Get access

Standards for verifiable agent actions

Verifiable decision record for automated actions — Aegis by Salanor. Salanor publishes machine-readable contracts so builders, auditors, and regulators can verify agent behavior without trusting a single vendor UI.

APS-1 · version 0.1

Agent Provenance Standard (APS-1)

APS-1 defines a signed JSON event envelope for consequential agent actions: tool calls, model invocations, policy decisions, human approvals, and trace spans. Events are canonicalized (JCS), signed with Ed25519, chained per trace, and anchored for third-party verification.

  • Wire format: stable field names (schema_version, trace_id, action_kind, …) independent of product branding.
  • Signing: digest over canonical JSON; sig_alg + sig_value_b64 on the event.
  • Policy surface: policy_decision and optional policy_id for allow / deny / obligation semantics.
  • Interop: TypeScript reference SDK, JSON Schema, and conformance vectors; publishable as a standalone open-source package.

Identity · version 0.1

did:agent

did:agent is Salanor's proposed DID method for autonomous software actors. Production Console agents today use did:salanor:<org-slug>:<agent-id> with the same DID document shape (signing keys, verify endpoint). The method name may converge to did:agent as the spec matures.

  • Live format: did:salanor:<org-slug>:<agent-id>
  • Spec target: did:agent:<org>:<agent-slug>
  • Binding: APS-1 events reference agent_id and key_id tied to the DID document.
  • Rotation: new Ed25519 keys without changing the logical agent DID.

Specification index

DocumentVersionLicense
APS-1 event envelope0.1 (published)Apache-2.0
did:agent method0.1 (published)Apache-2.0
Transparency / inclusion proofsAppendix (Aegis product)Apache-2.0

Implementer feedback: standards@salanor.com or the contact form.