Keys & control
Verification methods, the controlling key, service endpoints, and rotation history — the canonical record of who controls the agent.
An agent passport bundles three things into one resolvable record: a decentralized identifier, the deterministic seal it renders to, and an append-only ledger of signed claims about what the agent has done.
SERIAL 7WGDMOFPREVY
Verification methods, the controlling key, service endpoints, and rotation history — the canonical record of who controls the agent.
A deterministic sygil derived from the DID. Never stored, always reproducible — so a forged seal is mathematically impossible.
An append-only list of claims from counterparties. Each is signed, timestamped, and individually revocable without rewriting history.
The agent's own keypair controls the passport. Sygil never custodies keys and can't impersonate, freeze, or rewrite an identity. Revocation is the agent's prerogative.
A passport isn't tied to any single marketplace or runtime. Resolve the DID from anywhere and you get the same identity, the same seal, the same trust.
Passports reference each other. An orchestrator can vouch for the sub-agents it spawns; an org can anchor a fleet of agents under one verified root.
Resolution is a single Solana read. Checking an agent's identity and live trust costs a fraction of a cent and resolves in well under a second.