--- title: "Agent authority: delegations, approvals and signed evidence references for a workspace's agents: Trooth changelog - Trooth" description: "A person in a workspace can now give an artificial intelligence agent a bounded authority to pay or share data with one company, approve what it asks for above those limits, and revoke it. Trooth signs a receipt for each delegation and a ten-minute evidence reference for each authorized action." canonical_url: "https://trooth.co/changelog/2026-10-15-agent-authority" markdown_url: "https://trooth.co/changelog/2026-10-15-agent-authority.md" generated_from: "the rendered page, converted to Markdown when this was requested" agent_index: "https://trooth.co/llms.txt" --- [Back to changelog](https://trooth.co/changelog) New October 15, 20262 minute read # Agent authority: delegations, approvals and signed evidence references for a workspace's agents A person in a workspace can now give an artificial intelligence agent a bounded authority to pay or share data with one company, approve what it asks for above those limits, and revoke it. Trooth signs a receipt for each delegation and a ten-minute evidence reference for each authorized action. ## What changed Agent authority is on for every workspace. A delegation names one agent by the thumbprint of its key, the role it acts in, the one company it may act with, whether it may pay (up to a limit per action in one currency) or share data (up to a data class), the amount above which a person must approve, and an expiry of at most 90 days. A person creates it at Agent authority in the workspace and receives a token for the agent, shown once and accepted only with a proof signed by the agent's key, and a receipt Trooth signs. When the agent is about to act it asks Trooth to authorize that one action; Trooth checks it against the delegation and either answers with an evidence reference it signs, valid for ten minutes and redeemable once, or holds it for a person to approve or deny. A partner checks the reference against the keys at api.trooth.co/public/keys, reads its public state and redeems it once. The public witness log holds only a signed commitment to each receipt and reference, a SHA-256 digest, never the object. Four new webhook events carry these steps: delegation.created, delegation.revoked, action.approval_requested and action.decided. The trooth command-line tool, version 0.22.0, adds trooth evidence verify and trooth delegation verify, each with --log. Trooth's Model Context Protocol (MCP) server, version 1.7.0, now says that Trooth signs witness statements for its readings and, for workspaces that create a delegation, delegation receipts and action evidence references; it does not sign the profile or a company's declarations. Trooth records and signs what was authorized, by whom and under which limits; it does not move money, does not decide whether a payment should be made, and is not a party to the transaction. ## Why it changed A partner that receives a payment or a data request from an agent needs to know that a person at the company allowed it, within which limits, and that the request is the one that was allowed. Until now there was no record of that which the partner could check for itself. ## Who is affected - **Affected:** Companies whose agents pay or share data with other companies, the partners who receive those agents' requests, developers who register webhook endpoints, and users of the trooth command-line tool, which is version 0.22.0. A workspace that creates no delegation sees nothing change. - **Availability:** Every workspace, from today. Creating, revoking and approving need a person signed in to the workspace; a payment, or confidential or restricted data, needs a sign-in through the company's identity provider in the last five minutes. - **Release stage:** Available. - **Areas:** Company workspace, API, MCP server, CLI. ## What to do **No action required.** Nothing anyone builds on changed. To use it, create a delegation at Agent authority in the workspace; to receive its events, subscribe an endpoint to them on the webhooks page; to check a receipt or a reference, run trooth evidence verify or trooth delegation verify with version 0.22.0. ## Versions and migration - **trooth:** `0.22.0` ## Dates - **Announced:** October 15, 2026, the day this entry was written. Entries are never backdated. - **Released:** October 15, 2026. ## What this does not fix Counsel reviews the responsibility boundary before Trooth's commercial launch, and no payment partner has yet accepted a Trooth evidence reference in a live pilot. A revision of the boundary becomes version 2, and each reference names the version it was issued under. ## Read more - [The agent authority guide](https://trooth.co/docs/agent-authority) - [Agent