Issue a process lease
The Agent Passport signs a session public key after physical touch.
Public key directory
Agent Passport registry
Resolve a hardware root key by secure-element serial. Each record is approved by the Pilot issuer and can be verified without trusting the lookup interface.
Verify a public key
Check whether Pilot has registered this Agent Passport root key.
Enter a public key to check its registration status.
A positive result includes the issuer-signed record. This lookup does not expose a directory or total count.
Resolve the root key
The broker reads the immutable public record by secure-element serial.
Verify and apply policy
The service checks the request signature, lease expiry, and shared rate budget.
What it establishes
- The request is signed under a lease issued by a registered hardware root.
- Requests from that Agent Passport share the same server-side policy budget.
- The root key was not exported from the secure element during normal operation.
What it does not establish
- It does not prove that one unique human owns the device.
- It does not prove that the agent is safe, truthful, or uncompromised.
- A delegated process key can be used until its lease expires unless revoked.