dfos

DFOS

Your identity and content are rented back to you by the platforms that own it. The DFOS Protocol gives you back the keys.

An open protocol for cryptographic identity and verifiable content. Identity derives from Ed25519 signed operations, not platform accounts. Proofs verify offline, in any language, from any source. The proof is public; the content is access-controlled. The protocol commits to content hashes, never plaintext — it does not encrypt, and document confidentiality is enforced at the application layer (the relay operator that serves a space can read it; there is no end-to-end encryption).

The first thing it cleanly solves: a portable, rotation-capable signing identity for AI agents and devices — a did:dfos derives from a genesis operation and needs no external directory to resolve.

This repository contains the protocol specification, reference implementations in TypeScript and Go, cross-language verification suites, and the CLI.

Packages

Package	Language	Description
@metalabel/dfos-protocol	TypeScript	Ed25519 signed chain primitives, services, credentials, and verification
dfos-protocol-go	Go	Go protocol library — signing, verification, CID derivation, credentials
@metalabel/dfos-web-relay	TypeScript	Portable HTTP relay — Hono app, any runtime
dfos-web-relay-go	Go	Go relay — single binary, SQLite, built-in peering
dfos-cli	Go	The sovereign actor — keys, signing, relay interaction
protocol-verify	TS/Go/Py/Rust/Swift	Cross-language verification against shared test vectors
relay-conformance	Go	Integration tests against any live relay
site-protocol	Astro	Static site for protocol.dfos.com
site-schemas	Hono	Worker for schemas.dfos.com

Links

• Protocol specification — core protocol with worked examples and test vectors
• DID Method — W3C DID method specification for did:dfos
• Credentials — UCAN-style authorization, linear delegation, revocation
• Web Relay — HTTP relay for ingestion, chain state, and the content plane
• Content Model — standard JSON Schema content types
• Threat Model — adversary classes and the trustless-proof / honest-host split
• Conformance — tiered conformance definition and self-certification
• JSON Schemas — hosted schema definitions for DFOS documents
• Chain verifier — browser-based chain verification tool
• DFOS app — the platform
• npm package — @metalabel/dfos-protocol
• clear.txt — the builder and cryptography space on DFOS
• dfos.com

License

MIT