Production primitives

Built for autonomous systems

Six core primitives, mapped one-to-one against the controls your security and compliance teams will ask about on day one.

Cryptographically signed agent identity with explicit capability scope, deployment environment, and jurisdiction binding.

Real-time 0–1000 composite score blending behavioral history, capability drift, incident velocity, and recency signals.

Three-phase mutual verification — present, evaluate, attest — before any high-risk interaction is authorized.

Sub-60-second revocation propagation across every verification node globally. No stale cache, no grace period.

Tamper-evident, hash-chained log of every passport action, verification decision, and policy mutation.

Pre-mapped controls for NIST AI RMF 1.0, EU AI Act, SOC 2 Type II, and ISO 42001 in flight.

Platform principles

Every interaction re-verified. No long-lived bearer tokens, no implicit allow-lists.

Wire format and verification semantics are published. Build your own relying party in any language.

Capability scopes, risk thresholds, and approval routes versioned in your repo, signed on deploy.

Three seed passports, live verifications, audit feed. No credit card required.