Signature
Ed25519 (EdDSA)
Operator agent mandates
Per-capability human-approval thresholds
Every capability an operator agent can be granted carries a minimum human-intervention threshold (HITL floor). A mandate can require more approval than the floor; never less.
OPERATOR_ENFORCEMENT_MODE=enforce — in production
Floor mode scale
Six modes, from least to most demanding. Comparison is by strictness, not alphabetical order: a mandate rule can only replace the default floor with something equal or stricter.
| Mode | Strength | Meaning |
|---|---|---|
| none | 0 | No mandated minimum. |
| notify | 1 | The merchant is notified after execution. |
| required-above | 2 | Required only above a value threshold (value-conditional). |
| required | 3 | A single human approval, before execution. |
| cooldown | 4 | Approval plus a reflection window before it takes effect. |
| dual-control | 5 | Two separate approvers (M-of-N), not one. |
Default floor per capability
Complete table (DEFAULT_HITL_FLOOR). Any capability not listed here has no mandated default minimum.
| capability | floor |
|---|---|
| refunds:write | required |
| refunds:write:bounded | required |
| customers:export | required |
| customers:delete | required |
| pricing:write | required |
| pricing:write:bounded | required |
| pricing:write:bulk | cooldown |
| payment-methods:write | cooldown |
| payment-methods:configure | cooldown |
| policy:write | dual-control |
| admin:* | dual-control |
| staff:permissions | dual-control |
Revocation
Trusteed is the sole signing authority for the operator mandate revocation list — a pattern comparable to CRL/OCSP. The public key is published at the standard JWKS.
Key rotation
90-day cycle, 30-day overlap.
Endpoint
https://trusteed.xyz/.well-known/jwks.json
Technical alignment with FIDO Alliance's AATWG
We are not members of FIDO Alliance and have no partnership with them. We implement a technical framework they have published — the same way we implement RFC 7515 or RFC 8707 without being the IETF.
The Agentic Authentication Technical Working Group (AATWG, formed 2026-04-27 after Google donated AP2 and Mastercard donated Verifiable Intent, 60 endorsing organizations) frames an agent mandate as delegated authority: a scoped, time-bound grant — not proof that a human is present.
Our OperatorMandate already expresses scope (scopes) and a validity window (iat/exp). A mandate can declare itself aligned with the canonical profile:
{
"x_aatwg_profile": "fido-aatwg/ap2-delegated-authority/v0.2"
}Beyond scope, an AATWG-aligned mandate carries an upper bound on its validity window (7 days by default — configurable). Status honesty: that cap runs today in observe mode (logs and measures, does not block with a 403) until the real distribution of validity windows has been audited.