Technical note
Agents Secure Binding
Verifier-side software for binding delegated Agent identity to the live session.
Direct-Agent v1.1.1 is supported; ASB v2.0.0-rc.2 is a prerelease. Release tags define shipped code; docs/SSOT.md describes the current profile.
Problem
Valid evidence can still describe the wrong interaction
A grant and session proof can each verify while referring to different Agents, tasks, or sessions.
Mechanism
Bind authority to the accepted session
The authority signs an Identity Grant stating the Agent's delegated authority and scope. The authorized Agent key signs a Session Binding Statement for that exact grant and session. The endpoint key authenticates the accepted TLS or exported-authenticator endpoint.
The verifier authenticates both signed objects, checks the binding against the accepted session and local policy, then records replay state before accepting the identity.
Implementation and verification
What exists today
The Go client integration includes JWT/JWS verification and session checks. CWT/COSE is covered by reference-adapter tests.
Negative tests cover replay, binding and key mismatches, grant substitution, local-policy checks, and cache misuse. The verification report records current coverage and remaining evaluation work.
ASB is an independent profile, not an adopted standard or a full protocol stack. Gateway deployments require separate route binding and runtime integration. Human-coordination and least-privilege work on the current branch remains experimental or preview; it is not included in v2.0.0-rc.2.