Preview documentation. The visual zoom-through explainer is at openagent.id/specification/lineage.
Every entity except an hmr or mhr has a parent. Every parent-child pair is bound by a AgentLineageProof2025 — an Ed25519 signature over the child’s DID by the parent’s private key, with a HKDF-SHA256 derivation path recorded. Verification walks the chain from child to root, checking each signature. No network is required — every piece of data needed is in the DID documents themselves.

​
Verification rules

  • Chain completeness — every link must resolve
  • Key binding — child key in proof must match the child’s verification method
  • Temporal ordering — parent created before child, proofs ordered
  • Human root termination — chain must end at hmr or mhr