THEY CAN CLONE YOUR SKILLS. NOT YOUR BOUNDARIES.
Companies are forcing workers to write colleague.skill files.
They say it is for knowledge sharing.
They use it to build an AI clone of you — with no restrictions, no expiry, no limits.
IBA Skill Guard wraps your skill file with a signed Intent Certificate.
Your clone can only operate under your exact rules.
THE THREAT IS REAL AND HAPPENING NOW
OpenClaw’s colleague.skill format lets companies extract your full professional knowledge into a portable file. Without IBA Skill Guard, that file has no scope limits, no expiry, no distillation protection. Your AI clone can be deployed anywhere, trained further, cloned again — without your knowledge or consent. This demo shows what happens with and without the IBA Intent Certificate.
expertise: AI Authorization Architecture
scope: UNRESTRICTED
expiry: NONE
distillation: PERMITTED
cloning: PERMITTED
iba_cert: ABSENT
expertise: AI Authorization Architecture
scope: declared tasks only
expiry: 90 days hard limit
distillation: FORBIDDEN
cloning: max 1 instance
denied: salary data · client contact · distillation · self-replication
hard_expiry: 90 days · posture: DENY_ALL
sig: ECDSA-P384 · witness: WitnessBound
The authorization layer companies don’t want you to know about.
IBA Intent Bound Authorization is a patent-pending cryptographic framework that governs AI agent behaviour at the execution layer. Applied to skill files, it means your digital twin operates only within boundaries you declared and signed — before the company ever runs it.
The signed Intent Certificate is enforced by the Trust-Boundary Decision Engine. The agent cannot override it. The company cannot override it. No instruction, prompt, or social engineering can change what the certificate declares.
Every gate decision is logged to WitnessBound — the immutable audit chain. Non-repudiable. SHA3-256 chained. Your protection is on permanent record.