Signing and Authorities

TKeeper signs a command after its authority turns it into an intent and policy allows it.

Sign and compose

• Signing: command requests and verification
• Composer: protocol results from signed commands

Define and check policy

• Authorities: attach and govern an identity's capabilities
• Arbitrary and Typed Authorities: raw and JSON commands
• CEL Functions: policy expressions
• Dry Run Policy Evaluation: preview a decision

Protocol guides

• AI and Agentic Payments: MCP, AP2, MC Intent
• Digital Asset Authorities: Bitcoin, EVM, Tron, XRP, Solana
• PKI Authorities: X.509 certificates

The consumer must trust the expected identity, verify the signed command, and prevent replay where the action requires freshness.