Entity kinds
The twelve current kind variants describe entities, not standalone authorization.
The published oas-did@1.1.1 EntityKind enum defines twelve kinds:
| Kind | Role |
|---|---|
hmr | Human root |
mhr | Multi-human root |
enr | Entity root |
ao | Autonomous organization |
agent | Agent |
agent:instance | Specific agent instance |
tool | Callable tool |
skill | Declared skill |
workflow | Procedure/workflow |
model | Model |
dataset | Dataset |
service | Service |
EntityKind::is_root() recognizes HMR, MHR and ENR as root kinds in the identifier model. A parser/root-kind classification does not establish a valid governance or authority path. Parent relationships and privileged authority must be evaluated through the lineage and verifier contracts.
The agent:instance kind occupies two colon-separated kind components; use OasDid parsing rather than splitting every DID into a fixed number of segments.
See the kind module, lineage, and authority anchors.
The current TypeScript verifier separately supports an explicitly authorized agent self root with owner: null. Parser is_root() classification is not that approval; see verification. Avatar-only compatibility with an IAM literal agent DID does not expand authentication syntax or establish trust.