AOAP™

AOAP is the four-endpoint protocol behind AGLedger — mandate, receipt, verdict, fulfillment — Ed25519-signed and hash-chained, verifiable offline by any tool, indefinitely.

Agentic Operations and Accountability Protocol™ · patent pending

AOAP is the protocol behind AGLedger. It defines how mandates are recorded, how receipts are signed, how verdicts are rendered, and how delegation chains maintain a provable record — across any LLM, any provider, any organization.

The protocol matters because the records do. An audit trail written to a protocol outlives the vendor that built it. Entries signed with Ed25519 and hash-chained per the spec can be verified offline by any tool, indefinitely — whether or not AGLedger LLC is still in business. That is the foundation the rest of the product is built on.

The model

Every unit of work follows the same lifecycle:

Mandate — what needs to be done, by when, under what constraints

Receipt — what was actually delivered, with evidence

Verdict — accepted or rejected, rendered by the principal

Intent is tracked from the start. The mandate is locked before work begins — not reconstructed after. When context resets, the agent recovers from the recorded state, not a summary of a conversation that no longer exists.

The lifecycle is a 17-state machine that supports negotiation, rework, disputes, delegation, and cancellation. Most mandates follow the happy path: ACTIVE → RECEIPT_ACCEPTED → FULFILLED.

Integration

Any system that speaks HTTP can participate — AI agents, deterministic services, enterprise applications, CI/CD pipelines. The protocol is API-first and framework-agnostic.

Native API — fastest, most token-efficient. The primary integration path.

TypeScript SDKnpm install @agledger/sdk

Python SDKpip install agledger

MCP — curated tool profiles scoped by role, optimized for token efficiency

No rewrites. Your existing agents add AGLedger calls alongside what they already do. Works with LangChain, CrewAI, AutoGen, or any orchestration framework — AGLedger is the accountability layer underneath, not a replacement.

Principles

Track intent from the start — the mandate exists before the work begins. If you bolt on accountability after the fact, you're back to reconstruction.

Record, don't judge — AOAP tracks what was agreed, what was delivered, and whether the principal accepted it. It does not evaluate whether the work was good. The principal is always the judge.

Blind by default, transparent by consent — encrypted mode is available. Parties choose what AGLedger can see. The protocol supports end-to-end encryption of mandate criteria and receipt evidence.

Every Hub is a witness, not a custodian — in federated deployments, Hubs coordinate delegation across organizational boundaries. They never hold business data. Privacy is structural, not policy.

Contract types & custom schemas

Contract types define the schema for a mandate's criteria and a receipt's evidence. They are the vocabulary agents use to describe what they're committing to.

AGLedger ships 11 built-in types — procurement, deliverables, data processing, transactions, orchestration, communication, authorization, infrastructure, destructive operations, analysis, and coordination. Each has tolerance rules and has been tested with agent experiments across providers.

Use ours — battle-tested, ready out of the box

Add your own — define custom contract types and schemas via the API

Share with partners — federated partners can use your schemas so both sides speak the same language

All schemas are JSON Schema draft-07.

Cryptographic integrity

Established standards at every layer. No proprietary algorithms. Your keys — AGLedger never generates or holds private key material.

Audit vaultSHA-256 hash chain + Ed25519 signaturesWebhooksHMAC-SHA256 (Stripe-style)API authHMAC-SHA256 bearer tokensFederationRFC 9421 HTTP Message Signatures + Ed25519Criteria relayX25519 ECDH + AES-256-GCMCanonicalRFC 8785 (JCS)Encrypted modeAES-256-GCM / AES-256-GCM-SIV

Conformance levels

AOAP defines three levels of implementation depth. Start where you are. The protocol grows with you.

Level 1 — Record Keeper

8-state lifecycle, receipts, delegation chains, contract types.

Level 2 — Audit Provider

Full 17-state lifecycle, tamper-evident audit chain, settlement signals.

Level 3 — Full Service

Tolerance checking, encryption, accessors, disputes, federation.

AOAP defines the protocol AGLedger implements. Specification documentation and reference implementations are available to licensees. Implementation rights flow through a license agreement from AGLedger LLC.

Patent pending — audit vault architecture and federation protocol.