Thank you, @zexoverz — this is excellent work. This composition provides a strong, concrete example of how ERC-8354 can support confidential agent actions while preserving verifiability and accountability. It also meaningfully expands the range of workflows that ERC-8301 can support beyond fully transparent execution.
The confidential action and policy can remain private, while their authorization, binding to the workflow, agent, run and reply, and the resulting settlement remain provable and auditable on-chain. The optional ERC-8301 × ERC-8354 composition profile is now concretely specified and tested in IConfidentialStep.sol, with the complete design and tests introduced through agent-ercs #17.
This is a thoughtful and valuable extension, and we hope it becomes a useful foundation for privacy-preserving, provable and traceable agent workflows across the broader agent ERC ecosystem. Thank you again for the careful work and contribution!