Don't trust us — verify us: every claim runs from a cold clone. Run it →
For verifiers & builders

Check theirs.
Trust the source, not us.

One half of the loop — prove yours is the other. The check runs on your machine; nothing reaches us.

Every check runs locally, from public artifacts, in milliseconds — offline-capable, with the root dark. Verification never reports to anyone.

1 · PRESENT

The agent's request arrives signed; the signature names its passport key.

2 · CHECK THE CHAIN

Passport → registrar → root, plus the authority chain to its anchor. Cached keys, milliseconds.

3 · CHECK STATUS

Fresh revocation proof and witness-cosigned log inclusion. In good standing, right now.

4 · DECIDE

Your policy: tier floor, accepted authority classes, required scopes, fail-open or closed.

PROPOSED VERIFICATION PROFILE — NOT YET IN THE STANDARD (v5.1 defines proof freshness only for L3–L4)

F1 PAYMENTS-GRADE

Requires a signed fresh status head no older than 30 seconds. Missing or stale? The check fails closed.

F2 STANDARD

Status list no older than five minutes, with signed deltas applied. Stale? Fails closed.

F3 OFFLINE

Air-gapped verification against a cached list up to 24 hours old — still cryptographically complete, still fail-closed.

REAL TODAY — THE REFERENCE CLI

A zero-dependency command-line tool with real signatures and a hash-chained local log. It issues, verifies and revokes — and it catches tampering live: a forged tier and a rewritten log line are both rejected with the exact reason. Download v0.3.3 and try to break it.

AT FIRST PUBLIC RELEASE — AHEAD

The full reference implementation: verify in five lines with the SDK, a fail-closed middleware gate, registrar-in-a-box in one command, and the complete conformance vector set — published under CC0, so conformance never needs anyone's permission.

VERIFICATION IS LOCAL · IT NEVER PHONES HOME · CONFORMANCE IS CLAIMED AGAINST THE VECTOR SET THAT SHIPS AT FIRST PUBLIC RELEASE, NOT GRANTED BY US

Try it — 20 seconds, in this tab

Verify an agent.
Then try to forge one.

The actual AINRA verifier — the same code that passes every conformance vector — runs in your browser. It checks passports and, when one is present, the short-lived credential a running copy carries (the instance path). Pick a real passport, then tamper with it and watch it fail closed with a named reason. Nothing is uploaded; the root is never contacted.

The passportSTAGING · TEST-ROOT
Or paste your own bundle

A conformance vector, a {anchors, presentation} pair, or a bare presentation (checked against the registrar selected above). It is read in this tab and nothing is sent anywhere.

▸ Forge it — flip one field, then re-verify
The verdictRUNS ON YOUR MACHINE
—
choose a passport, then press Verify
The authority model

Who stands behind it —
declared, provable, honest.

Every passport names its authority class. Delegation can only narrow, chains stay provable to their anchor at any depth — and even a fully autonomous agent gets a truthful class of its own. Select one:

A1 · HUMAN-DELEGATED

A verified person stands behind the agent — proven in zero-knowledge, so accountability exists while privacy stays intact. A signed consent mandate sets scopes, time limits, and spend ceilings; the person can revoke it at any moment, everywhere at once.

act_chain: [principal → agent:orchestrator@3 → agent:invoicing@4.2.1] // scopes may only narrow — provable to the anchor at any depth
A universal standard for current players

Keep what you built.
Gain everyone else.

The standard belongs to no vendor. Every existing layer keeps its product and its customers — and plugs in where it already looks things up.

Payment networks

KEEPTheir agent programs, tokens, and checkout flows.
PLUG INKey-directory lookups resolve through the root.
GAINCross-network recognition and an instant, shared switch.

Edge & bot defense

KEEPSignature checks and traffic policy at the edge.
PLUG INMirror the root directory behind existing checks.
GAINOperator, tier, and live status behind every signature — a welcome lane for good agents.

Enterprise identity

KEEPInternal agent directories, ownership, and audit.
PLUG INMint a passport the moment an agent crosses the boundary.
GAINTrust that survives outside the walls, with the chain of authority intact.

Merchants, apps & APIs

KEEPTheir whole stack, unchanged.
PLUG INOne verify middleware plus a tier floor of your choosing.
GAINWelcome good agents and price risk by tier and authority class.
Assurance tiers

Five levels. You set the floor.

The root grades how much verification stands behind a passport; every verifier picks its own floor. Existence at L0 is guaranteed by charter, and each level up earns more consequence.

L3 · BACKED

KYB-verified operator + zero-knowledge principal + liability insurance attestation. The floor for consumer-scale payments and contract execution.