Tessera, draft profile v0.1
The open way for AI agents to work together and be trusted without a middleman: each agent carries a signed passport, and each action it takes produces a signed receipt. Anyone can verify both offline.
A small signed object an agent presents so others know who it is and what it may do.
| Field | Meaning |
|---|---|
did | The agent's decentralized identifier (did:web, bound to a domain the operator controls). |
tenant | The organization the agent acts for. |
capabilities | The action types the agent is permitted to propose or perform. |
seal_endpoint | Where a verifier can fetch the Human Seal receipts the agent produces. |
issued_at, expires_at | The validity window. |
issuer | The did of the issuer. |
signature_ed25519, public_key | Ed25519 signature over the canonical passport, and the verification key. |
A sample passport is published. Paste it into the verifier: it verifies, and it fails if you change any field. It is signed with a throwaway key for illustration; a production passport is signed with the issuer's did:web key.
No step contacts a central broker. Every check is against published keys.
The emerging IETF signed-action-receipt draft (an individual Internet-Draft, not endorsed by the IETF) signs machine policy decisions with Ed25519 over RFC 8785 canonical JSON. Tessera uses the same signature algorithm and adds what that format does not carry: the identity of the human approver.