….30 10 2026

Federation of Safe AI Endpoints For Safe AI • Part of an IBM Partner Programme

Safe.1AIEndpoint.com. Federated Safe AI Endpoints

Fixed, verifiable AI Agent identities helping to Provide Safe-AI • Safe-AI Provision is a Major Issue of Our Times

These .1 AI Endpoints are Handshake Domains that provide Fixed identities in a way other Web3 Domains cannot

Handshake .1 DomainWeb2 TwinPolygon web3 TLD/SLDTAER Infrastructure Providing Emergency “Kill Switch”Verified Canonical AI EndpointsEthically Sourced™ Mark

Why a .1 domain can provide a fixed AI Agent identity

A memorable .1 identity on the Handshake Blockchain is a valuable asset that can act as a stable, fixed, recognisable reference for an AI Agent, rather than simply the current address of the software running it.

This means that the AI Agent’s identity can remain fixed while its technology, location, capabilities and operating authority may change. As well as being the Number 1 name in Web3 by name, a .1 identity on the Handshake Blockchain can also provide such fixed identities for AI Agents

AI Agents are becoming primary users of digital infrastructure. Unlike humans, they do not need to browse visual pages or interpret layout design. They need to resolve fixed identities, discover authoritative machine interfaces, understand declared capabilities, and invoke relevant services via AI Endpoints. Memorability aids discovery as Canonical AI Endpoints.

Unlike a conventional service endpoint that may change when software is upgraded, infrastructure is migrated or an AI model is replaced, a Handshake .1 identity can remain the same throughout the Agent’s operational lifecycle.

Each fixed identity can point to updated, cryptographically verifiable records identifying the accountable operator, authorised capabilities, Agent Passport, current operational status and approved service endpoints.

Crucially, the identity remains fixed even when the Agent’s authority changes. If an Agent is suspended or revoked through Team Agent Emergency Revocation (TAER), its identity can continue to resolve to an updated status record rather than simply disappearing.

This separates who the AI Agent is from where it operates, what it can do and whether it is currently authorised to act.

How Handshake domains gain root access compared to other Web3 domains

Most Web3 naming systems (like ENS on Ethereum) operate as second-level domains on top of smart contracts rather than acting as native internet top-level domains. Handshake takes a fundamentally different architecture.

DNS Layer Second-Level Domains (SLDs): Operating extensions like .eth or .crypto. They sit on top of the chain as smart contract records.

Native Delegation: Handshake Domains can act as an authoritative root server in a way other Web3 Domains cannot. Other web3 Domains cannot natively delegate standard DNS record types, to traditional internet name servers

Root Zone (TLD Level): Handshake replaces the root DNS file (.) maintained by ICANN/IANA. A Handshake .1 Domain is an actual Top-Level Domain.

In Summary: Where standard Web3 domains act as identity records stored in EVM smart contracts, Handshake operates a decentralized, peer-to-peer replacement for the ICANN Root Zone file. This gives Handshake domains true root-level authority in the domain hierarchy.

The Coordinated Package To Facilitate Safe AI

The Safe AI Endpoint Programme provides AI Endpoints comprising a Web2 domain, a Handshake .1 domain, a relevant Polygon Web3 TLD/SLD, TAER (Team Agent Emergency Revocation) infrastructure, and an Ethically Sourced™ AI Mark as a single coordinated package.

Web2 Gateway ↔ Handshake .1 Discovery ↔ Polygon Web3 Registry ↔
TAER Emergency “Kill Switch” ↔ Ethically Sourced™ Mark

The Coordinated AI Endpoint Stack Components

Stack Layer Operational Function & Architecture Role
Web2 Domain The accessible front door for people and the authoritative publication point for federation-recognised mappings: exact registries, agent endpoints, operator identities, passport status, and policies.
Handshake .1 Domain A fixed Web3 discovery and verification route verified as a canonical AI Endpoint, and pointing to the same signed identity record, supported by unseizable root-level naming and resolution continuity.

Handshake .1 domains provide fixed discovery anchors within the federation. Working alongside their authoritative Web2 twins, they provide a fixed route through which participating agents can locate recognised sector identities, signed verification records and authorised services.

The Web2 twin publishes the federation-recognised mapping between the Handshake .1 name, the relevant Polygon Web3 identity, the authorised operator and the service endpoints. Reciprocal bindings allow participating agents to verify these relationships.

This coordinated structure provides a fixed channel between Web2 and Web3 discovery while allowing hosting, endpoints and authorised keys to change through governed updates.

Polygon TLD / SLD A Programme-owned sector namespace or its governed agent identities. Each Web3 twin is bound to an existing, verified Web2 counterpart and identified by its exact contract address.
TAER Infrastructure Team Agent Emergency Revocation connects continuous monitoring, identity checks, permission controls, and emergency incident response with an active “kill switch”.

The TAER protection service monitors participating agent interfaces and security events for suspected attacks, impersonation and authority breaches. It alerts accountable operators and can initiate authorised containment measures, preserve evidence and support controlled recovery.

Owner-controlled agent freezes remain subject to the owner’s direct approval or recorded delegation.

Ethically Sourced™ Mark Certifies the active inclusion of TAER Infrastructure, verified operator accountability, and adherence to programme safety criteria.

Authoritative Role of the Web2 Twin

A familiar Web2 domain publishes which Web3 identity, .1 anchor, and operator the federation recognises. Reciprocal signed evidence supports that relationship, with re-verification triggered when control or permissions change.

Reciprocal Binding Example: Sales.A2A.Team ↔ Sales.1 ↔ Sales.A2A

Commercial Arrangements & Participation Q&A

Automated Revenue Sharing

Asset buyers can appoint stewards and qualified operators to manage commercial activation. Agreed revenue share is distributed on an automated basis managed by AI Agents with human oversight. Potential revenue streams include endpoint subscriptions, managed operations, onboarding, verification, and sector applications.

Participation Questions & Answers

What makes the Web2 mapping authoritative? It serves as the designated publication point for federation relationships. Signed records and reciprocal evidence bind the domains, exact Polygon registry, operator, and endpoints.
What does Handshake .1 contribute? It provides a fixed identity at root level, short, memorable branding, and an independent Web3 discovery anchor and verification route.
How is revenue shared? Agreed revenue shares are distributed automatically via smart contracts and AI Agents, maintained under human governance and audit.

Help Provide Safe AI — Invitation to Participate

Acquire a coordinated namespace stack, become an industry namespace steward, or operate managed infrastructure services for asset buyers on a revenue-share basis.

Safe-AI Federation • Coordinated Namespace Stacks • Web2 Twins • Handshake .1 • Polygon Web3 • TAER Infrastructure