AgentEnvelope
Answers whether a principal has valid, scoped cryptographic authority to perform the requested action.
IdentityScoped authorityResource boundariesOperation boundariesSigned capabilitiesTime and usage constraints
Authority is not the same as evidence fidelity.
AgentEnvelope proves whether an action is authorized. Vortex DFS evaluates whether the evidence justifies honoring that authority under current conditions.
Two checks, one boundary.
AgentEnvelope and Vortex DFS do different jobs. Keeping them separate makes the final decision easier to audit.
01
Scoped authority is validated.
02
Evidence fidelity is scored.
03
Runtime and policy constraints are applied.
04
The action executes, escalates, or blocks.
Vortex DFS
Answers whether the available security evidence is trustworthy enough to honor that authority under current conditions.
AgentEnvelope validates scoped authority.
Vortex DFS evaluates whether evidence justifies honoring that authority.
Runtime and policy constraints decide whether to execute, escalate, or block.
Core Separation
Identity
Authority
Evidence fidelity
Runtime context
Decision