Overview

Services

Trust Controller (:8091)    Federation Bridge (:8093)

The federation engine stays hidden behind the Trust Controller. The console never talks to it directly.

Agent Identities by state

Flow

Agent Marketplace emits an identity manifest → Trust Controller derives and governs the Agent Identity (trust marks; approve publishes the leaf + subordinate) → Federation Bridge resolves the trust chain and registers the OAuth client (DCR) → the Authorization Server issues tokens.