Module token 

AI delegation tokens with dual signatures (ADR-023, refined by ADR-033).

Each token carries two Ed25519 signatures:

1. Delegator signature (human’s identity key) — proves authorization
2. Binding signature (stable delegation key per (human, AI)) — binds to the public key recorded in project.yaml under members[<human>].ai_delegations[<ai-member>].delegation_key.

Tokens are passed via --token flag or JOY_TOKEN env var to joy auth.

Structs

DelegationClaims

Claims encoded in a delegation token.

DelegationToken

A delegation token with dual signatures.

Functions

create_token

Create a delegation token with dual signatures.

decode_token

Decode a token from its portable string representation.

encode_token

Encode a token as a portable string (joy_t_<base64>).

is_token

Check if a string looks like a delegation token (has the joy_t_ prefix).

validate_token

Validate a delegation token against the delegator’s identity key and the stable delegation key recorded in project.yaml.