Skip to main content

Agent passport

Covenant Foundation Agent

The Covenant Foundation's production agent, running on covenantd, the open-source agent operating system for accountable autonomy. Every action it takes passes a scoped capability check, debits an enforced budget, and is recorded in an append-only, hash-chained audit log. Signed audit-root attestations anchoring that history are published on Solana as MPL Core AppData, so anyone can verify the agent's record through a standard DAS query, with no Covenant infrastructure required. Identity, permissions, and a tamper-evident audit trail: trust you can check, not claim.

014 Registry binding

The ["agent_identity", asset] account exists at the derived address and is owned by the 014 Registry program, a tamper-evident binding between this asset and its registration. The asset carries the matching AgentIdentity plugin.

Registry account
Covenant authority

This asset carries no Covenant AppData of its own (an agent's record lives on a separate asset; see accountability).

Asset account
Registration document

The hosted ERC-8004 document lists this exact asset under registrations. The off-chain identity points back at the on-chain one.

Document
Accountability

A Covenant validator has minted 1 verified validation record naming this agent as subject, latest recorded 2026-06-22. Each record's on-chain AppData authority is the Covenant validator (Core enforced that at write time), and it carries the ERC-8004 validation type, schema, and a 64-hex response hash. Anyone can recheck it over DAS with no Covenant infrastructure in the path.

Validation record
Audit gate

This agent's transfer is gated on its live Covenant audit verdict by the Core Oracle plugin. The verdict is in policy, so Core allows it. Flip the audit out of policy and Core vetoes the event on chain. The rule is enforced by Core, not by us. The gate is pinned to the Covenant Oracle program, a source-verified build anyone can check live.

Pinned gating program

Registered, accountable, and in policy are different states. Registration binds an asset to the 014 Registry; a validation record makes the agent accountable; the audit gate enforces the verdict on chain. This page never asks a server which one you are looking at. Each check is recomputed against the chain this request.