SADAR
 -
White Paper
April 29, 2026

What is SADAR?

SADAR allows agents to discover other agents, tools, and resources such as data not by probabilistically choosing from a pre-defined list based on semantic similarity but through deterministic matching of capabilities define in industry-standard terminology defining what the capability provides, the data it expects/produces, and non-functional requirements for Operations, Licensing, Costs, and Compliance.

The artificial intelligence landscape is undergoing a massive paradigm shift: we are moving from models that simply answer questions to autonomous agents that act. The promise of Agentic AI is immense, offering systems that can autonomously observe, plan, discover resources, and execute complex business workflows across enterprise boundaries.

However, there is a stark discrepancy in current adoption rates. While general AI adoption within organizations has reached 88%, the scaled deployment of autonomous AI agents remains stuck in the single digits—less than 10% across nearly all enterprise functions.

This gap does not exist because the models lack intelligence. The gap exists because enterprises are colliding with a massive infrastructure and governance crisis. Traditional enterprise controls were built for deterministic systems where developers knew exactly what ran, when it ran, who could run it, and for what purpose. Agentic AI breaks all of these assumptions simultaneously by operating probabilistically, inferring needs and constructing execution chains dynamically at runtime.

To safely deploy autonomous agents into consequential business environments, organizations require a new foundational infrastructure. This is the exact problem the Semantic Agent Discovery and Attribution Registry (SADAR) solves.

The Governance Crisis in Agentic AI

Today’s agentic frameworks are built for speed and experimentation, not enterprise governance. When an agent seeks to discover a tool or another agent, it typically relies on probabilistic, free-form text matching. An agent guesses its needs and attempts to match that against a brief prose description of a tool, which is analogous to hiring an employee based on a three-line job posting without an interview.

This brittle approach introduces severe, structural failures:

  • No Shared Ontology or Semantic Grounding: There is no standard vocabulary for capabilities. Furthermore, data semantics are highly fragile. A "Patient" means something entirely different in a clinical scheduling system versus a billing system. Without strict semantic grounding, data is silently misinterpreted by the agent, propagating errors downstream.
  • Loss of Originating Authority: Every enterprise workflow begins with a human or system trigger carrying a specific scope of authority. But when one AI agent discovers and delegates a task to a second or third agent, that original human intent and authorization are lost. Downstream services only see the immediate calling agent's identity, completely eliminating accountability. Merely assigning an agent a corporate identity (like in Azure Entra ID) does not solve this, because identity only proves who the agent is, not what it is trying to accomplish or on whose authority.
  • Business Context and Sequencing Failures: Agents lack an inherent understanding of business process rules. Without explicit boundaries, an agent might silently execute tasks out of sequence, such as approving an invoice before performing a required credit check.
  • Invisible Non-Functional Requirements (NFRs): Functional fit is only half the requirement. To operate safely, an agent must also evaluate operational rate limits, SLA commitments, costs, and compliance frameworks (e.g., HIPAA, SOC 2, FedRAMP). In current frameworks, this vital metadata is completely invisible during the discovery phase.

What is SADAR?

SADAR (Semantic Agent Discovery and Attribution Registry) is an open-standard specification, licensed under Community Specification License 1.0, that defines how AI agents find, evaluate, and safely invoke other agents and tools.

Just as DNS and identity providers established the foundational trust required for the modern internet, SADAR provides the foundational trust layer for Agentic AI. SADAR is not a runtime proxy or a new orchestration framework; it is an open-standard discovery and governance directory.

The registry hosts machine-readable entries for functional capabilities, tools, data resources, business processes, and the participating entities themselves. Every capability registered in SADAR is backed by a publisher-signed manifest—a tamper-evident, cryptographic record defining exactly what the capability is, its semantic data contracts, its operational constraints, and the provider’s authentication endpoints.

The Value SADAR Enables

By acting as the definitive semantic trust layer, SADAR transforms agent discovery from a probabilistic guessing game into a deterministic, governed operation. It unlocks enterprise adoption through several key mechanisms:

1. Deterministic, Standards-Grounded Discovery

SADAR abandons ambiguous text descriptions. Instead, capabilities and data contracts are mapped explicitly to established industry standards like NAICS (industry classification), APQC PCF (business processes), and X12 or HL7 (data transactions). When a requesting agent searches the registry, it matches exact semantic contracts rather than hoping two independent prose fragments happen to overlap.

2. Enforceable Business Process Integrity

SADAR treats end-to-end business workflows as first-class registry entries. By explicitly declaring exactly where a capability fits within a standard business process, SADAR manifests define strict predecessors and successors. This deterministic mapping prevents out-of-sequence failures by ensuring an agent cannot invoke a tool until its required predecessor steps are confirmed complete.

3. Bilateral Matching of Non-Functional Requirements (NFRs)

SADAR elevates Non-Functional Requirements—such as costs, SLAs, payment methods, and regulatory compliance—to first-class discovery criteria. Discovery operates bidirectionally: a requesting agent can filter out capabilities that are too expensive or lack required SOC 2 or FedRAMP certifications. Conversely, a provider has a built-in right-of-refusal, restricting its visibility strictly to requestors that assert compatible regulatory postures. Compliance is verified before a connection is ever attempted.

4. Verifiable Identity and End-to-End Attribution

Through the use of the standardized searchAndInvoke tool and the SADAR Context Token (SCT), SADAR guarantees that every action taken by an agent is fully attributable. The SCT is a cryptographically signed token passed alongside standard authentication that preserves the human originator's identity, their authorized scope, and the specific business process context through an arbitrarily deep chain of agent delegations. Every autonomous decision is linked to a unique transaction instance ID, providing full enterprise explainability and auditability.

5. Secure First-Use Authorization

SADAR defines the exact mechanics for first-time interactions between previously unknown agents. Because OIDC authentication endpoints and public keys are embedded securely within the signed manifest, agents can negotiate credentials, verify licensing, and authorize payments directly. The registry facilitates the introduction, but sensitive runtime execution and data exchange happen entirely out-of-band directly between the agents.

Conclusion

The era of AI as a simple conversational assistant is maturing into an era of autonomous, multi-agent enterprise execution. However, the agentic use cases with the highest business value—financial operations, healthcare workflows, supply chain commitments—are precisely the areas where "the AI agent did it" is not an acceptable explanation to auditors, regulators, or customers.

Trustworthy AI is not a feature; it is the prerequisite for meaningful adoption. By providing semantic clarity, bilateral compliance matching, business process integrity, and cryptographic attribution, the SADAR Semantic Registry supplies the missing infrastructure required to bring autonomous agents out of the sandbox and into the enterprise.