A shared agent serves several parties at once and is owned by none of them. What it commits to is signed, so anyone can check it without trusting the server.