aitp-tct 0.3.0

Trust Context Token (TCT) issuance and verification for AITP
Documentation

Trust Context Token (TCT) — the canonical output of AITP.

A TCT is a signed, audience-bound, capability-scoped grant. Each peer holds the TCT issued by its counterpart in a Mutual Handshake.

In aitp/0.2 the TCT and its companion grant voucher are compact JWS strings (RFC-AITP-0001 §5.4.5): signatures cover the exact transmitted bytes, so any off-the-shelf JOSE library can verify them given only the issuer public key. The revocation snapshot (RFC-AITP-0008) is protocol-internal and stays JCS-signed.