Christian Nennemann
3a139dfc7e
Strategic work for IETF submission of draft-nennemann-act-01 and
draft-nennemann-wimse-ect-02:
Package restructure:
- move ACT and ECT refimpls to workspace/packages/{act,ect}/
- ietf-act and ietf-ect distribution names (sibling packages)
- cross-spec interop test plan (INTEROP-TEST-PLAN.md)
ACT draft -01 revisions:
- rename 'par' claim to 'pred' (align with ECT)
- rename 'Agent Compact Token' to 'Agent Context Token' (semantic
alignment with ECT family)
- add Applicability section (MCP, OpenAI, LangGraph, A2A, CrewAI)
- add DAG vs Linear Delegation Chains section (differentiator vs
txn-tokens-for-agents actchain, Agentic JWT, AIP/IBCTs)
- add Related Work: AIP, SentinelAgent, Agentic JWT, txn-tokens-for-agents,
HDP, SCITT-AI-agent-execution
- pin SCITT arch to -22, note AUTH48 status
Outreach drafts:
- Emirdag liaison email (SCITT-AI coordination)
- OAuth ML response on txn-tokens-for-agents-06
Strategy document:
- STRATEGY.md with phased action plan, risk register, timeline
Submodule:
- update workspace/drafts/ietf-wimse-ect pointer to -02 commit
120 lines
2.5 KiB
Python
120 lines
2.5 KiB
Python
"""Agent Context Token (ACT) — Reference Implementation.
|
|
|
|
A JWT-based format for autonomous AI agents that unifies authorization
|
|
and execution accountability in a single token lifecycle.
|
|
|
|
Reference: draft-nennemann-act-01.
|
|
"""
|
|
|
|
from .errors import (
|
|
ACTAudienceMismatchError,
|
|
ACTCapabilityError,
|
|
ACTDAGError,
|
|
ACTDelegationError,
|
|
ACTError,
|
|
ACTExpiredError,
|
|
ACTKeyResolutionError,
|
|
ACTLedgerImmutabilityError,
|
|
ACTPhaseError,
|
|
ACTPrivilegeEscalationError,
|
|
ACTSignatureError,
|
|
ACTValidationError,
|
|
)
|
|
from .token import (
|
|
ACTMandate,
|
|
ACTRecord,
|
|
Capability,
|
|
Delegation,
|
|
DelegationEntry,
|
|
ErrorClaim,
|
|
Oversight,
|
|
TaskClaim,
|
|
decode_jws,
|
|
encode_jws,
|
|
parse_token,
|
|
)
|
|
from .crypto import (
|
|
ACTKeyResolver,
|
|
KeyRegistry,
|
|
PublicKey,
|
|
PrivateKey,
|
|
X509TrustStore,
|
|
b64url_sha256,
|
|
compute_sha256,
|
|
did_key_from_ed25519,
|
|
generate_ed25519_keypair,
|
|
generate_p256_keypair,
|
|
resolve_did_key,
|
|
sign,
|
|
verify,
|
|
)
|
|
from .lifecycle import transition_to_record
|
|
from .delegation import (
|
|
create_delegated_mandate,
|
|
verify_capability_subset,
|
|
verify_delegation_chain,
|
|
)
|
|
from .dag import validate_dag, ACTStore
|
|
from .ledger import ACTLedger
|
|
from .verify import ACTVerifier
|
|
from .vectors import generate_vectors, validate_vectors
|
|
|
|
__all__ = [
|
|
# Errors
|
|
"ACTError",
|
|
"ACTValidationError",
|
|
"ACTSignatureError",
|
|
"ACTExpiredError",
|
|
"ACTAudienceMismatchError",
|
|
"ACTCapabilityError",
|
|
"ACTDelegationError",
|
|
"ACTDAGError",
|
|
"ACTPhaseError",
|
|
"ACTKeyResolutionError",
|
|
"ACTLedgerImmutabilityError",
|
|
"ACTPrivilegeEscalationError",
|
|
# Token structures
|
|
"ACTMandate",
|
|
"ACTRecord",
|
|
"TaskClaim",
|
|
"Capability",
|
|
"Delegation",
|
|
"DelegationEntry",
|
|
"Oversight",
|
|
"ErrorClaim",
|
|
# Token serialization
|
|
"encode_jws",
|
|
"decode_jws",
|
|
"parse_token",
|
|
# Crypto
|
|
"generate_ed25519_keypair",
|
|
"generate_p256_keypair",
|
|
"sign",
|
|
"verify",
|
|
"compute_sha256",
|
|
"b64url_sha256",
|
|
"resolve_did_key",
|
|
"did_key_from_ed25519",
|
|
"KeyRegistry",
|
|
"X509TrustStore",
|
|
"ACTKeyResolver",
|
|
"PublicKey",
|
|
"PrivateKey",
|
|
# Lifecycle
|
|
"transition_to_record",
|
|
# Delegation
|
|
"create_delegated_mandate",
|
|
"verify_capability_subset",
|
|
"verify_delegation_chain",
|
|
# DAG
|
|
"validate_dag",
|
|
"ACTStore",
|
|
# Ledger
|
|
"ACTLedger",
|
|
# Verify
|
|
"ACTVerifier",
|
|
# Vectors
|
|
"generate_vectors",
|
|
"validate_vectors",
|
|
]
|