KINEGRANT
View on GitHubRead the Spec

AI CAN THINK.AI CAN ACT.KINEGRANT DECIDESWHAT IT MAY DO.

KineGrant is the experimental authorization infrastructure for physical AI systems.

Read the Specification 鈫?/span>View on GitHub 鈫?/span>

Experimental open draft. Open source.

Short-lived capabilitiesScoped accessDevice-verifiableAuditable
KINEGRANT PROTOCOL FLOWFrom Intent to Verifiable Action
  1. AGENTdelivery-robot-07
  2. REQUESTdoor-7.open
  3. POLICYevaluating
  4. CAPABILITYKG-8F21 路 00:30
    TTL
    00:30
    SCOPE
    door-7.open
    USE
    single
  5. VERIFYsignature 路 scope 路 expiry
  6. ACTIONOPEN
  7. RECEIPTSIGNED

THE DIFFERENCE

WITHOUT KINEGRANT

AIMACHINEEXECUTE
  • No action-specific authorization context
  • No scope or lifetime constraints
  • No local capability verification
  • No protocol receipt

WITH KINEGRANT

AIREQUESTPOLICYCAPABILITYVERIFYMACHINERECEIPT
  • Explicit authorization decision
  • Scoped and short-lived
  • Cryptographically verifiable
  • Auditable receipt path

Authorization becomes explicit
before a physical action.

KGP-001Experimental Draft 0.1
Apache 2.0License
v0.1.1Reference implementation

REQUEST 鈫?PROOF

Permission becomes
a machine-readable state.

Every transition is explicit. Unknown policy fails closed. A deny can stop the path. An allow becomes a request-bound capability鈥攏ot a reusable credential.

KGP / AUTHORIZATION SESSIONKG-8F21 路 00:30 TTL
AGENT delivery-robot-07TARGET door-7ACTION openPURPOSE delivery
  1. ACTION REQUESTEVALUATING
  2. POLICYPENDING
  3. CAPABILITYPENDING
  4. LOCAL GATEPENDING
  5. PHYSICAL ACTIONPENDING
  6. SIGNED RECEIPTPENDING
ACTION AUTHORIZED

Bound capability consumed once. Signed receipt emitted.

PROOF, NOT PROMISES

Inspect the protocol.
Run the evidence.

SPECIFICATIONKGP-001Experimental Open Draft 0.1鈫?/i>SOURCEReference implementationPython 路 v0.1.1 路 Apache-2.0鈫?/i>EXECUTABLE EVIDENCEMachine Permission Test9 cases 路 machine-readable result鈫?/i>LOCAL TOOLIndependent verifierEvidence and Ed25519 receipts鈫?/i>
QUICK START

Run the public reference demo from the v0.1.1 release.

$ python -m pip install -e .
$ kinegrant-demo

BOUNDARIES

Complements existing trust systems. Does not replace them.

IAM, PKI, network controls, robotics middleware, and functional-safety systems retain their roles. KineGrant adds a narrow authorization and receipt path for a specific physical action.

W3C ODRLREFERENCE ADAPTER
W3C WoTREFERENCE ADAPTER
ROS 2REFERENCE ADAPTER
OPC UAREFERENCE ADAPTER
MatterREFERENCE ADAPTER
IEEE 7012EXPERIMENTAL MAPPING

Reference profiles are not certification, endorsement, or a claim of production integration.

KGREADY FOR REVIEW

NO GRANT.
NO ACTION.
VERIFIABLE RECEIPT.

READ KGP-001 鈫?/a>RUN THE TEST