OAS
The reference implementation of the Open Agent Specification. Defines the did:oas method, entity kinds, lineage model, DID document creation, resolution, and verification across 7 SDK languages.
Capabilities
did:oas DID method with 11 entity kinds
HKDF-SHA256 deterministic child key derivation
Cryptographic lineage proofs (AgentLineageProof2025)
W3C Verifiable Credentials attestation
Conformance levels: L0, L1, L2
Zero network calls in verification paths
10 Crates
Inside OAS
Every crate in the OAS workspace, what it does, and how it fits together.
oas-did
3.2K LOCDID parsing, validation, and URI construction. Handles the did:oas:<namespace>:<kind>:<id> format with all 11 entity kinds.
oas-crypto
4.1K LOCEd25519 key generation, HKDF-SHA256 derivation, BLAKE3 hashing, and JCS canonicalization. All keys implement ZeroizeOnDrop.
oas-document
3.8K LOCDID Document builder with verification methods, service endpoints, and authentication relationships. W3C DID Core compliant.
oas-lineage
2.9K LOCAgentLineageProof2025 creation and verification. Validates HKDF derivation chains from agent to human root.
oas-resolve
2.4K LOCDID resolution with pluggable resolvers. Supports local, HTTP, and DHT resolution backends.
oas-attestation
2.1K LOCW3C Verifiable Credentials and trust attestation creation. Ed25519Signature2020 proof suite.
oas-sdk
1.2K LOCUnified SDK re-exporting all OAS crates with a prelude module. The single dependency for most consumers.
@openagent/oas-sdk
216K LOCTypeScript SDK — full OAS implementation with WASM crypto bindings for cross-language parity.
openagent-oas (Python)
554K LOCPython SDK — sync and async APIs, Pydantic models, comprehensive type hints.
oas-go
7.4K LOCGo SDK — idiomatic Go with error values, context propagation, and concurrent-safe key operations.
Cryptography
Available in
Install