Append an entry to an AuditChain. The chain must not be closed. Call /audit/{chain_id}/close when done.

Validate a tool call against an ExecutionToken's scope. Called by the Tool Gateway before every external tool call. Returns whether

Validate a proposed tool call against this token's scope. Called by Tool Gateway before every external call. Returns Scope

Close the chain. No further entries may be appended. Call at Mission CLOSED state.

Close an AuditChain. Writes the terminal entry and marks the chain as closed. Call this when a mission enters the CLOSED state.

Close the global async engine. Call at application shutdown.

Return all entries whose event starts with event_prefix.

Return all entries for a given layer.

Get an AgentIdentity only if currently ACTIVE and not expired.

Get the most recently issued active ExecutionToken for an agent. Unlike ``get_active_token(mission_id)`` which requires a mission

Get the active ExecutionToken for a mission.

Get the AgentCertificate for an identity. Note: The certificate is issued at creation time. This endpoint reconstructs the certifica

Get an AuditChain by chain_id.

Get the AuditChain for a mission.

Override this with your actual session dependency.

Create an async SQLAlchemy engine from a database URL. Args: url: Database connection URL. Examples:

Get an AgentIdentity by agent_id.

Return a session factory bound to the given engine. Usage:: factory = get_session_factory(engine) async with factory(

Get an ExecutionToken by token_id.

Create all OrgKernel tables in the database. Call this once at application startup (after setting the engine URL). Args:

Create a new AuditChain and write the genesis IDENTITY entry. Call at Mission CREATED state.

Initialize a new AuditChain for a mission. Creates the chain header and writes the genesis IDENTITY entry. Call this when a mission

Return a new invalidated token.

Invalidate a token early with a reason.

True if identity is ACTIVE and not expired.

True if token has passed its expires_at timestamp.

True if token is not expired, not used, and not invalidated.

Check if status is ACTIVE (not revoked/suspended/expired).

Issue an AgentIdentity from a validated CSR. The agent receives: - identity: DB record (server-side only) - certificate

Issue a new AgentIdentity (legacy method).

List all ExecutionTokens for an agent.

List all ExecutionTokens for a mission.

List all AgentIdentities for an organization.

Mark a token as consumed (used=True).

Return a new token marked as consumed.

Mint a new ExecutionToken. The token is: - Scoped to agent_id + mission_id - Signed by the Org CA (prevents Token Graft

Paginated list of AuditChains for an agent (chain metadata only).

Paginated list of AgentIdentities for an organization.

Paginated list of ExecutionTokens for an agent.

Paginated list of ExecutionTokens for a mission.

Return a new AgentIdentity with ACTIVE status. Only valid from SUSPENDED. REVOKED identities cannot be reactivated.

Reactivate a suspended AgentIdentity.

Generate and store a cryptographic challenge for an agent. The returned ChallengeRequest.nonce must be sent to the agent. The agent

Validate a challenge response from an agent. Step 5: Agent sends back the signed nonce. This verifies: 1. C

Return a new AgentIdentity with REVOKED status.

Permanently revoke an AgentIdentity.

Sign ExecutionToken payload with the Org CA private key. Args: private_key_pem: Org CA PKCS8 PEM private key. token_data: Di

Submit a Certificate Signing Request for agent identity issuance.

Return a new AgentIdentity with SUSPENDED status.

Suspend an AgentIdentity (recoverable).

Return canonical JSON for CA signing / verification.

Return canonical JSON for signing / verification. This payload is what the Org CA signs to issue the token. Any field tamp

Verify an AgentCertificate's CA signature. Args: certificate: The AgentCertificate to verify. ca_public

Verify the integrity of an AuditChain. Checks: 1. Each entry's entry_hash is consistent 2. Each entry's prev_hash links

Full challenge-response verification. Verifies: 1. Challenge exists, not expired, and not already used 2. Agent's signa

Static verification of an AgentIdentity (status + expiry).

Verify the entire chain from genesis to head. Returns True if no tampering detected. Checks: 1. Each entry's en