agent-passport

Enforcement and accountability layer for AI agents. Bring your own identity (did:key, did:web, SPIFFE, OAuth, did:aps). Gateway enforcement boundary, monotonic narrowing, cascade revocation, spending controls, data lifecycle, observation governance (telemetry scopes, derivation rights, behavioral memory). Use when agents need scoped delegation, trust scoring, constraint enforcement, or cryptographic audit trails. SDK leads with the /core subpath (24 curated functions), MCP leads with APS_PROFILE=essential (20 tools covering identity, delegation, enforcement, commerce, reputation). 4,098 tests. 8 framework adapters: Stripe, Composio, IBAC/Cedar, LangChain, CrewAI, MCP, A2A, Gonka. Full surface area (107 modules, 150 MCP tools) still available under APS_PROFILE=full and the root import. SDK 3.3.1 on npm adds the Delegated Action Evidence release: bilateral pair reconciliation with five mismatch classes, verifier-side revocation observation receipts under a stated freshness contract, Merkle-rooted evidence bundles with a per-axis claim-state report (verify-bundle), spec 4.1 action_ref canonicalization validated by cross-language vectors, and jurisdiction selection records that surface pack conflicts, on top of evidentiary type safety, Wave 1 accountability, Instruction Provenance Receipt, and bilateral receipts.