IDE or agent
Creates a release, commit, evidence pack, or policy manifest.
Process
Protocol flow
From agent output to durable proof — four steps, one byte contract.
SDK canonicalizes
Sorted keys, compact separators, ASCII escaping, no NaN, and no top-level signature input.
The active signer signs
Today that means the emulated provider. Later it can support external keyrings and secure enclaves using the same public contract.
Anyone verifies
Public key, device ID, algorithm, timestamp, and signature travel with the manifest.