AttestedActions Working draft

Reference Stack

sm-* Primitives

The Stellarminds reference implementations, grouped by what they prove.

The sm-* libraries (sm = Stellarminds) are the reference implementations of the Attested Actions stack — small, dependency-light, published at github.com/Sharathvc23. They are grouped here by the role each plays in the envelope.

(a) It happened

sm-arp

Agency Receipt Protocol

Portable, cryptographically signed receipts an agent emits when it acts on behalf of a human. The occurrence half of the envelope.

(b) It was authorized

sm-aae

Attested Action Envelope

A signed, per-agent hash-chained record of a pre-action authorization verdict — what an agent may do, with refusals as first-class signed artifacts. The core envelope primitive.

sm-dat

Delegated Authority Token

The principal-signed grant defining what an agent is allowed to do, for how long, under what limits — the authority a verdict cites.

The surfaces

How a human reads and acts on the envelope stream.

sm-attest-viewer

Chronological timeline

Reference renderer for the attested-action stream — the human-readable log of what was authorized and what happened.

sm-decision-inspector

Human-in-the-loop workbench

Approve / deny gestures over pending authorization envelopes, with the signer roster surfaced. Renders and gestures; it holds no authority of its own.

sm-attest-auditor

Forensic chain drill

Bidirectional audit over envelope chains — forward walk by predecessor hash, reverse inclusion via Merkle checkpoints. Proves what the substrate emitted, offline.

Foundation

sm-conformance

Signed conformance badges

An Ed25519 signature over a JCS-canonical payload — proof that a runtime passed conformance, re-verifiable offline. Attests the runtime, beneath any single action.

Companion — subject corroboration

A separate concern from the envelope: establishing that the subject an action was performed against was truthful, by asking multiple independent sources the same question. It consumes attested actions; it is not one of the envelope's two claims.

sm-resolver

Corroboration kernel

The source-agnostic kernel: the View contract, a pure diff, and the Corroborator returning AGREE, DIVERGENT, or INSUFFICIENT.

sm-divergence

Divergence detection

Catches a source that lies by omission, tampering, or equivocation by comparing several sources and making any disagreement loud. Reference implementation of the corroboration Internet-Draft.

Ecosystem (downstream). sm-bridge is a NANDA/ANS onboarding and verification on-ramp, and sm-model-governance is a governance consumer for NANDA-compatible registries — both consume attested actions downstream rather than forming part of the envelope itself.