Agent OS · Component · scoped-agent-identity
Scoped agent identity and authorization
What it does
Authenticate agent access, verify signed principals, bind actions to accounts, enforce tool scopes and audit requests.
Core pattern
Request identity verification + action scope limits
- Input
- Remote credentials and requested tool
- Output
- Authorized identity or rejection plus audit event
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| operation | string | authenticate | authenticate · authorize · scope_bundles · audit |
| principal | object | — | — |
| scopes | array | — | — |
| request_origin | — | — | — |
| session_ttl_seconds | integer | 3600 | 60–2592000 |
Maturity and limits
Scope profiles, signature validation, migrations and transport tests. Phase 2: source paths and implementation inspected statically; tests and external integrations were not executed. Maturity rates repository implementation, not a verified production deployment.
Apache-2.0 with NOTICE obligations; supplier content retains separate rights. Agent scopes, booking PII and trusted card/payment flows require isolation.
1 sentence citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- Travel & hotelsSource-supported industry
For work involving destinations, room rates and bookings, use request identity verification followed by action scope limits.
- HealthcareTransferable use
For hospital appointment and administrative service desks, use request identity verification followed by action scope limits.
- Legal servicesTransferable use
Support “Check case-work account readiness” with request identity verification followed by action scope limits.
Skills pack
Contract scaffold and deterministic mock
Download · 10KBSHA-256 d5a6b0fb68ae2e1d72ed6de271305d654c3dce16d7d638128cdb9b5374a45309
Related components
-
Local coding-agent execution governance
Pre-action policy decisions + human permission and audit
Working 1 pipeline -
Collaborative delivery, approvals and evidence gates
Draft and artifact versioning + human handoff approval
Working 4 pipelines -
Tenant identity, enterprise SSO, provisioning and access control
Organization membership sync + scoped role access
Working 1 pipeline -
Browser login/session readiness toolkit
Session preparation + dependency readiness diagnosis
Working 1 pipeline