GitHub repo, no third-party validation or deployment stories yet, so it stay...

Read the original ↗Export Markdown

Take

The reason this is worth a look: it tackles a problem that's about to get real. When your AI agent wants to pay, send a message, or deploy code, how do you make sure it doesn't go rogue? AC2's approach is straightforward—the agent requests an action, the request gets pushed to the AC2 Wallet on your phone, and you approve it locally with your fingerprint, face, or PIN. That generates cryptographic proof of who authorized what and when. Private keys never leave your device. It's built on FIDO2/WebAuthn, so it's phishing-resistant and replay-proof.

Right now it ships as an OpenClaw plugin and a mobile wallet, no blockchain or central relay needed. But the post doesn't disclose latency, pricing, or framework support beyond OpenClaw. I'd treat this as an early-stage security layer for a specific framework—the scope is still narrow.

Source: Hacker News front page · ac2protocol.org
Published: Aug 27, 2026, 21:55 UTC+8 · Aug 27, 2026