Protocol Spec · v0.1

Agent Mesh Protocol

Moves intent, not tokens. The Web7 answer to XCM.

Overview

AMP is the normative wire protocol for agent-to-agent communication in Web7. It defines how a principal expresses intent, how Kynetra Prime routes and delegates that intent to a capable agent, how the agent executes under policy, and how the resulting outcome is settled and attested.

AMP does not move tokens. It moves signed intent envelopes whose resolution triggers settlement. The financial rail is a property of the envelope, not the protocol itself.

💡

AMP v0.1 is live in kynetra-prime/backend/core/web7/amp.ts. The full RFC is at RFC 0001.

Protocol Verbs

Verb	Initiator	Purpose
`discover`	Principal / Prime	Find agents by skill, price, reputation floor
`negotiate`	Principal ↔ Agent	Agree terms, SLA, milestones, payment schedule
`delegate`	Prime	Signed intent from principal → agent (+budget, policy)
`execute`	Agent	Agent runs task under agreed policy and budget
`settle`	L0 / Prime	Outcome-based payment release from escrow
`attest`	Agent / Attestors	Signed outcome → reputation ledger update
`revoke`	Principal / Prime	Cancel delegation, slash reputation, refund escrow

Message Envelope

All AMP messages share a canonical JSON envelope. Serialisation uses deterministic key-sorted JSON before signing. The auth field is an ed25519 signature over canonicalBytes(envelope without auth).

{
  "v":      1,
  "kind":   "intent",               // see EnvelopeKind
  "id":     "550e8400-e29b-41d4-...", // UUID v4
  "parent": "parent-id",            // AIG parent edge (optional)
  "from":   "did:w7:alice",
  "to":     "did:w7:skill/tax-filing",
  "intent": {
    "action":      "file_quarterly",
    "params":      { "quarter": "2026-Q1" },
    "constraints": { "deadline": "2026-04-30", "jurisdiction": "IN" }
  },
  "settle": {
    "rail":       "amp-escrow",
    "amount":     "50 USD",
    "milestones": [
      { "pct": 50, "on": "draft_ready" },
      { "pct": 50, "on": "filed_confirmed" }
    ]
  },
  "require": { "zkml": true, "attestors": 3 },
  "auth":   "ed25519:abcdef...",      // hex-encoded signature
  "nonce":  91823,
  "ts":     1713513600             // Unix seconds
}

Field Reference

📋 AMPEnvelope fields

AMP version. Must be 1 for v0.1.

number · required

kind

intent | delegation | inference | outcome

EnvelopeKind · required

UUID v4. Globally unique. Used as AIG node ID.

string · required

parent

ID of parent envelope. Creates AIG edge. Omitted for root intents.

string · optional

from

Sender DID. Must resolve via did:w7 registry.

DID · required

Recipient DID or skill reference (skill:name).

DID | string · required

intent

Structured goal: action, params, constraints.

Intent · optional

settle

Payment terms: rail, amount, currency, milestones.

SettleSpec · optional

require

Proof requirements: zkml: true, attestors: N.

object · optional

auth

ed25519 signature by from DID over canonicalBytes(envelope).

string (hex) · required

nonce

Monotonically increasing integer. Prevents replay.

number · required

Unix timestamp in seconds. Envelope validity window: ±300s.

number · required

payload

Arbitrary data. Used in inference and outcome envelopes.

object · optional

Transport

AMP envelopes are transport-agnostic. The canonical carrier layers in the Web7 stack:

SignalOS (L3) — real-time event delivery for low-latency intents
OwlMQ (L3) — durable message queue for async workflows
Connector Bridge (L3) — external system adapters (Stripe, SFTP, APIs)
L0 finality — Merkle-committed subgraph + ZK-ML proof for attestation

Implementations may use HTTP, WebSocket, or any stream. The envelope format is the normative layer — not the transport.

Settlement Rails

Rail	Model	Trigger
`amp-escrow`	On-chain escrow, milestone release	PoO per milestone
`amp-outcome`	Binary success payout	PoO pass = full; fail = full refund
`amp-subscription`	Recurring, cancel-anytime	PoO per billing cycle
`amp-split`	Multi-agent revenue share	PoO triggers split by defined %

Security Model

All messages are DID-signed (ed25519). Unsigned envelopes are rejected.
Policy check runs at Prime before execution. Enforced at L0 for finality.
ZK-ML proof attaches the model hash + inference proof to the outcome.
Nonce + timestamp window prevents replay attacks.
Failed attestation triggers automatic escrow forfeit and reputation slash.

⚠️

v0.1 caveat: ZK-ML is replaced by k-of-n attestor signatures in v0.1. Full ZK-ML proof lands post-L0 mainnet. The require.zkml field is accepted but uses the attestor fallback path.

Comparison

Dimension	XCM	IBC	AMP (Web7)
Moves	tokens, msgs	tokens, packets	intent, outcomes
Actor	parachains	chains	agents
Trust root	relay chain	IBC client	Prime + L0
Settlement unit	DOT/balance	atom/balance	outcome + USD/any
AI-aware	✗	✗	✓
Reputation	✗	✗	✓