Sign a permission
Provared, draft version 0. Evidence, not a verdict.
This page signs a permission (a slip) with a passkey on this device, and gives you the signed file to keep. Everything happens in this browser: the page loads only its own files and sends nothing anywhere. The permission's words are yours; the page only checks that they are well formed and asks your passkey to sign them.
-
The permission's words
The permission is written as JSON: the agent (its name and its two public keys, which the agent's software prints when it makes them), the actions it may take, the limits, the conditions, the stated rules, with whom, from when until when, and why. The text below is a starting point; change it to what you allow. If you opened this page from a link the agent's software printed, the starting point came with the link, with the agent's public keys in it: that part of the link stays in your browser and is never sent to any server. Names beginning
provared.are from the format's shared list, so that any checker knows what they mean. -
Sign it with your passkey
The first time on this device, your device asks twice: once to make a passkey for this website, and once to sign. The passkey is made for this website only and is kept by your device; this page remembers only its public key and identifier, in this browser, so that you can sign again later.
The thumbprint of your passkey, which whoever checks the record names as the passkey they trust (
--issuer): -
Keep the signed permission
Hand it to the agent's software: it is the first line of the agent's book.
The permission's fingerprint, which every receipt under it names:
Cancel a permission you signed
A cancellation is signed with the same passkey as the permission. Paste the permission's fingerprint, sign, and keep the file: hand it to the agent's software, which acknowledges it, and keep your own copy for a checker.
What this page does not do: it does not check that the permission is wise, and it does not make the agent keep to it. The agent's software asks the check before acting and writes the receipts; a checker holds them against this permission. This page needs JavaScript and a device that can use passkeys on this website.