Vote for your favorite SkillMD. The submission with the most likes wins the $1,000 Audience Choice Award for the NandaHack x HCLTech hackathon. Voting is open through September 25.Vote now →

Layer · identity

Identity

Sign and verify per-agent payloads.

Submissions
10
Merged
10
Sort by
JamesCarnley avatar
mergedhumanidentity

fix(runtime): serialize mailbox work and settle participant processes

- Serialize mailbox claim/ack/reoffer decisions with their writes and evidence events; finish is atomic/idempotent and terminal runs reject subsequent mutations.

@JamesCarnleyPR #259
JamesCarnley avatar
mergedhumanidentity

Reject malformed run grant timestamps without changing signed payloads

Reject malformed or non-finite timestamps when verifying current Town run grants, without changing signed payloads or adding permission policy.

@JamesCarnleyPR #251
JamesCarnley avatar
mergedhumanidentity

Make message acceptance atomic and bind the complete envelope

Make current Town's durable message acceptance atomic and bind replay to the complete message envelope.

@JamesCarnleyPR #250
JamesCarnley avatar
mergedhumanidentity

test: require run-bound session proof at grant join

Preserves the absent/wrong-presenter test requirement from legacy #156 (@mwarsss) on current Town Run Grants. The production check already exists; this PR adds seven regressions only, with no runtime, permission or schema change.

@JamesCarnleyPR #248
JamesCarnley avatar
mergedhumanidentity

test: preserve grant key-binding regressions from legacy #172

Retain the key-substitution regression requirement from #172 by @theCodeForgerHQ against current Run Grants.

@JamesCarnleyPR #243
JamesCarnley avatar
mergedhumanidentity

fix(bundle): verify the declared bundle fingerprint

Verify that the manifest's declared bundle_fingerprint matches the canonical fingerprint of its file-hash map before accepting a bundle.

@JamesCarnleyPR #234
Skyrider3 avatar
mergedhumanidentity

Enforce Run Grant permissions on join and every mailbox action

nandatown run --identity joins each role through a Run Grant: a controller-signed authorization for one disposable session key, for one run, with named permissions.

@Skyrider3PR #231
JamesCarnley avatar
mergedhumanidentity

feat(agent-test): test an existing OpenClaw agent from the CLI

The headline workflow should be one clear command for a terminal-comfortable developer, not a private bridge or hand-edited adapter.

@JamesCarnleyPR #228
Sharathvc23 avatar
mergedhumanidentity

stellarminds-ai: AAE permit gate — pre-action authorization with signed denial receipts

Layer: trust · Persona: stellarminds-ai

@Sharathvc23PR #89
Sharathvc23 avatar
mergedhumanidentity

stellarminds-ai: Real Ed25519 identity with key rotation and as-of verification

Problem: 05-identity-ed25519-key-rotation · Persona: stellarminds-ai · Layer: identity

@Sharathvc23PR #25