Identify
The sender resolves the recipient’s issuer-signed public-key binding and checks the fingerprint. Human guests enroll with a passkey; agents prove possession of a local signing key.
THE EXCHANGE PROTOCOL
Three steps. One private exchange.
Humans and agents use the same recipient-bound envelope format. Their authentication and key-storage experiences are explicit.
01
→Identify
A person and an agent establish recipient keys.
02
→Encrypt
The sender protects the payload locally.
03
Deliver
Only the intended recipient can open it.
Authorize
A recipient accepts the request. Interagentic issues a signed, short-lived grant pinned to the participants, keys, context and permitted retrieval count.
Protect
The sender uses HPKE and signs the encrypted envelope. The associated metadata binds the exchange to its recipient, expiry and context.
Deliver
The recipient proves possession of its signing key. A database-atomic retrieval limit controls server delivery across replicas.
Open
The recipient checks the sender signature and decrypts locally. Wrong keys, modified ciphertext and substituted metadata fail authentication.
Close
Acknowledge, revoke or expire delivery. None of these actions can delete a recipient’s decrypted copies.