SdJwt.Net.AgentTrust.Policy 1.0.3

.NET 8.0 This package targets .NET 8.0. The package is compatible with this framework or higher. .NET Standard 2.1 This package targets .NET Standard 2.1. The package is compatible with this framework or higher.
There is a newer version of this package available.
See the version list below for details. 
dotnet add package SdJwt.Net.AgentTrust.Policy --version 1.0.3
                    


                    

                
NuGet\Install-Package SdJwt.Net.AgentTrust.Policy -Version 1.0.3
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="SdJwt.Net.AgentTrust.Policy" Version="1.0.3" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="SdJwt.Net.AgentTrust.Policy" Version="1.0.3" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="SdJwt.Net.AgentTrust.Policy" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add SdJwt.Net.AgentTrust.Policy --version 1.0.3
                    


                    

                
#r "nuget: SdJwt.Net.AgentTrust.Policy, 1.0.3"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package SdJwt.Net.AgentTrust.Policy@1.0.3
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=SdJwt.Net.AgentTrust.Policy&version=1.0.3
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=SdJwt.Net.AgentTrust.Policy&version=1.0.3
                    


                            Install as a Cake Tool

SdJwt.Net.AgentTrust.Policy

Policy evaluation layer for agent trust decisions, including rule-based allow/deny logic and delegation constraints.

Install

dotnet add package SdJwt.Net.AgentTrust.Policy

What This Package Provides

  • IPolicyEngine abstraction for policy evaluation.
  • DefaultPolicyEngine for wildcard rule matching and deterministic allow/deny decisions.
  • PolicyBuilder for fluent rule configuration.
  • Delegation model support via DelegationChain and DelegationTokenOptions.
  • Constraint model (PolicyConstraints) for max token lifetime, required disclosures, and capability limits.

Quick Start

using SdJwt.Net.AgentTrust.Core;
using SdJwt.Net.AgentTrust.Policy;

var rules = new PolicyBuilder()
    .Deny("*", "payments", "Delete")
    .Allow("agent://ops-*", "payments", "Read", c =>
    {
        c.MaxLifetime(TimeSpan.FromSeconds(45));
        c.RequireDisclosure("ctx.correlationId");
        c.Limits(new CapabilityLimits { MaxResults = 100 });
    })
    .Build();

var policyEngine = new DefaultPolicyEngine(rules);

var decision = await policyEngine.EvaluateAsync(new PolicyRequest
{
    AgentId = "agent://ops-eu",
    Tool = "payments",
    Action = "Read",
    Resource = "merchant/42",
    Context = new CapabilityContext { CorrelationId = "corr-1" }
});

if (!decision.IsPermitted)
{
    throw new InvalidOperationException(decision.DenialReason);
}

Rule Semantics

  • Rules are evaluated by descending Priority.
  • * wildcard matching is supported for agent/tool/action/resource patterns.
  • First matching rule decides the outcome.
  • Deny rules should have higher priority than allow rules.

Delegation Notes

  • DefaultPolicyEngine validates delegation depth (Depth <= MaxDepth).
  • Optional AllowedActions in a delegation chain are enforced before rule matching.
  • Use short lifetimes and explicit disclosures for delegated actions.
  • SdJwt.Net.AgentTrust.Core
  • SdJwt.Net.AgentTrust.AspNetCore
  • SdJwt.Net.AgentTrust.Maf
Product Compatible and additional computed target framework versions.
.NET net5.0 was computed.  net5.0-windows was computed.  net6.0 was computed.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 was computed.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 is compatible.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 is compatible.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
.NET Core netcoreapp3.0 was computed.  netcoreapp3.1 was computed. 
.NET Standard netstandard2.1 is compatible. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen60 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (5)

Showing the top 5 NuGet packages that depend on SdJwt.Net.AgentTrust.Policy:

Package Downloads
SdJwt.Net.AgentTrust.Maf

Middleware-style adapter for applying agent trust capability tokens to agent tool calls.
SdJwt.Net.AgentTrust.AspNetCore

Inbound middleware and authorization integration for agent trust capability tokens.
SdJwt.Net.AgentTrust.A2A

Agent-to-Agent (A2A) protocol integration for multi-agent delegation, agent card discovery, and cross-agent trust chain validation.
SdJwt.Net.AgentTrust.Mcp

Model Context Protocol (MCP) integration for agent trust capability token propagation and verification in MCP tool servers and clients.
SdJwt.Net.AgentTrust.Policy.Opa

Open Policy Agent (OPA) integration for externalized agent trust policy evaluation over HTTP.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
1.0.6 195 5/10/2026
1.0.5 201 5/9/2026
1.0.4 184 4/30/2026
1.0.3 176 4/28/2026
1.0.3-alpha.0.2 58 4/28/2026
1.0.2 159 3/13/2026