{"slug": "show-hn-scopetrail-audit-receipts-for-multi-hop-agent-delegation", "title": "Show HN: ScopeTrail – audit receipts for multi-hop agent delegation", "summary": "ScopeTrail, a new Apache 2.0 TypeScript library, has launched to provide audit receipts for multi-hop agent delegation, minting Ed25519 signatures over JCS (RFC 8785) and storing them in an AT Protocol PDS. The library builds and validates delegation chains from raw tokens, storing only SHA-256 digests and verifying statelessly without a callback to the issuer, addressing whether an action three steps from the user stayed inside what the user authorized. The next milestone is mint-by-default inside an open-source MCP gateway.", "body_md": "With the growth of the agentic economy and the ability of agents to manage wallets and make payments it's critical that we have a mechanism to audit their payment behavior. And to complicate matters, agents are invoking subagents to work faster.\n\nWhen an agent hands work to another agent, OAuth Token Exchange (RFC 8693) nests an \"act\" claim at each hop. Those claims are informational, not enforceable. Each actor in the process (e.g., your identity manager, your gateway, each agent) logged its activity — and no artifact anywhere answers \"did this action, three steps from the user, stay inside what the user actually authorized?\" Cloudflare (Wallets, and Cloudflare OS's Gatekeepers) enforces scope at call time against its own ledger, and Block's Buzz mints an owner→agent authorization a third party can verify offline without calling Block — ScopeTrail is the layer above both, proving scope actually attenuated across every hop and returning a verdict on the action at the end.\n\nScopeTrail is a TypeScript library (Apache 2.0) that lives above the multi-agent transaction and documents the full chain by: - Building and validating the chain from raw tokens - Minting and signing a receipt with Ed25519 over JCS (RFC 8785), and - Storing the receipt in an AT Protocol PDS.\n\nThe user can then retrieve and verify the receipt including the hop and scope if the agents went beyond their remit.\n\nRaw tokens are never stored — only SHA-256 digests. Verification is stateless: no callback to the issuer is needed at verify time, no vendor in the loop.\n\nYou can try it now! Verify a live receipt by:\n\n```\n  curl -sO https://scopetrail.github.io/.well-known/jwks.json\n  npx -y --package=@scopetrail/core view-receipt \\\n    at://did:plc:bty3gmskhla7rwblq5zl5jm5/dev.scopetrail.auditReceipt/00MSQDN0UT747ADDB2C4BB25420974 \\\n    --jwks jwks.json\n```\n\nThis view-receipt call resolves the DID, fetches the receipt, checks its Ed25519 signature against the JWKS downloaded before the call, and prints the delegation chain.\nThe next milestone will be mint-by-default inside an open-source MCP gateway. If you work on gateways, an agent platform, or an identity product, I'd like to hear where this breaks.\n\nComments URL: [https://news.ycombinator.com/item?id=49800563](https://news.ycombinator.com/item?id=49800563)\n\nPoints: 1\n\n# Comments: 0", "url": "https://wpnews.pro/news/show-hn-scopetrail-audit-receipts-for-multi-hop-agent-delegation", "canonical_source": "https://github.com/scopetrail/scopetrail", "published_at": "2026-09-22 13:00:38+00:00", "updated_at": "2026-09-22 13:25:51.708096+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-safety", "developer-tools"], "entities": ["ScopeTrail", "Cloudflare", "Block", "Buzz", "AT Protocol", "OAuth Token Exchange", "RFC 8693", "RFC 8785"], "alternates": {"html": "https://wpnews.pro/news/show-hn-scopetrail-audit-receipts-for-multi-hop-agent-delegation", "markdown": "https://wpnews.pro/news/show-hn-scopetrail-audit-receipts-for-multi-hop-agent-delegation.md", "text": "https://wpnews.pro/news/show-hn-scopetrail-audit-receipts-for-multi-hop-agent-delegation.txt", "jsonld": "https://wpnews.pro/news/show-hn-scopetrail-audit-receipts-for-multi-hop-agent-delegation.jsonld"}}