Agent passports

Coming next. Agent passports are being built in wave T1.

An agent passport says who an AI agent is and who stands behind it.

• Owner binding. Every agent belongs to a verified business or person on TatvaPay.
• Keys. The agent signs requests with an Ed25519 key, published as a JWK. Keys can be rotated and revoked.
• Agent header. Each request carries a signed "I am an AI agent" header that sellers can verify.
• Spend class and trust score. Used by the risk rules to decide what the agent may do.

A revoked passport stops every mandate bound to that agent.