# CASAN Plan-16 SEC-10 — agent-identity registry (non-spoofable least-privilege).
#
# tool-registry-gate.sh least-privilege used to trust CASAN_AGENT (a plain env var
# anyone can set). Under CASAN_PROFILE=prod (or CASAN_IDENTITY_STRICT=1) the caller
# must instead present a signed token proving it is that agent — verified against
# one of the PUBLIC keys below. Private keys live OFF-REPO (with the agent runner /
# issued by an IdP); only public keys are provisioned here (same policy as the audit
# and reviewer signing keys).
#
# Line format (no yaml dependency):
#   agent <agent-id> <pubkey-file>        # pubkey-file relative to the agents/ dir
#
# Token minted with:  agent-identity-sign.sh <agent-id> <run-id> <priv> <sig-out>
# Presented via:      CASAN_AGENT=<id> CASAN_AGENT_SIG=<sig> CASAN_RUN_ID=<run>
#
# NOTE: pubkeys under agents/ are provisioned out-of-band by ops. Until then,
# enforced mode fails CLOSED (an unproven agent is denied every restricted tool).

agent release-manager   release-manager.pub.pem
agent implement-agent   implement-agent.pub.pem
agent design-agent      design-agent.pub.pem
agent review-agent      review-agent.pub.pem