WorldAuth™ · Machine-native infrastructure for autonomous systems
WorldAuth prepares existing systems, software and infrastructure for AI agents, autonomous operation and agentic commerce through DMI, Authority, Runtime and Evidence.
Built on open standards
01 Position
Knowing who someone is does not tell you what they are allowed to do. WorldAuth is built for the second question — the control point between principals, autonomous agents and consequential systems — and produces evidence of the answer.
1
Control point. Every consequential machine action passes a Gate before it happens.
3
Outcomes. Allow, Step-up or Deny — signed, attributable, nothing else.
0
Personal data in a Key or a Receipt. Authority travels; identity stays home.
Open
Public protocol, schemas and test vectors. Any party can run a Gate.
02 The chain
Bounded authority, checked at the point of action — before anything happens, never after.
03 What a Receipt proves
The Gate verifies signed artefacts it already holds. Nothing phones home to decide; nothing central sees the request.
A Receipt records what was authorised — never a person's documents, face or history. There is no ledger of who did what.
Ed25519 over an RFC 8785 canonical form. Any party can verify the Receipt; only the Gate could have issued it.
Guest · Room 412
DecisionAllow
A specimen, not a production decision. Verified by any party holding the Gate's public key; readable by people and by authorised agents.
04 Platform
DMI makes systems directly operable by machines; Authority governs consequential action; Runtime executes safely; Evidence makes outcomes verifiable. Key and Gate remain the core authority primitives.
Carries proof of authority.
A short-lived, cryptographically bound presentation of delegated authority — derived from a Mandate, scoped to the exact request. No identity, no reputation, no standing credential to steal.
Checks before anything happens.
The independent enforcement point. It verifies the Key locally, coordinates depleting authority — budgets, quotas — when needed, and returns Allow, Step-up or Deny with a signed Receipt.
Identity, KYC and KYB, KYA, insurance and capability evidence can inform whether a Mandate is granted. They are never authority themselves. This is the line that keeps WorldAuth neutral: evidence informs authority; it does not become it.
05 Who it serves
Whether you fund it, run it or are accountable for it, WorldAuth gives you the same thing: proof of what was permitted, before the action and after it.
A neutral protocol position in the agent economy: the control point every consequential machine action must pass. Open standards, sovereign deployment and governance built for institutions.
Investor enquiries 02Let agents book, buy and act for your business under limits you set — one Mandate, one budget, one window — with a Receipt for every action. Commerce comes first, through WorldAuth DMI.
See Commerce 03Delegated authority at scale: sovereign Gates in your jurisdiction, audit-grade Receipts without a global ledger, and mandatory step-up wherever a decision affects a person.
Talk to us 04A small public protocol on open standards: schemas, conformance vectors and a reference Gate. Build on it, certify against it, or compete with it.
Read the protocol06 Applications
The same chain, expressed for the environments where delegated authority is already failing.
Availability is stated before any engagement begins. Nothing on this page is in production use.
07 Protocol
Everything a Gate needs to decide is in the signed artefacts it holds — which is why the decision is local, and why any independent implementation can prove it agrees with the reference.
8
Signed objects: Mandate, Key, Challenge, Decision, Delegation, Receipt, Status, Revocation
3
Decisions. Allow, Step-up, Deny — nothing else
RFC 8785
One canonical form; JSON Schema 2020-12 for every object
Ed25519
Signatures today; hybrid post-quantum suites on the roadmap
Assembled from open standards. What WorldAuth adds is the authority semantics.
Where a standard exists for a layer, the protocol adopts it. Where none exists — the Mandate, the two-plane Gate, the Receipt — WorldAuth publishes its own specification and intends to submit it for open standardisation.
08 Trust
No universal registry, no global reputation score, no central surveillance of every transaction. WorldAuth holds operational trust metadata — not the world's identities or activity.
Status Protocol v0.1 in draft · reference implementation in development · not yet in production useTrustWhat exists todayVulnerability disclosure
09 Outlook
Your AI can book a hotel but cannot spend beyond your limit. A contractor can enter the areas they need but nowhere else. A business system can access the information required for a task and nothing more. A customer can send an AI assistant to transact with a company they have never used before.
Authorised activity moves faster because permission can be proved. WorldAuth is building toward that world.
10 Company
UIE builds and operates intelligent infrastructure. WorldAuth is the machine-native platform spanning DMI, Authority, Runtime and Evidence: a neutral layer that works across existing protocols, systems and deployment models.