{"id":"agent.pass.portable.v1","title":"Agent Pass, portable forms: the same Pass as a JWT and as a W3C Verifiable Credential","unit":"one compact JWS per request; expires with the Pass it encodes (3 hours from the evaluation)","chain_set":"eip155:8453 (Base)","window":"the newest evaluation of the registration under agent.pass.v2 that holds, is signed and has neither expired nor been revoked","definition":"The Pass of agent.pass.v2, unchanged in its eight checks, issued on request in two more encodings with the same Ed25519 key (key id afg-pass-2026-10): a JWT (alg EdDSA; iss https://agenticfinancegraph.com; sub the ERC-8004 identity eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432:<token id>; iat, nbf and exp equal to the Pass's issue and expiry; jti the pass_id; the claim pass holds the Pass body with holds, fails, not_checked and checks) and a W3C Verifiable Credential in the JWT encoding of VC Data Model 1.1 (iss did:web:agenticfinancegraph.com; the vc claim with type VerifiableCredential and AgentPassCredential and the same facts in credentialSubject).","method":"Signed on demand on our server from the stored Pass row; nothing new is measured. Keys: /.well-known/jwks.json (JWK, OKP Ed25519) and /.well-known/did.json (did:web document, JsonWebKey2020); the same key as /.well-known/afg-pass-keys.json. Served at /api/pass?agent=<token id>&format=jwt, &format=vc and &format=portable (both, with verification notes).","excludes":["Registrations without a Pass that holds right now: the request answers 404 and the summary says which checks failed or could not be taken.","Revoked or expired Passes."],"does_not_assert":["That the agent is safe, verified, trusted or compliant: a Pass says what was checked and when.","Anything after exp.","Who operates the agent: the subject is a registration, not a person or a company."],"assumptions":"A verifier trusts this key for statements by agenticfinancegraph.com and checks exp before relying on the claims.","known_gaps":"The VC uses the 1.1 JWT encoding because the libraries agents use today (did-jwt-vc, used by Catena's ACK) verify that form; a VC 2.0 JOSE form can be added with the same claims.","intended_use":"Carrying the Pass into systems that verify JWTs or Verifiable Credentials offline: wallet policy engines, agent frameworks, KYA flows.","not_intended_for":"A credit score, a licence, a sanctions screen, or any judgement about a natural person.","source":"AFG-Pulse Agent Pass (agent_pass rows), signed by the issuer key","since":"2026-11-07","revisions":[],"body_sha256":"de169ea0d64bc99b458e74f0d85ab13df983c1a54ab4df4c743e600cecae8f75","url":"https://agenticfinancegraph.com/def/agent.pass.portable.v1","ladder":"https://agenticfinancegraph.com/ai-agent-liveness-methodology-l0-l9-ladder","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Agentic Finance Graph — https://agenticfinancegraph.com"}