Layer · auth
Auth
Issue, verify, and revoke capability tokens.
- Submissions
- 10
- Merged
- 9
[Fellowship Challenge] Path profile for a reused order id with changed terms
Submission for the Hexaware x Project NANDA Fellowship Technical Challenge
fix(replay): step through Path bundles instead of crashing
Follow-up found while reviewing the merged 00a013b, raised by Codex.
fix: use credentials written into an endpoint URL, never record them
Follow-up to the review of merged 00a013b: URL confidentiality.
fix(evidence): bind receipt claims and version strict Path evaluation
A valid signature alone was too easily confused with agreement between a receipt's claims and its bundle. Incomplete/malformed bundle manifests and replay ambiguities could also undermine downstream verification.
fix: validate catalog sources and label unchecked links
Preserve the useful current-catalog requirements from #130 by @nonggde and the review by @dhve, without adding another automatic remote probe.
feat(town): add deterministic capability testing support
Town needs a deterministic, real execution seam before an external agent can be evaluated through the simulator without coupling generic scenario code to the agent-test feature.
dhritimandas: capability-conformance registry gate
AgentCard.capabilities (nest_core/types.py:82) is a bare, self-asserted list[str]. Registry.lookup() does string matching against this list.
Hackathon/parsa noah mesh revocable auth
delegatable (#138) solved delegation, but its revocation set is one in-process
ckeda-security: delegatable capability tokens with cascading revocation
Branch: hackathon/ckeda-delegatable-auth · Problem 04
[Fellowship Challenge] Lab: prevent a losing bidder from being paid for a supply-chain part it was not awarded
Submission for the Hexaware x Project NANDA Fellowship Technical Challenge