OpenChainGraph Suite · ART-151 · wave 27

Agent On-Behalf-Of (OBO) Mandate Validator

Validates an on-behalf-of mandate: subject identity, stated intent, explicit scope list, and expiry timestamp. Returns ACCEPT or REFUSE. Aligns with the AP2 mandate-chain pattern (art-01).

OBO MandateAgent AuthorizationAP2 Pattern (art-01)Zero PIIW3C VC §13.11
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Scope
Middle node: consumes scope-revocation audit (art-150), feeds task lifecycle validator (art-152). Validates on-behalf-of mandate — subject identity, intent declaration, explicit scope list, and validity window. Aligns with AP2 mandate-chain pattern (art-01).
Presets
Mandate Inputs
Result
Execution Hash & §4 Artifact
SHA-256 execution hash (JCS canonical — RFC 8785):

      

        
        
        
        
        
        
      

    

  


  
  

    

  







  

    
Ask your agent

    
  

  
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

  
Run the AINumbers MCP tool `validate_agent_obo_mandate`. Task: Validate an on-behalf-of mandate: subject identity, stated intent, explicit scope list, and expiry timestamp.
Call it with arguments: {"policy_parameters":{"mandate":{"subject":"user:alice@example.com","intent":"retrieve_invoice_data","scope":["invoices:read","payments:read"],"valid_until_unix":9999999999},"now_unix":1000000000}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-151-agent-obo-mandate-validator.html#p=v1.H4sIAAAAAAAA_wGvAFD_eyJtYW5kYXRlIjp7InN1YmplY3QiOiJ1c2VyOmFsaWNlQGV4YW1wbGUuY29tIiwiaW50ZW50IjoicmV0cmlldmVfaW52b2ljZV9kYXRhIiwic2NvcGUiOlsiaW52b2ljZXM6cmVhZCIsInBheW1lbnRzOnJlYWQiXSwidmFsaWRfdW50aWxfdW5peCI6OTk5OTk5OTk5OX0sIm5vd191bml4IjoxMDAwMDAwMDAwfbQXhZqvAAAA