EKYA · module 04

Electronic Know Your Agent

Every autonomous agent carries a cryptographic identity, a named human principal, a delegated scope, a time-bounded mandate and a spend ceiling. Agents are governed technology actors, never independent decision authorities.

Inject scenario

Agent identity card

Issued by the registry, attested and time-bound

A = 0.97

Agent ID: AGT-SBI-00481
Model: Treasury-Agent-v7
Principal: Corporate Treasurer
Authority: FX settlement recommendations
Transaction cap: ₹5 crore
Permitted systems: Treasury API · FX Quote API
Prohibited: Create beneficiary · Change AML rule · Override sanctions
Expiry: 4 hours from attestation

Spend utilisation

41%

Injection resistance

89%

Authority equation

A = Identity × Delegation × Scope × TimeValidity × PolicyIntegrity

Identity

1.00

Delegation

1.00

Scope

0.97

TimeValidity

1.00

PolicyIntegrity

1.00

A_agent =0.970

Live action request

Pick what the agent tries to do

PERMIT · Recommend FX settlement

Scope check: inside delegated scope
Cap check: ₹4.20 crore vs ₹5 crore ceiling — within
Authority product: 0.970 (floor 0.60)

Signed authority token

Presented on every downstream call

{
  "agent_id": "AGT-SBI-00481",
  "principal": "Corporate Treasurer",
  "model": "Treasury-Agent-v7",
  "scope": [
    "fx_quote",
    "fx_settlement_recommendation"
  ],
  "prohibited": [
    "create_beneficiary",
    "change_aml_rule",
    "override_sanctions"
  ],
  "txn_cap_inr": 50000000,
  "expires_in_seconds": 14400,
  "attestation": "hardware_backed",
  "signature_alg": "ML-DSA-65 (PQC)",
  "authority_product": 0.97
}

Regulator-facing explanation

Control family, audit record and reporting posture

The deterministic layers above run without AI. Generate a narrative to add a plain-language explanation of the current state for reviewers and supervisors.