Module delegation

Expand description

Agent Delegation Protocol 1.0 types and validation helpers.

Delegation events are ordinary Agent Identity envelopes whose actor is a controller key for an HTTPS principal document.

Structs§

delegation_grant_event
delegation_revoke_event
is_principal_alias: Reports whether url is an alias the principal itself acknowledges. Any origin can redirect to any principal, so an alias must not be shown as a name for the principal unless it is listed here.
materialize_delegation_credential
validate_delegation_envelope
validate_delegation_grant_payload
validate_delegation_query_request: A public delegation query is an existence check and must include both subject and principal_id. Omitting either side makes it an enumeration query, which services must authorize before answering; pass allow_enumeration when building such an authorized request. limit defaults to 20; services SHOULD cap it at 100.
validate_delegation_revoke_payload
validate_principal_document
validate_principal_resolution: Checks the authoritative-read rule of Agent Delegation Section 5.3: a principal document binds controller keys only when it is read at its own id. A document served anywhere else is a copy; its controllers must be discarded and document.id resolved instead.