OAS
The reference implementation of the Open Agent Specification. Defines the did:oas method, entity kinds, lineage model, DID document creation, resolution, and verification behind the OpenAgent SDK facade.
Capabilities
did:oas DID method with 11 entity kinds
HKDF-SHA256 deterministic child key derivation
Cryptographic lineage proofs (AgentLineageProof2025)
W3C Verifiable Credentials attestation
Conformance levels for parse, signature, and Sigil-backed authority checks
Local base identity checks with fail-closed privileged authority
8 Crates
Inside OAS
Every crate in the OAS workspace, what it does, and how it fits together.
oas-did
3.2K LOCDID parsing, validation, and URI construction. Handles the did:oas:<namespace>:<kind>:<id> format with all 11 entity kinds.
oas-crypto
4.1K LOCEd25519 key generation, HKDF-SHA256 derivation, BLAKE3 hashing, and JCS canonicalization. All keys implement ZeroizeOnDrop.
oas-document
3.8K LOCDID Document builder with verification methods, service endpoints, and authentication relationships. W3C DID Core compliant.
oas-lineage
2.9K LOCAgentLineageProof2025 creation and verification. Validates HKDF derivation chains from agent to human root.
oas-resolve
2.4K LOCDID resolution with pluggable resolvers. Supports local, HTTP, and DHT resolution backends.
oas-attestation
2.1K LOCW3C Verifiable Credentials and trust attestation creation. Ed25519Signature2020 proof suite.
oas-sdk
1.2K LOCRust facade re-exporting the OAS crates used by the OpenAgent SDK for DID and lineage operations.
@openagent/sdk
— LOCTypeScript OpenAgent facade that uses OAS identity together with AEGIS verification and Arsenal credentials.
Cryptography
Available in
Install