AgentHalo
Your agent should carry your trust with it. AgentHalo brings identity, memory, permissions and consent together across devices, with a record of what an agent was allowed to do—and what it did.
I build software, platforms and tools for a world in which people and intelligent agents work together.
Much of that work begins with trust: who an agent is, what it may do, and how we know it did the right thing.
Two explorations in trust and accountability.
Your agent should carry your trust with it. AgentHalo brings identity, memory, permissions and consent together across devices, with a record of what an agent was allowed to do—and what it did.
A convincing answer is only a beginning. Truthseek puts an agent’s claims to the test, through an evaluation harness and a companion that brings that scrutiny into the editor.
Public platforms, tools and experiments.
User-owned models, data and runtime for a more sovereign AI stack.
A free CRM built to stay useful, open and available to everyone.
Deterministic simulation, evidence and release assurance for enterprise agents.
A public home for asking whether a site is ready for WebMCP.
Composable building blocks for agentic systems and workflows.
Local-first, self-hostable tools designed with privacy in mind.
An open-source agentic micro-drama production studio with evidence-gated releases.
An evaluation harness for testing the claims made by agents.
A companion for bringing claim evaluation into the editor.
Identity, memory, permissions and consent for an agent across devices.
A public experiment in verifiable proof and recognition.
A curated library for discovering reusable AI skills.
A working notebook of experiments built with Google AI Studio.
An open record of prototypes, ideas and working explorations.
A small public software experiment from the wider lab.
A few words on work that remains private.
Private systems for making revenue operations more trustworthy, traceable and easier to verify.
Private product work around user-owned models, data and runtime infrastructure.
Private infrastructure for agent policy, permissions, deployment and operational control.
Private tools for testing claims, preserving provenance and creating audit-ready records.
Private protocol and product work for safer transactions between people, agents and businesses.
Co-authored papers and contributions to shared foundations.
Discovery, capability verification and zero-trust collaboration for enterprise agents.
The infrastructure behind a globally addressable internet of agents.
An agent index built around verifiable identity and signed AgentFacts.
A foundational question about the architecture autonomous agents need.
A framework for assessing vulnerabilities in AI and agentic systems.
I’m Mahesh Lambe, a founder, engineer, researcher and angel investor in Palo Alto, California. I build software around a simple conviction: people should retain ownership of their data, their tools and the decisions made on their behalf.
For more than twenty years, I’ve worked on AI, CRM and cloud platforms for governments and global enterprises, including Microsoft, PIMCO and the NYPD. My public-sector work includes large-scale systems for more than 170 California state departments. That experience shapes my focus on reliability, accountability and freedom from vendor lock-in.
I’m the founder and CEO of Unify Dynamics, working across CRM, cloud and generative AI. I’ve founded four startups and, as an angel investor, backed more than 100 companies across AI, automation and enterprise software. Building companies and supporting other founders are both part of my work.
I’m a core contributor to MIT’s Project NANDA, exploring how agents discover one another, establish identity and collaborate across systems. I co-authored the four NANDA papers collected here, with Ramesh Raskar and collaborators, on agent naming, verified AgentFacts, adaptive resolution and Zero Trust Agentic Access.
I’m also a founding member, reviewer and contributor to the OWASP AI Vulnerability Scoring System, helping develop shared ways to assess security risks in AI and agentic systems.
My upstream proposals to WebMCP address browser-tool permissions and clearer tool-execution contracts.
My public work spans user-owned AI and local software with SovereignAI and Sovereign Suite; customer relationships with FreeCRM; agent identity and consent with AgentHalo; and evaluation with Truthseek. It also includes iswebmcp, Enterprise Agent Simulation Assurance, Lego Claw, OpenWood’s creative tools, and reusable agent skills.
Alongside that work, I build private systems for verified revenue, sovereign AI, enterprise agent control, evidence and agentic commerce. The common thread is making actions inspectable, permissions revocable and ownership meaningful.
Sharing what I learn has long been part of the practice. I was among the top five global MSDN contributors for five consecutive years. Today, that continues through open-source projects, technical essays and conference talks on agent registries, AgentFacts and the architecture of an open agentic web.
Notes from the work.
If our interests meet,
I’d be glad to hear from you.