Module access 

Credential-gated agent admission.

An AccessCredential is a W3C Verifiable Credential in which a trusted issuer grants an agent did:key a set of Permissions. An AgentRegistry admits an agent only after verifying the credential’s eddsa-jcs-2022 proof, its validity window, and that the signing key belongs to an issuer the host has explicitly trusted.

The registry decides; it does not authenticate the caller. A host exposing HMS to remote agents must separately prove that the party presenting a DID controls its key (for example a signed challenge) before calling AgentRegistry::authorize.

Structs

AccessCredential

AccessSubject

AgentRegistry

Agents admitted by credentials from trusted issuers. Trusts no issuer, and therefore admits no agent, until AgentRegistry::trust_issuer is called.

Enums

Permission

Constants

ACCESS_CREDENTIAL_TYPE

Functions

issue_access_credential

Issue a signed access credential for subject_did. valid_until is a UTC YYYY-MM-DDTHH:MM:SSZ timestamp; None means the grant does not expire.