Signed, chain-linked, self-contained
Each AEA carries every byte needed for independent offline re-derivation — Ed25519 signature, policy hash, matched rule, agent identity, tool, and timestamp. No external fetches. No whispered trust.
- Ed25519 cryptographic signature
- Self-contained — no network needed to verify
- Chain-linked — each AEA references its predecessor
- AMD SEV-SNP hardware attestation proven end-to-end