Service for AgentIdentity full PKI lifecycle management. PKI Flow: 1. submit_csr() - Agent submits CSR (public key + meta

Service for ExecutionToken lifecycle management. Usage:: svc = ExecutionTokenService(db=db_session) token = await svc

Service for AuditChain persistence and querying. All public methods are async and require an ``AsyncSession`` as the first positional ar

Response from an AgentIdentity static verification.

Response schema for AgentIdentity queries.

Single immutable record in the AuditChain. entry_hash = SHA-256(canonical JSON of this entry, excluding entry_hash itself). prev_hash

Result of challenge-response verification.

Response schema for ExecutionToken queries.

Signed certificate issued by the Org CA. This is the artifact returned after the CA validates a CSR and signs it. The agent stores t

Stores individual AuditEntry records. Belongs to one AuditChain.

Request a cryptographic challenge for dynamic verification. The verifier sends a random challenge; the agent must sign it with its p

Scoped, time-bounded permission token for a specific Mission execution. Issued at Mission APPROVED state. Enforced at the Tool Gateway

Response from a scope check.

Cryptographic organizational credential for an AI agent. Issued by AgentIdentityService using Ed25519 keypairs signed by the Org CA.

Certificate Signing Request submitted by an agent. Step 1 of the PKI lifecycle: Agent generates a keypair locally, then submits this

Result of issuing an AgentIdentity from a CSR. Returned to the agent for secure storage.

Stores AgentIdentity records. One identity per agent_id. Not linked to sys_user (org-scoped, not user-scoped).

Lifecycle status of an AgentIdentity credential.

Append-only hash-chained audit log for one Mission. One chain per Mission. Initialized at CREATED state, closed at CLOSED state. Usa

Stores AuditChain metadata. One chain per Mission. Entries are stored in AuditEntryModel.

Response from AuditChain integrity verification.

Layer of the AuditChain entry.

A named tool call parameter with numeric bounds. Calls exceeding bounds are blocked at the Tool Gateway.

Stores ExecutionToken records. One token per token_id. Tokens are immutable once issued.

Result of a Tool Gateway scope check against an ExecutionToken.

Request to issue a new AgentIdentity (legacy method — wraps CSR flow).

Request to revoke an AgentIdentity.

Request to verify an AgentIdentity (static check). For cryptographic verification, use the challenge-response flow instead.

Request to append an entry to an AuditChain.

Request to initialize an AuditChain.

Base for all OrgKernel SQLAlchemy models.

Response to a challenge — agent signs the nonce with its private key. The verifier checks: 1. challenge_id matches the request

Standard error response.

Request to mint a new ExecutionToken.

Request to validate a tool call against an ExecutionToken.