v0.1.0 — Public Draft

v0.1.0 — Public Draft

The Agent Delegated Authority Protocol

An open protocol for delegated authority between autonomous AI agents.

Agents can reason probabilistically. Authority cannot.

ADAP is an open protocol. Hardalion created it and maintains the reference implementation. This draft does not replace identity, authentication, OAuth, agent communication protocols, or execution runtimes.

pnpm demo runs the reference path: delegation, signed intent, policy, authorization, execution, and a receipt. pnpm attacks runs the refusals the reference path actually performs: over-delegation, privilege escalation, prompt injection that tries to raise the bound, replay, expiry, and a changed intent after approval. The executor is not called when authority fails.

The receipt is a cryptographically verifiable authorization record. executed is what the governing runtime reported. It is not, by itself, proof that an external system performed the action.

The reference packages are not currently published to npm.