OpenChainGraph Suite · ART-04 · Agent Identity Attestation
v1.0.0

Agent Identity & Authorization Attestation Checker

Validate AI agent identity credentials and delegated-authority chains against KYA-OS (Know Your Agent OS), donated to the Decentralized Identity Foundation (DIF) Trusted AI Agents Working Group in March 2026. Checks credential chain integrity, scope limits, delegation depth, validity windows, and EU AI Act 2 December 2027 compliance posture (Digital Omnibus). The KYA-OS delegation model follows KERI delegated identifiers and the witness model (ratified by the Trust over IP Foundation, January 2026) and vLEI organizational identity (ISO 17442-3), with Urbit ID as earlier prior art; did:webvh is the named upgrade path for portable identifiers. Client-side. Zero PII.

AP2 Export Chains: ART-01 · ART-13 EU AI Act 2 Dec 2027 KYA-OS · DIF Zero PII
🔒 All validation is client-side. Do not paste credentials containing real private keys, bearer tokens, or personal data — use test fixtures only. No data is transmitted.
Credential input
KYA-OS AgentCredential or DelegationChain JSON. Select a preset above to start from a working example.
Attestation checks
Parsed credential

Ask your agent

Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

Run the AINumbers MCP tool `check_agent_attestation`. Task: Validate AI agent identity credentials and delegated-authority chains against KYA-OS (DIF Trusted AI Agents WG).
Call it with arguments: {"policy_parameters":{"validate_at_unix":1750248000,"credential":{"credential_type":"AgentCredential","agent_id":"agent:acme:shopping-bot:v2","issuer":"did:web:auth.acme.com","issued_at":1750161600,"expires_at":1752840000,"scopes":["read:account","execute:checkout","write:payment"],"eu_ai_act_risk_class":"limited","signature":"ed25519:MEYCIQDexampleSignatureHexGoesHereForTestingPurposesOnly"}}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-04-agent-identity-attestation-checker.html#p=v1.H4sIAAAAAAAA_wF3AYj-eyJ2YWxpZGF0ZV9hdF91bml4IjoxNzUwMjQ4MDAwLCJjcmVkZW50aWFsIjp7ImNyZWRlbnRpYWxfdHlwZSI6IkFnZW50Q3JlZGVudGlhbCIsImFnZW50X2lkIjoiYWdlbnQ6YWNtZTpzaG9wcGluZy1ib3Q6djIiLCJpc3N1ZXIiOiJkaWQ6d2ViOmF1dGguYWNtZS5jb20iLCJpc3N1ZWRfYXQiOjE3NTAxNjE2MDAsImV4cGlyZXNfYXQiOjE3NTI4NDAwMDAsInNjb3BlcyI6WyJyZWFkOmFjY291bnQiLCJleGVjdXRlOmNoZWNrb3V0Iiwid3JpdGU6cGF5bWVudCJdLCJldV9haV9hY3Rfcmlza19jbGFzcyI6ImxpbWl0ZWQiLCJzaWduYXR1cmUiOiJlZDI1NTE5Ok1FWUNJUURleGFtcGxlU2lnbmF0dXJlSGV4R29lc0hlcmVGb3JUZXN0aW5nUHVycG9zZXNPbmx5In19Y-tBVXcBAAA