Agent Manifests
Standing capability grants.
Per-agent, KMS-signed declaration of what an agent is allowed to do — models, tools, permission modes, scope (allowed paths, denied paths), and subagent depth. Long-lived (~6 months). Bound to a run via the Runtime Binding at run open.
Signed
…
Draft
…
Revoked
…
Total
…
Loading…
Cryptographic spine
What each manifest commits to
- Two-stage promotion: drafts are reviewed under a 5-minute HMAC preview token, then KMS-signed in a separate call. The server refuses the promote if the canonical body drifted between preview and sign.
- Region-bound signing keys: US-region orgs sign with
kid_policy_us, EU withkid_policy_eu. Independently revocable from the controls-plane keys (kid_runtime_*) that sign Harness Manifests. - SI-2 anchor: every field in the signed body corresponds to a column on this row. Nothing invented at sign time.