Identity Verification & Authorization
AEGIS
Modular cryptographic identity verification, authentication, authorization, and delegation framework. Plugin-based architecture supporting FROST threshold signatures, multi-chain wallets, and hierarchical delegation trees.
7-step verification pipeline
Challenge-response authentication
Hierarchical delegation with scope narrowing
Multi-chain transaction signing (12 blockchains)
FROST threshold signing for MPC
Revocation trees and liveness checks
Inside AEGIS.
Every crate in the AEGIS workspace, what it does, and how it fits together.
openagent-aegis-core
1.8K LOC
Core types, traits, and error hierarchy. Defines VerificationPipeline, AuthProvider, and PolicyEngine trait interfaces.
aegis-keys
2.1K LOC
Ed25519 key management with HKDF derivation, BIP-44/SLIP-0010 paths, FROST group key support, and AES-256-GCM encryption at rest.
aegis-auth
1.6K LOC
Challenge-response authentication with pluggable providers. Session token management with configurable TTLs.
aegis-verify
2.3K LOC
7-step verification pipeline: resolve → schema validate → signature verify → revocation check → lineage chain → liveness → conformance.
openagent-aegis-policy
1.9K LOC
Multi-dimensional policy engine with spending limits, temporal windows, lineage constraints, and contract-based policies.
aegis-delegate
1.4K LOC
Hierarchical delegation with anti-amplification rule — children cannot exceed parent permissions. Scope narrowing only.
aegis-wallet
1.8K LOC
Multi-chain transaction signing for 12 blockchains: Ethereum, Solana, Bitcoin, Cosmos, Aptos, Sui, Starknet, and more.
openagent-aegis-sdk
0.8K LOC
Unified SDK combining all AEGIS crates with builder-pattern configuration.
aegis-store-pg
1.2K LOC
PostgreSQL storage backend for keys, sessions, delegations, and revocation trees.
Cryptography
Reference languages
Rust
Integration path
Choose the authorization boundary.
Aegis is an optional integration with its own authority and storage contracts. Its versioned package reference is public; upstream repository access is currently restricted. Begin with the public SDK integration boundaries before choosing a component.
Read the integration guide →