Original Summary

With the growth of the agentic economy and the ability of agents to manage wallets and make payments it&#x27;s critical that we have a mechanism to audit their payment behavior. And to complicate matters, agents are invoking subagents to work faster.<p>When an agent hands work to another agent, OAuth Token Exchange (RFC 8693) nests an &quot;act&quot; claim at each hop. Those claims are informational, not enforceable. Each actor in the process (e.g., your identity manager, your gateway, each agent) logged its activity — and no artifact anywhere answers &quot;did this action, three steps from the user, stay inside what the user actually authorized?&quot; Cloudflare (Wallets, and Cloudflare OS&#x27;s Gatekeepers) enforces scope at call time against its own ledger, and Block&#x27;s Buzz mints an owner→agent authorization a third party can verify offline without calling Block — ScopeTrail is the layer above both, proving scope actually attenuated across every hop and returning a verdict on the action at the end.<p>ScopeTrail is a TypeScript library (Apache 2.0) that lives above the multi-agent transaction and documents the full chain by: - Building and validating the chain from raw tokens - Minting and signing a receipt with Ed25519 over JCS (RFC 8785), and - Storing the receipt in an AT Protocol PDS.<p>The user can then retrieve and verify the receipt including the hop and scope if the agents went beyond their remit.<p>Raw tokens are never stored — only SHA-256 digests. Verification is stateless: no callback to the issuer is needed at verify time, no vendor in the loop.<p>You can try it now! Verify a live receipt by:<p><pre><code> curl -sO https:&#x2F;&#x2F;scopetrail.github.io&#x2F;.well-known&#x2F;jwks.json npx -y --package=@scopetrail&#x2F;core view-receipt \ at:&#x2F;&#x2F;did:plc:bty3gmskhla7rwblq5zl5jm5&#x2F;dev.scopetrail.auditReceipt&#x2F;00MSQDN0UT747ADDB2C4BB25420974 \ --jwks jwks.json </code></pre> This view-receipt call resolves the DID, fetches the receipt, checks its Ed25519 signature against the JWKS downloaded before the call, and prints the delegation chain.<p>The next milestone will be mint-by-default inside an open-source MCP gateway. If you work on gateways, an agent platform, or an identity product, I&#x27;d like to hear where this breaks.

  • 情报分类：技术学习与提效
  • 分类依据：内容涉及技术、AI、软件工具或工程实践
  • 信息来源：Hacker News 新项目
  • 发布时间：2026/9/22 21:00:38