Intent-Output Binder
Tamper-evident binding between what an agent was told to do and what it did — carried in the image, fail-closed to the wrong key.
The problem
/ 01Recovered outputs often arrive without their governing intent, so reviewers cannot confirm scope, constraints, or agent identity. The binder seals intent+output into a carrier so extraction proves the binding or fails closed.
What it does
/ 04Binds an intent (goal, constraints, optional agentId) and output text into a carrier image.
Returns a binding ID, carrier report (bytesEmbedded, capacityRemaining, encrypted, channelSelection), and the sealed carrier.
Extracts intent + output with key verification and optional output match check; wrong key fails closed.
Lists bindings and fetches a binding record by ID.
Who it’s for
/ 03- Agent operators needing verifiable intent-output binding
- Compliance teams auditing agent-decision scope
- Security reviewers validating recovered outputs against registered intent
In context
/ 01Pairs with Sovereignty (agent governance) and the Stego Audit Carrier (audit-event sealing).
