A single human-root keyholder and key pair that terminates a lineage chain. Every agent, tool, and service under that root carries signed derivation proofs — cryptographic ancestry, not personhood certification.
Collective identity through FROST threshold cryptography. No single human holds the full key. t-of-n participants required for every critical operation.
Organizational identity governed by multi-human threshold groups. Supports governance transitions, timelocked operations, and hierarchical descendant structures.
Human, collective and enterprise roots support owned identities. Agents can also be explicitly trusted self roots. Receivers decide which identities and permissions they accept.
did:oas — a DID method for autonomous agents, designed against W3C DID Core. Ed25519 signing. HKDF-SHA256 derivation. BLAKE3 hashing. Zero vendor lock-in.