w⁴iya connects verifiable identities, signed mandates and a deterministic gateway check. The aim is to compare a requested action with the authority granted to that agent before an endpoint executes it.
Evidence after action
The evidence chain connects the requested action, the applicable mandate, the decision and the execution result. Receipt work is in progress. An allowed request must not be confused with a successfully executed action.
Tested in an arena
The supplied evaluation compares w⁴iya arena C2 with other approaches in AgentDojo. These are reported experimental results with a simulated human. They do not establish complete protection in a production integration.
Identity. Binding. Authority.
Identity, authority and tested evidence — four connected objects.
Design examples with fictional data. These are not real passports, ratings or granted mandates.
Organisation passport
Who stands behind the agent? Company identity, linked agents and evidence at a glance.
4e 36 d1 94 eb 12 8f e8 ff d0 9d 0c 45 5f 1a 4a 8f 16 86 44 14 59 06 b7 1f 36 5e e7 2f 6c cf 73 65 3d 8d 83 c0 61 92 84 76 2e 1e a0 6b 4f ef 60 89 68 4f 5d 13 6e a9 6d 64 6b 4e 36 d1 94 eb 12 8f e8 ff d0 9d 0c 45 5f 1a 4a 8f 16 86 44 14 59 06 b7 1f 36 5e e7 2f 6c cf 73 65 3d 8d 83 c0 61 92 84 76 2e 1e a0 6b 4f ef 60 89 68 4f 5d 13 6e a9 6d 64 6bOrganisation · DEMO
W<<WHO<WHOSE<WHAT<WHERE<<
Company passport
Musterwerk Industrie GmbH
Cologne · DE · Demo organisation
4.82REGISTRY RATING / 5
Derived from completed transactions. No workflow attestation. Illustrative value.
Validity
2026-06-14 → 2027-06-14
EXAMPLE
Bound agent
procurement-agent · rev 4
REFERENCE
Mandate
Separate object
1 LINKED
Evidence
Attestations disclosed
2 DISCLOSED
Agent passport
Which agent is acting? Identity, key binding and responsible organisation at a glance.
4e 36 d1 94 eb 12 8f e8 ff d0 9d 0c 45 5f 1a 4a 8f 16 86 44 14 59 06 b7 1f 36 5e e7 2f 6c cf 73 65 3d 8d 83 c0 61 92 84 76 2e 1e a0 6b 4f ef 60 89 68 4f 5d 13 6e a9 6d 64 6b 4e 36 d1 94 eb 12 8f e8 ff d0 9d 0c 45 5f 1a 4a 8f 16 86 44 14 59 06 b7 1f 36 5e e7 2f 6c cf 73 65 3d 8d 83 c0 61 92 84 76 2e 1e a0 6b 4f ef 60 89 68 4f 5d 13 6e a9 6d 64 6bAgent passport · DEMO
Between a requested tool call and its execution is a check: who is acting, under which mandate — and does this exact action fit within its limits?
Agent requests an action
Identity · mandate · tool · exact arguments
↓
Gateway checks
Identity and binding, allowed actions, counterparties, limits and the applicable policy.
Deterministic policy check
Keys stay in the gateway.
The agent never sees them.
↓
Allowed
↓
Tool call through the gateway
The gateway authenticates the exact checked call. The agent receives the result — no keys.
↓
Action receipt
Request, mandate, decision and actual result belong together.
Denied
↓
Action stops
No execution through the checked gateway path. The reason for denial is traceable.
Approval required
↓
A person decides
The action does not execute while approval is pending.
↶
Check again
After approval: same action, same arguments and a valid grant. Only then can execution be allowed.
Schematic explanation of a controlled execution path. Actual coverage must be verified for each integration. Work on the complete receipt chain is ongoing.
Organisation