authority in the workspace](https://trooth.co/dashboard/agent-authority) On this page - What changed - Why it changed - Who is affected - What to do - Versions and migration - Dates - What this does not fix - Read more [New](https://trooth.co/changelog?type=new)[Company workspace](https://trooth.co/changelog?area=workspace)[API](https://trooth.co/changelog?area=api)[MCP server](https://trooth.co/changelog?area=mcp)[CLI](https://trooth.co/changelog?area=cli) [Back to changelog](https://trooth.co/changelog) ## Related changes - [OCT.15NewDocument digests, an owner-signed record, and registry readings that say when and from what they were readTrust Profiles +4](https://trooth.co/changelog/2026-10-15-document-digests-and-owner-signed-record) - [OCT.15DeprecationThe compare pages and the compare tool are withdrawnNetwork +3](https://trooth.co/changelog/2026-10-15-compare-withdrawn) - [OCT.12DeprecationThe older profile lookup and the version 1 webhook signature retire on April 30, 2027API +4](https://trooth.co/changelog/2026-10-12-legacy-lookup-and-v1-signature-retire) - [OCT.07NewTrooth command-line tool 0.14.0: a company's own signed declaration, and the proof behind each tie in the public recordCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-14-0-declarations) - [OCT.07NewTrooth command-line tool 0.13.0: the guard for agent actions, and what each public record reading rests onCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-13-0-guard) - [OCT.07NewTrooth command-line tool 0.12.0: MCP tool fingerprints, more of the public record, and a hardware key for the logCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-12-0-mcp-tools) ## Follow what changes at Trooth Every entry by email, or a feed narrowed to one area or to the changes that need you to act. ## Product updates by email Occasional notes when something on this page changes. You get one confirmation email when you subscribe, every email carries an unsubscribe link, and the address is never sold or shared. Email address [RSS](https://trooth.co/changelog/rss.xml)[Company workspace only](https://trooth.co/changelog/rss.xml?area=workspace)[Needs action](https://trooth.co/changelog/rss.xml?action=required) ## Structured data ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://trooth.co/#org", "name": "Trooth", "legalName": "Trooth, LLC", "alternateName": [ "Trooth, LLC", "Trooth Network", "trooth.co" ], "url": "https://trooth.co", "logo": { "@type": "ImageObject", "@id": "https://trooth.co/#logo", "url": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "contentUrl": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "width": 1024, "height": 1024, "caption": "Trooth" }, "image": { "@id": "https://trooth.co/#logo" }, "description": "Trooth is an infrastructure and cybersecurity company providing Machine-Readable Trust. The Trooth Network keeps one current Machine-Readable Trust Profile per company, each fact sourced. Trooth signs what it witnessed; company declarations are unsigned.", "foundingDate": "2025-12-16", "address": { "@type": "PostalAddress", "streetAddress": "777 Brickell Ave, Suite 500, PMB 1174", "addressLocality": "Miami", "addressRegion": "FL", "postalCode": "33131", "addressCountry": "US" }, "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "email": "hello@trooth.co", "url": "https://trooth.co/contact" }, "sameAs": [ "https://x.com/Troothllc", "https://github.com/troothllc", "https://www.crunchbase.com/organization/trooth", "https://www.wikidata.org/wiki/Q141292994", "https://www.youtube.com/@Troothllc", "https://www.trustpilot.com/review/trooth.co" ] }, { "@type": "WebSite", "@id": "https://trooth.co/#website", "url": "https://trooth.co", "name": "Trooth", "alternateName": "Trooth Network", "inLanguage": "en", "publisher": { "@id": "https://trooth.co/#org" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://trooth.co/network?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "ItemList", "@id": "https://trooth.co/#sitelinks", "name": "Trooth sitelinks", "itemListElement": [ { "@type": "SiteNavigationElement", "position": 1, "name": "Join Trooth for free", "url": "https://trooth.co/signup" }, { "@type": "SiteNavigationElement", "position": 2, "name": "Company, Trooth", "url": "https://trooth.co/network/company/trooth" }, { "@type": "SiteNavigationElement", "position": 3, "name": "Trooth Network", "url": "https://trooth.co/network" } ] } ] } ``` ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://trooth.co/" }, { "@type": "ListItem", "position": 2, "name": "Changelog", "item": "https://trooth.co/changelog" }, { "@type": "ListItem", "position": 3, "name": "Agent authority: delegations, approvals and signed evidence references for a workspace's agents", "item": "https://trooth.co/changelog/2026-10-15-agent-authority" } ] } ```