Module identity 

Structs

AgentId

AgentSigner

ClientNonceManager

Envelope

Event

LiveWriteOptions

MemoryNonceStore

NonceRecord

RequestAuthContext

RequestBinding

RequestJwtClaims

RequestJwtHeader

Constants

AGENT_ID_PREFIX

DEFAULT_LIVE_WRITE_WINDOW_MS

DEFAULT_NONCE_TTL_MS

DEFAULT_REQUEST_JWT_TTL_SECS

MAX_NONCE_HEADER

MAX_SAFE_NONCE

Traits

NonceStore

Functions

canonical_event_bytes

event_hash

event_hash_bytes

service_origin

Derives the request JWT aud from a request URL: the service origin — scheme, host, and non-default port, with no path (Agent Identity Section 8).

sign_event

sign_event_hash

Signs a precomputed 32-byte event hash. Signing a digest supplied by another component without seeing the event it commits to (blind signing) is NOT RECOMMENDED: actor and all event content are inside the digest, so a blind signer can be tricked into signing arbitrary events attributed to its key. Prefer sign_event, which canonicalizes and hashes the event.

unix_ms

unix_secs

validate_nonce

verify_envelope

verify_event_hash

verify_event_hash_signature

verify_live_envelope

verify_request_jwt

verify_signature

verify_timestamp