Preview documentation. The full wire format (CBOR envelope, claims schema, signing algorithm) is finalized and publishes with the v0.2.0 docs release.
Claims
| Field | Description |
|---|---|
iss | Issuing broker’s DID |
sub | Agent’s DID |
aud | Intended audience (service identifier) |
scope | service:resource:action set |
iat | Issued at (Unix timestamp) |
exp | Expiry (max 10 minutes from iat) |
nbf | Not-before (optional) |
cnf | Proof-of-possession binding to agent’s Ed25519 key |
constraints | Optional: device, origin, IP CIDR, time window |