Imagine an AI agent receives a valid, signed delegation to perform an action.

The user later revokes that delegation in another system.

The signature is still valid. The token may not have expired. But should the agent still be allowed to act?

Cryptographic validity and current delegated authority are two different questions.

OAuth introspection, short-lived credentials and existing authorization systems address important parts of this problem. But we wanted to explore one specific challenge: checking whether a delegated authority path is still active when agents and issuers operate across different trust domains.

We built GATE — Authority Verification Network as an experimental Developer Preview to investigate this.

Try the live demonstration

Our hosted sandbox uses real HTTP requests to demonstrate three decisions:

  1. Two authority paths are active → VALID / ALLOW
  2. One path is revoked, but another survives → VALID / ALLOW
  3. Both paths are revoked → INVALID / DENY

The demo uses a synthetic authority graph, not a third-party identity provider.

Try the interactive demonstration

Explore the source code on GitHub

GATE also exposes an API for registering ES256 issuer keys and submitting signed authority events.

What we're not claiming

GATE currently runs on a single Canadian primary, without production regional replicas or a guaranteed external issuer propagation time. It does not replace authentication, OAuth, application policy enforcement or an independently audited production authorization system.

We're looking for developers who work with AI agents, MCP tools, delegated permissions or cross-domain authorization.

I'd especially like to hear your thoughts on three questions:

  • How do you currently handle upstream revocation for delegated agents?
  • Is this already adequately solved by your existing stack?
  • Would a separate authority-state verification service make integration easier, or just add another dependency?

We're inviting a small group of independent developers to evaluate the API with their own authority sources.

Join the GATE external developer beta

Feedback and criticism are welcome.