Reference architecture

A federated trust boundary for cross-enterprise agents.

Each enterprise remains its own trust domain. Axynd verifies external agents and delegated authority, applies local policy, coordinates approvals, and records transaction provenance.

Organization A · Buyer
Human / Business processFinance Operations
Enterprise agentBuyer AP Agent
Axynd Gateway A
  • Agent identity
  • Organization attestation
  • Delegated authority
  • Policy & approval
  • Provenance
MCP / APIsERP · Data · Workflow
AXYND TRUST NETWORK
Organization registry
Trust relationships
Capability directory
Credential status
Revocation
Policy metadata
Sensitive business payloads should preferably flow gateway-to-gateway rather than through a centralized Axynd service.
Organization B · Supplier
Human / Business processAccounts Receivable
Enterprise agentSupplier AR Agent
Axynd Gateway B
  • Counterparty trust
  • Authorization
  • Local policy & risk
  • Human approval
  • Provenance
MCP / APIsERP · Data · Workflow
Runtime authorization

Every consequential request resolves to one of three outcomes.

ALLOW

Identity, authority, counterparty policy, purpose, and risk are within bounds.

REQUIRE APPROVAL

The action is valid but exceeds the agent's autonomy or risk envelope.

DENY

The action lacks valid authority, violates policy, or fails trust verification.

Effective authority

One organization cannot authorize itself into another.

Effective AuthorityDelegated Authority ∩ Agent Capability ∩ Organization A Policy ∩ Organization B Policy ∩ Transaction Context ∩ Risk Policy

The receiving organization always retains final authorization sovereignty.

Trust sequence

Passport → Authority Grant → Signed Request → Policy → Receipt

01Passport

Verify agent identity, organization, capability, and key binding.

02Authority Grant

Verify the short-lived, purpose- and transaction-bound delegation.

03Signed Request

Bind the requested action to the presenting agent and grant.

04Policy Decision

Apply the receiving enterprise's own counterparty and risk rules.

05Receipt

Sign the outcome and evidence so both organizations retain proof.

Design partner discussion

What would have to be true before you allowed another company's agent to transact with yours?