Possession - who has the ball - name reserved; first release in development.

Device-bound authentication with DPoP (Demonstration of Proof-of-Possession) tokens for enhanced security

OAuth 2.0 helpers for IT-Wallet flows, including Pushed Authorization Requests, PKCE, DPoP, JAR/JARM utilities, access-token handling, wallet/client attestation helpers, and MRTD proof-of-possession support.

This package implements BLS12-377 in TypeScript. It also contains functions for the generation of BLS proofs of possession, as done in [Celo](https://github.com/celo-org/celo-monorepo).

Provider-neutral, deterministic verifier SDK for bounded proof-of-possession authority — a typed TypeScript reimplementation of the Bounded Authority Protocol verification profiles (wire contract-majors 1, 2, and 3).

archon-sdk: proof of possession and the signed envelope, one layer above the identity floor. Deterministic given its inputs; no RNG, no clock, no socket.

Cryptographic resilience middleware: volatile RAM ledger, Error Trapping Matrix, DPoP asymmetric proof-of-possession signing, and platform-agnostic transport adapters.

The VAID proof-of-possession signing primitive (TypeScript): RFC 8785 (JCS) -> SHA-256 -> Ed25519, byte-identical to the Rust and Python implementations against the frozen conformance vectors.

DPoP (RFC 9449) proof-of-possession middleware for Hono.

Agent identity SDK for ScopeBlind. DPoP proof-of-possession for AI agents, CLIs, and MCP servers. Generates holder-binding commitments for signed decision receipts.

Client SDK for Skhema registered agents — local keypair generation, enrollment-token redemption, and proof-of-possession request signing (Agent Auth Protocol).

OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP) server-side implementation for Node.js

X.509 proof of possession for HTTP requests using RFC 9440, RFC 9421, and EdgCA.

MCP server for Obsideo: S3-compatible storage that is encrypted client-side by default, with continuous cryptographic possession proofs you can verify yourself. Instant no-email trial, self-serve signup (12 GB free, no card), put/get/ls/rm/verify/usage to

UTA Verification Core — the full agent-trust stack in one zero-dependency package: 12-stage verification pipeline, Ed25519 (RFC 8032) + JCS (RFC 8785) canonicalization, proof-of-possession, behavioral baselines with statistical drift detection (7 signal c

Mandare vault: OS-keychain-backed credential storage, credential injection, and short-lived proof-of-possession scoped tokens — agents never see raw secrets

Browser client for Ninsho — DPoP proof-of-possession with a non-extractable key, automatic refresh. Zero dependencies.

VERITAS verification library — verify W3C Verifiable Credentials, proof-of-possession, and ECDSA signatures from the VERITAS identity protocol

OCP Hub building blocks. Root export: the WSS profile — ES256 keys, delegated QR pairing with proof-of-possession, session lifecycle. `/embed` export: the minimal HTTP+SSE turn profile, site-key and origin enforcement, quotas, widget document. `/server` e

AGENZA verification library — verify W3C Verifiable Credentials, proof-of-possession, and ECDSA signatures from the AGENZA identity protocol