Let agents find information, prepare a proposal and coordinate work across services. The operating model names who they work for and what they may do. Work that needs a person's approval returns to the Wallet; implemented and illustrative paths are distinguished below.
The agent workflow starts with a task: find an available service, assemble the
permitted context and prepare the next step for review.
The Wallet is available when a person or organisation needs to understand, authorise or retain what
happens. Routine work can continue inside an existing mandate; consequential work can stop for a clear
decision. Either way, the principal, authority and result stay visible.
Compare how an established service partner and an independent tailor can reach the same field view,
policy decision and expected result. This page renders the product contract; its public execution
controls remain inactive until the named trust origin and partner proof are available.
0438
Common bounded operation
Shorten the sleeves and append the accepted repair event.
Principal
Garment owner
Agent
Tailor’s repair assistant
Resource
Work jacket · item 0438
Permitted action
Read repair view · propose one alteration
Limits
One item · seven days · one accepted update
Result
Lifecycle event and attributable receipt
01
Organisation-governed authority
Established service partner
Carry organisational identity across trust domains, then let the destination issue task-specific access under its own policy.
Item 0438 · exact repair view · one lifecycle event
Shared invariant
Either authority path reaches the same resource policy, field view, human checkpoint and receipt contract.
Governed execution
Authority stays attached from request to result.
01
Discover
The service declares the resource, operation and authority it accepts.
02
Verify authority
The principal, actor, evidence, audience, scope and limits travel together.
03
Select the permitted view
Policy chooses the exact fields, representations and update rights for this task.
04
Preview the semantic change
The proposed graph diff and supporting evidence are inspectable before commitment.
05
Approve when required
A Wallet checkpoint appears when the policy calls for a responsible person.
06
Commit and return evidence
The accepted event binds the principal, agent, authority, decision, change and result.
Attributable result
Keep the result as inspectable evidence.
The readable outcome, verification trace and machine representation are three intended views of the same operation record. This illustrative record is not proof that the operation ran.
Expected successful resultIllustrative operation record 0438-01example · no execution timestamp
Execution evidenceNot generated
Principal
Garment owner
Represented organisation
Northwind Workwear
Agent
Repair assistant · session 8472
Authority
OAuth ID-JAG or KYA-OS delegation
Resource
Work jacket · item 0438
Action
Append accepted repair event
Disclosed
Measurements · composition · repair instructions
Withheld
Design specification · commercial terms
Policy decision
Allowed with responsible-person approval
Expected result
Sleeve length 67 → 62 cm · event would be appended after execution
Example diff hash
sha256:6f2a…91dc
Example revocation reference
status:mandate:8841
Step 01Authority assessmentID-JAG or portable delegation
The same checks can support travel, new work and caring for products or places. These are directions for the product model, rather than deployed workflows.
01
Move through the world
Prepare a journey, a move or a visit to family. Let the person review who needs their information and why.
Prepared journey → Wallet checkpoint when needed02
Act across organisations
Prepare evidence for a tender, a customer or a service partner. Make clear who may submit it and which decision still needs approval.
Authorised task → attributable result03
Nurture products and places
Connect repair, reuse, care or environmental observations to the people and evidence behind them.
Contextual action → continuing evidence04
Use a supported route
Keep the person as principal when they borrow a device, receive help beside them, or authorise a representative for one bounded task.
Device access ≠ assistance ≠ authority
One operation envelope
Use the interface that fits the context.
Wallet, human UI, API and MCP interactions can converge on the same policy decision and result. Policy invokes a responsible-person checkpoint when the situation requires one.
W
Wallet approval
Show the represented principal, actual operator when different, requested fields, proposed change and expected receipt before approval.
API
Agent API & MCP
Create, validate and project the bounded operation through domain-specific interfaces.
Verifable participates in the OpenID Foundation AIIM MCP Security interoperability work across authorization-server, OpenID Provider, resource authorization-server and MCP Server roles.
See who authorised each action.
Start with one real resource, one permitted action and one accountable result.