Wrap any agent in a single MOSS init call. Every action it takes is checked against policy before it leaves the process and signed with ML-DSA-44 as tamper-evident evidence. Your code runs the way it always did.
Sign and verify any agent output. Each signature produces a public receipt anyone can verify offline — no access to MOSS required.
// npm install moss-signing import { sign, verify } from "moss-signing"; const { envelope } = await sign(output, { agent: "order-bot" }); verify(envelope).valid // true, offline
Wrap an entire agent. Policy runs on every egress, backed by a heartbeat lease, an offline revocation cache, and a fail-closed kill switch.
agent = init(agent_subject="moss:agent:bot") agent.get(url) # governed egress agent.kill("done") # final signed record
MOSS also signs agentic commerce. UCP (Google/Shopify) and ACP (OpenAI/Stripe) checkout flows carry provenance for which agent performed each action.
Sign agent actions with ML-DSA-44 in Python and TypeScript, or drop governance straight into the framework you already build on.