Provenance
What this repository reuses, from where, at which commit. Nothing protocol-heavy was re-derived when a tested version already existed nearby.
Copied or adapted into this repository
| Here | From | Commit | Licence | How |
|---|---|---|---|---|
packages/shared/src/federation/policy.ts |
mcp-interop packages/shared/src/federation/policy.ts |
1e82293 |
none declared (my own repo) | verbatim |
packages/shared/src/federation/types.ts |
mcp-interop packages/shared/src/federation/types.ts |
1e82293 |
none declared | ported |
packages/shared/src/federation/statements.ts, resolver.ts |
mcp-interop packages/shared/src/federation/ |
1e82293 |
none declared | adapted: jose 5 → 6, pinned anchor keys, jwks_uri resolution for protocol keys, Trust Mark status |
packages/shared/src/{errors,util}.ts |
mcp-interop packages/shared/src/ |
1e82293 |
none declared | ported; PKCE helpers added |
packages/shared/src/{jws,dpop,rs,oauth}.ts |
mcp-interop packages/shared/src/ |
1e82293 |
none declared | adapted: signing through a JwsSigner so hardware keys can sign; act read as object or string |
packages/shared/src/signer/jws-signer.ts, attestation/attestation.ts |
client-attestation-sdk-polyglot typescript/src/{signer,builders}.ts |
3ca8a68 |
Apache-2.0 | adapted: the attestation, PoP and DPoP builders take a JwsSigner |
packages/trust-mark-issuer |
mcp-interop packages/intermediate |
1e82293 |
none declared | adapted: a standalone Trust Mark Issuer with a status endpoint |
helpers/se-signer/Sources/Jose.swift |
vc-wallet-sdk Sources/VCCore/Crypto.swift |
b485d45 |
none declared (my own repo) | base64url, public JWK and raw r‖s signatures, re-used for the helper |
helpers/se-signer/Sources/AppAttest.swift |
the iOS enrolment in pf-agentic-identity services/device-enrolment and the approver app idp-approver-ios |
12626ec, b5fdd37 |
Apache-2.0, MIT | the same clientDataHash commitment, written for macOS; no code copied from the iOS app |
Designs followed, no code copied
| Here | Follows | Commit | Licence |
|---|---|---|---|
The agent's mission in federation metadata: RAR types in the agent's oauth_client, a description its superior vouches for, subset_of caps (docs/MISSION.md) |
purpose-bound-delegation |
590a233 |
none declared (my own repo) |
The partner's enforcement point configured through the federation: its resolved oauth_resource, authzen_policy_decision_points, authzen_policy_layers |
idp-auth-peps (coaz-pep) |
da0d776 |
Apache-2.0 |
DPV purposes on authorization_details entries, and the BIAN type grammar |
the project's RAR vocabulary (the agentic-authorization skill) | - | - |
mcp-interop, vc-wallet-sdk and purpose-bound-delegation carry no licence file at those commits. Both are mine; they need one before this repository is shared beyond me.
Run, not copied
| What | Where | Commit | Licence |
|---|---|---|---|
| PingFederate modules: attestation filter, federation intermediate, hosted entities, device-enrolment | pf-agentic-identity, worktree ~/Source/pf-agentic-identity-connector, branch exp/mac-connector from origin/main |
12626ec + uncommitted changes (below) |
Apache-2.0 |
| The conformance rig used to build and author PingFederate | the same worktree, conformance/ |
12626ec |
Apache-2.0 |
| Trust Anchor | oidfed/lighthouse@sha256:fd4d64df17d582d4e2f4e47f17a585d4a86cf8e66bf18d833515817557f973e5 (0.21.0) |
- | MIT |
| YubiKey access | yubikey-manager 5.9.2 in helpers/yk-signer/.venv |
- | BSD-2-Clause |
| Passkey verification | @simplewebauthn/server 14 in packages/bank-idp |
- | MIT |
Changes made on exp/mac-connector
All with tests; the first set is commit 2189aa0, the mission work follows it uncommitted; mvn -pl servlets/pf-integration,services/device-enrolment,libs/openid-federation -am verify passes, coverage gates included.
- Attestation filter (
ClientAttestationAuthFilter): the bridge assertion is typedclient-authentication+jwtwith oneaud; mapped over PAR as well as the token endpoint (assemble-pf-runtime-war.sh); checks a hosted agent's standing on every request; writes the verifiedagent_idinto eachauthorization_detailsentry at PAR. - RAR processor (
plugins/rar-paz-plugin): a short-named subclassau.idp.rar.FedRarfor 13.1's plugin-id limit; extra supported types fromOIDF_RAR_EXTRA_TYPES; a "Trust the PAR-carried agent marker" setting, off by default. - Attestation verifier (
ClientAttestationVerifier): accepts DPoP alongside PoP-mode attestations, with different keys. - Federation:
jwks_uriin the bank's authorization-server metadata (FederationService);issoptional at the fetch endpoint (OpenIdFederationServlet); vouchedmetadatain the Subordinate Statement about a self-signed hosted entity (AuthoritySupport,FederationService); SELF_SIGNED hosted entities - registration with the agent's own keys, a verified publish endpoint, revocation (HostedEntity,HostedEntityServlet,SelfSignedEntityConfigurations, both registries);AuthoritySupport.registryIfConfigured(). - device-enrolment: the connector enrolment path -
nonce-bound ID token, key proofs, PIV attestation (PivAttestationVerifier), self-asserted evidence, registration at the federation authority (HostedEntityRegistrar), per-evidence attestation claims (DeviceAttestationMinter.MintProfile), federation-safe instance ids, and the agent mission it asks the authority to vouch for and cap (Main.agentMission,AGENT_*).