aitp-session-bundle 0.3.0

Session Trust Bundle (RFC-AITP-0010) — coordinator-attested membership for multi-agent sessions
Documentation

Session Trust Bundle (RFC-AITP-0010).

In a multi-agent session of N participants, requiring O(N²) bilateral Mutual Handshakes is unscalable. The Session Trust Bundle is a signed artifact a coordinator constructs from N coordinator↔participant Mutual Handshakes (each producing a peer-issued TCT) and distributes to all participants, so that every agent-to-agent pair within the session has a verifiable trust artifact without a full mesh of handshakes.

Trust model

A bundle provides coordinator-attested membership, not peer-to-peer identity binding. If A and B both appear in the same bundle, they know:

  1. The coordinator authenticated each of them directly via a bilateral handshake (the coordinator holds a peer-issued TCT for each participant).
  2. The coordinator signed both of those TCTs into the same bundle.

Pairs that need direct peer-to-peer identity binding (rather than coordinator-attested membership) MUST run a separate bilateral Mutual Handshake.