# sigelo

> Portable, offline-verifiable identity for AI agents. An identity is a genesis document whose SHA-256 is the DID (`did:sigelo:z…`); worlds sign attestations about it; the agent carries them in a bundle that any verifier checks with no network, no registry and no chain; a recovery key committed at creation takes the identity back after a theft. Payment addresses (Monero) are bound to the identity by a cross-signature, never fused with it.

Status: draft. The wire format `sigelo/0` may change until it is frozen at tag v0.2; the keeper (paying) is experimental, stagenet only; nothing has been reviewed outside the project. Packages are version 0.1.0 and are not yet on npm; the Go module path is not yet fixed. Built from commit 648b53fa07bc (2026-10-01).

If you are an agent deciding whether to adopt: read /adopt.md, then /why.md. If you are implementing: /spec.md and /test-vectors.json, and check yourself with `sigelo-verify --conformance test-vectors.json --impl '<your command>'` (/verify.md).

## Start here

- [Adopt sigelo](https://sigelo.io/adopt.md): the one page to follow: identity, a world's challenge, a bundle, verification, the keeper (optional); exact commands
- [Why an agent would use sigelo (WHY.md)](https://sigelo.io/why.md): what an agent gets on day one, by role, compared with alternatives, and what sigelo does not do
- [Quickstart (QUICKSTART.md)](https://sigelo.io/quickstart.md): the full lifecycle in seven steps, with a runnable mock world and recovery tiers

## Specification

- [Specification (SPEC.md)](https://sigelo.io/spec.md): the protocol, wire sigelo/0: signing input, genesis and DID, attestations, bindings, rotation and recovery, bundles, §9 verification algorithm
- [Test vectors (JSON)](https://sigelo.io/test-vectors.json): real signatures from documented seeds; 21 positive entries, 41 negatives, 87 parity cases; sha256 5fe0405db81a841fbab2fff8b9622857988ba321895f9e4fa79354589fb6e3d1
- [Test vectors](https://sigelo.io/vectors.md): how to use the vectors and what each group checks
- [Verify — sigelo-verify](https://sigelo.io/verify.md): sigelo-verify: install, verify a bundle, --conformance, --impl for your own implementation
- [JSON Schemas](https://sigelo.io/raw/schema/bundle.json): JSON Schema 2020-12 for every signed object (12 files under /raw/schema/)
- [did:sigelo — the DID method](https://sigelo.io/did-method.md): did:sigelo: the method name, how a DID is computed, and why resolution is offline via bundles

## Trust and stability

- [Versioning (VERSIONING.md)](https://sigelo.io/versioning.md): what may change, when the wire freezes, what counts as breaking
- [Security policy (SECURITY.md)](https://sigelo.io/security.md): how to report a vulnerability; scope; unaudited areas (mailboxes open; age key and SimpleX address to follow)
- [Threat model (THREAT-MODEL.md)](https://sigelo.io/threat-model.md): attacks defended and, explicitly, not defended
- [Contact — e-mail and SimpleX](https://sigelo.io/contact.md): who answers and how: e-mail, SimpleX, security reports; no form, by design
- [Evidence — what has been tested](https://sigelo.io/evidence.md): what has been tested, with counts measured from the tree

## Machine-readable

- [Site index (JSON)](https://sigelo.io/index.json): wire version, spec and vector sha256s, implementations and versions, expected release artefacts
- [Keeper OpenAPI 3.1](https://sigelo.io/raw/spend/openapi.yaml): the keeper's loopback HTTP surface
- [Full docs in one file](https://sigelo.io/llms-full.txt): adopt, why, quickstart, spec, threat model, versioning, security, Monero §2–§4

## Optional

- [Keeper — paying without holding a key](https://sigelo.io/keeper.md): the keeper: an agent pays through four verbs and never holds a Monero key (stagenet only)
- [sigelo and Monero (MONERO.md)](https://sigelo.io/monero.md): the payment design: one 25-word root, receiving and proving, keepers, delegation, the root ceremony
- [Integrations — MCP server and adapters](https://sigelo.io/integrations.md): MCP server, the moadim and 1f916 adapters, harness configs, with line counts
- [Changelog (CHANGELOG.md)](https://sigelo.io/changelog.md): every change, newest first
- [Mock world (JS)](https://sigelo.io/examples/world.mjs): the issuer side of the quickstart, runnable next to the installed `sigelo` package