OpenChainGraph Suite · ART-132 · wave 24

Agent Key Rotation Auditor

Audit agent key freshness and rotation posture against a configurable max-age policy: key age, rotation due flag, next-key presence, algorithm is Ed25519. Emits HEALTHY / ROTATION_STAGED / ACTION_REQUIRED. Root stage of the agent-identity-publishing chain.

Web Bot AuthKey LifecycleVisa TAPMC Agent PayW3C VC §13.11Zero PIIClient-side only

🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.

Scope

Root stage of the agent-identity-publishing chain (art-132→133→134). Audits key freshness: computes key_age_s = now_unix − key_created_unix, checks rotation_due = key_age_s ≥ max_key_age_s (default 90d=7,776,000s), and validates algorithm=ed25519. Posture: HEALTHY (not due), ROTATION_STAGED (due + next key present), ACTION_REQUIRED (due + no next key). Feeds the payment-rail trust crosswalk (art-133).

Presets

Key Created (unix) when the current key was first published

Now (unix) current timestamp

Max Key Age (s) policy — default 90 days = 7776000

Algorithm policy — must be ed25519

Next Key Present rotation pre-staged

Result

Execution Hash & §4 Artifact

SHA-256 execution hash (JCS canonical — RFC 8785):

Chain Handoff → art-133

Pass execution_hash as parent_hashes[0] and the rotation_posture output when calling crosswalk_agent_payment_rail_trust (art-133) to continue the agent-identity-publishing chain.