AIB — Protocol Explorer | Interactive Diagrams

CORE Passport Lifecycle

An Agent Passport goes through a defined lifecycle. Every state transition is recorded with an Ed25519 signed receipt.

Active flow

Translation

Revocation

Audit receipt

CORE Credential Translation

AIB translates credentials between protocol formats in under 1ms. Click a path to see the field mapping.

// A2A Agent Card
{
  "name": "Booking Agent",
  "url": "https://api.example.com",
  "skills": [
    { "id": "booking", "name": "Booking" },
    { "id": "cancel", "name": "Cancel" }
  ]
}
      

→

<1ms

// MCP Server Card
{
  "name": "Booking Agent",
  "server_url": "https://api.example.com",
  "tools": [
    { "name": "booking",
      "inputSchema": { ... } },
    { "name": "cancel",
      "inputSchema": { ... } }
  ],
  "_aib_source": "a2a"
}
      

skills → tools

url → server_url

_aib_source added

SECURITY Policy Engine

12 rule types are evaluated before every action. A single "block" severity violation denies the request.

SECURITY OIDC Federation

Bring your own identity provider. AIB accepts Google, Entra, Okta, Auth0 tokens with full JWKS verification and audience checking.

INFRA System Architecture

AIB runs on Supabase Edge Functions with PostgreSQL, Ed25519 signing, and Netlify for the frontend. CI/CD via GitHub Actions.

CORE Agent Request Pipeline

Every API call flows through 4 deterministic stages. Auth · Policy · Translate · Receipt — under 10ms. No stage can be skipped.

Chaque appel API traverse 4 étapes déterministes. Auth · Policy · Translate · Reçu — en moins de 10ms. Aucune étape ne peut être sautée.

Passport Auth Policy Engine Protocol Translate Signed Receipt

// Ed25519-signed receipt — every AIB operation
{
  "receipt_id": "rcpt_01JQZB7...",          // URN unique
  "passport_id": "urn:aib:passport:...",     // Agent DID
  "operation": "passport.create",
  "intent": "Provision identity for CI pipeline agent", // Art. 12
  "risk_level": "low",                         // low|medium|high|critical
  "human_oversight": true,                   // Art. 14
  "decision_rationale": "Auto-approved: low risk, valid policy",
  "affected_persons": "none",
  "invocation_chain": ["did:web:user", "did:web:agent"],
  "data_accessed": ["passports", "signing_keys"],
  "timestamp_utc": "2026-04-05T14:30:00Z",
  "previous_hash": "sha256:a4f2...",           // Hash chain
  "signature": "ed25519:7f3c9a..."             // Tamper-evident
}
    