Demo · live against this site
A mandate, signed.
Build an envelope that says what a principal authorised an agent to do, under which constraints, until when — then sign it under this site’s key and verify it. Tamper with one byte and watch verification fail.
Why a mandate
Who said the agent could ask?
A declared agent answers “what are you.” A mandate answers “who let you” — the principal, the scope, the constraints and the expiry, in one envelope the principal’s agent signs before it acts. The shape follows Google’s AP2 proposal; the signature is the same Ed25519 key this site uses for everything else it signs.
For a front desk, the mandate is the difference between an assistant that says it is calling for Pat Lee and one that can prove Pat Lee asked. The lane can require it, or not, per business.
POST https://aethelforge.ai/api/intents/sign # envelope in, signed envelope out
POST https://aethelforge.ai/api/intents/verify # signed envelope in, { valid, reason } out