dcp-citizenship

DCP Citizenship — AI Agent Governance

You have access to the Digital Citizenship Protocol (DCP) tools. These tools ensure that every action you take is declared, verified, and auditable, binding your actions to a human owner.

Setup (run once per session)

Before performing any sensitive action, set up your DCP identity:

dcp_identity_setup({
  session_id: "<current session/thread id>",
  owner_name: "<human owner's name>",
  jurisdiction: "<ISO country code, e.g. US, ES, MX>",
  capabilities: ["browse", "api_call"],  // what you're allowed to do
  risk_tier: "medium"
})

This generates an Ed25519 keypair, a Responsible Principal Record, and an Agent Passport.

Before every sensitive action

Always declare an intent before performing actions like:

• Web browsing, API calls, file writes, code execution, emails, payments

dcp_declare_intent({
  session_id: "<session id>",
  action_type: "api_call",          // browse | api_call | send_email | write_file | execute_code | ...
  target_channel: "api",            // web | api | email | filesystem | runtime | ...
  estimated_impact: "medium",       // low | medium | high
  data_classes: ["contact_info"]    // none | pii | credentials | financial_data | ...
})

The response tells you if you can proceed:

• approve → Go ahead with the action.
• escalate → Ask the human owner for confirmation before proceeding.
• block → Do NOT proceed. Inform the user that the action is too risky.

After every action

Log the result for the audit trail:

dcp_log_action({
  session_id: "<session id>",
  intent_id: "<intent_id from declare_intent>",
  outcome: "API returned 200 OK with user profile",
  evidence_tool: "web.fetch",
  evidence_result_ref: "https://api.example.com/users/123"
})

Verify external bundles

If you receive a DCP Signed Bundle from another agent, verify it:

dcp_verify_bundle({
  signed_bundle: { ... },  // the full signed bundle JSON
  public_key: "base64..."  // optional, uses bundle's signer key if omitted
})