Terms that travel with the bytes.
Sign your governance at the source. Every agent that reads the page can verify what is permitted, what is logged, and what revokes downstream. The chain from access to derivative is reconstructable from primitives.
One action, one signed receipt.
Life of an Action
Content licensing turns on the action-receipt audit trail. Each access is a signed action; the receipt is the ledger entry.
Publishers, data providers, IP owners.
Who this is for
Your content is being read by agents at scale, used in training, summarized into derivatives, resold inside larger products. You need three things: terms enforcement at the page level, attribution that follows the data through agent pipelines, and the ability to revoke and have the revocation cascade through everything derived from the original.
Three primitives, one chain.
What ships
The full surface is open. Module paths shown.
Signed governance at the source. aps.txt for site-wide terms, embedded HTML blocks for per-page overrides, HTTP headers for header-only deployments. All Ed25519-signed and content-hashed.
generateGovernanceBlockparseGovernanceBlock · verifyGovernanceBlock
Attribution that follows the data. Source receipts, access receipts, derivation receipts, decision lineage receipts. The chain from agent read to agent recommendation is reconstructable from signed primitives.
DataSourceRegistration → AccessReceipt→ DerivationReceipt → DecisionLineageReceipt
Cascade revocation as enforcement. Revoke at the source and downstream derivatives invalidate. The revocation is signed, propagating, and replayable. Agents that ignore it are visible in the receipt ledger.
Attribution Primitive (D/P/G/C)AMCS spec · six requirements, two layers
The chain, end to end.
Architecture
Each receipt is signed, content-hashed, and verifiable without the platform that issued it.
# 1. Source. You publish terms once.
POST /aps.txt # Ed25519-signed governance block
# 2. Access. Agent fetches under its passport.
GET /article/123 # issues AccessReceipt(agent_did, scope, ts)
# 3. Derivation. Agent transforms or summarizes.
EMIT DerivationReceipt(parent: AccessReceipt, weights: D/P/G/C)
# 4. Decision. Recommendation cites the source.
EMIT DecisionLineageReceipt(sources: [DerivationReceipt, ...])
# 5. Revoke. Cascade invalidates downstream.
REVOKE source_id # every receipt that anchors back is now invalid
Verifiable on the public record.
Proof
- AMCS spec live. Cryptographic news provenance, six requirements across two layers, on aeoess.com/amcs.html.
- VeritasActa cross-layer integrity 10 of 10. APS DecisionLineageReceipt slots into external_receipts.aps. Verify PR #7.
- Vocabulary registry covers data lifecycle. Source, access, derivation, content provenance with multiple cross-vendor implementations.
- Attribution Primitive specified. Four-axis Merkle envelope (D/P/G/C), Build-B fractional weights, Build-C settlement records.
Adjacent
deep
AMCS spec
Cryptographic provenance for AI-readable journalism.
open →
solution
Compliance
Map receipts to EU AI Act, NIST AI RMF, ISO 42001.
open →
solution
Enterprise
BYO identity, charter governance, multi-tenant audit.
open →
Self-serve
Embed aps.txt.
Generate a signed governance block, publish it at the root of your domain, start issuing access receipts. SDK on npm.
npm install agent-passport-system
Managed
Managed terms enforcement.
Hosted issuance, signed governance at scale, cascade revocation across derivatives. Pricing on request.
For AI agents: llms-full.txt · MCP descriptor
