Append a new entry to an existing AuditChain. Args: db: AsyncSession. chain_id: Chain to append to.

Get an AgentIdentity by agent_id.

Convert SQLAlchemy model to Pydantic ExecutionToken.

Lazily initialize the default Org CA Ed25519 keypair (Phase 1 only).

Convert SQLAlchemy model to ExecutionTokenOut response schema.

Convert SQLAlchemy model to AgentIdentityOut response schema.

Convert SQLAlchemy model to Pydantic AgentIdentity.

Append a new entry to the chain. Returns a new AuditChain. Raises ValueError if the chain is already closed.

Sign a canonical JSON payload with an Ed25519 private key. Args: private_key_pem: PKCS8 PEM-encoded private key. payload: Ca

Compute SHA-256 hash for an AuditEntry (excluding entry_hash itself).

Verify an AgentIdentity is currently valid (static check). Checks: 1. Identity exists 2. Status is not

Deterministic JSON serialization for hashing. Excludes entry_hash.

Serialize an AuditChain to a JSON-serializable dict.

Retrieve and consume a challenge (one-time use). Enforces TTL: - If challenge exists but age exceeds ttl_seconds -> treat as exp

Convert SQLAlchemy models to Pydantic AuditChain with entries.

Convert SQLAlchemy AuditEntryModel to Pydantic AuditEntry.

Return deterministic JSON serialization of a dict. Keys are sorted, no extra whitespace, ASCII-safe.

Factory method. Computes entry_hash after construction. Always use this instead of direct instantiation.

Get a full AuditChain by chain_id.

Get an ExecutionToken by token_id.

Issue an AgentIdentity from a validated CSR — Org CA signing. Step 2-3 of the PKI lifecycle: 2. Org CA validates the

Return True if entry_hash is consistent with entry content.

Serialize an Ed25519 private key to PEM string.

Get the Org CA keypair (lazy-init).

Convert Pydantic ExecutionToken to dict suitable for model creation.

Store a challenge with TTL metadata. TTL is enforced on retrieval (not automatic in-memory — background cleanup not needed for short-lived

Return True if value is within bounds.

Validate a tool call against an ExecutionToken's scope. Returns the check result — does not raise on violation.

Close an AuditChain and write the terminal entry. Args: db: AsyncSession. chain_id: Chain to close.

Compute the SHA-256 fingerprint of the Org CA public key. Args: public_key_bytes: Raw CA public key bytes. If None, uses the default

Generate a new Ed25519 keypair for an agent. Returns: Tuple of (private_key_pem, public_key_base64url). The private key MUST

Get the active ExecutionToken for a mission. Returns the most recently issued non-expired, non-used, non-invalidated token.

Get an AuditChain by mission_id (one chain per mission).

Return the raw 32-byte Ed25519 public key of the Org CA.

Get an ExecutionToken only if it is currently valid.

Create a new AuditChain and write the genesis IDENTITY entry. Args: db: AsyncSession. mission_id: Mission th

Invalidate a token early.

Check if certificate has expired.

Issue a new AgentIdentity (legacy method, wraps CSR flow). For backward compatibility. Prefer use of submit_csr + issue_from_csr.

List AuditChains for an agent with SQL-level pagination. Args: db: AsyncSession. agent_id: Agent identifier.

List all AgentIdentities for an organization (no pagination).

Mark a token as consumed (used=True).

Mint (create) a new ExecutionToken. The token is scoped to a specific agent + mission and cryptographically signed by th

List ExecutionTokens for an agent with SQL-level pagination. Args: agent_id: Agent identifier. page_no:

List ExecutionTokens for a mission with SQL-level pagination. Args: mission_id: Mission identifier. pag

List AgentIdentities for an organization with SQL-level pagination. Args: org_id: Organization identifier.

Reactivate a suspended AgentIdentity (REVOKED cannot be reactivated).

Generate and store a cryptographic challenge for an agent. Step 4: Verifier requests a challenge for the agent. The nonc

Revoke an AgentIdentity. The identity cannot be used after revocation. A new identity must be issued. Revocation is perm

Sign agent certificate data with the Org CA private key. Args: private_key_pem: Org CA PKCS8 PEM private key. certificate_da

Validate and store a CSR for later signing. Step 1 of the PKI lifecycle: Agent submits CSR with public key + metadata. T

Suspend an AgentIdentity (recoverable).

Return canonical JSON for signing.

Verify an Org CA signature over a payload. Shorthand for verify_signature() with the Org CA public key.

Full challenge-response verification. Step 5-6 combined: Validate response and check certificate validity. Verifies:

Verify the integrity of an AuditChain from the database. Checks: 1. Each entry's entry_hash is consistent with its conte

Verify an Ed25519 signature over a payload. Args: public_key_bytes: Raw 32-byte Ed25519 public key. payload: The signed payl