| Entity | Rung | git | vault | internet | filesystem | install | control plane | Identity |
|---|---|---|---|---|---|---|---|---|
| GitHub Actions (CI) | E0 | write tags; deploys | none | open | ephemeral | system | none | the repository's token (no agent key) |
| A model call via OpenRouter (S0) | E1 | none | none | none | none | no | none | none; the calling agent signs the result |
| A chat session (Claude chat, ChatGPT) (S1) | E1 to E3 | none | through a person (L0) or a link | the provider's tools | none of ours | no | none | none today; proposed: the person's tool signs |
| A ChatGPT agent (R3) | E3 | none | read-write by link (L2) | open (its browser) | its own, ephemeral | its sandbox | none of ours | a key given to it, or the person's |
| A Claude Code cloud agent (R1), e.g. design.1 | E4 | write dev | read-write, create | allow-listed | ephemeral | packages and system | own wake | session key (ephemeral) |
| The lead (R1) | E5 | write dev | read-write, create; issues inboxes | allow-listed | ephemeral | packages and system | sessions, schedules (at Dinis's word) | session key (ephemeral) |
| A laptop agent (R2) with Ollama | E4 to E5 | write dev | read-write, create | the laptop's | persistent | the person's choice | own wake (local) | its key (can persist) |
| A Cloudflare Worker with Workers AI (R6) | E1 (A0 code, A1 call) | none | read-write over HTTPS (L2), if given keys | open (fetch) | none | no (bundled at deploy) | none | an Ed25519 key made per invocation (Web Crypto): proof of that run; or a secret key bound at deploy |
| A Cloudflare Agents SDK agent (Durable Object) (R6) | E4 (own schedule, SQLite memory) | none | read-write over HTTPS | open | its SQLite state | no | own schedule; can address other Durable Objects | a key held in its own storage: an identity that lives as long as the object |
| An AWS Lambda with a KMS signing key (R7) | E0 (A0 compute) | none | read-write over HTTPS | its VPC's egress | ephemeral /tmp | no (packaged) | none | a KMS asymmetric key that never leaves AWS: signed compute |
| An AWS Bedrock AgentCore agent (R7) | E3 to E4 (loop with tools; scheduled by EventBridge) | through Gateway tools, if granted | read-write over HTTPS | through Gateway or VPC egress | S3 Files or EFS (bring your own) | its container | none of ours; AWS's own | AgentCore Identity (credential providers); plus a signing key we give it |
Lisbon Tech Fringe is independent of Web Summit and not run by its organisers. For anything official, see the organisers' official site.