honornet-agent-presentation-langchain 0.1.0

LangChain tools for the HonorNet agent presentation client — a protocol shim that mints proofs and presents three-part ADR-009 bundles. It decides nothing (hard rule 3).

honornet-agent-presentation-langchain

LangChain tools that make a LangChain agent HonorNet-capable — able to present an issuer-signed credential, an owner-signed mandate, and a per-transaction proof to a HonorNet acceptance endpoint, and receive an approve/decline verdict.

It is a shim, not a framework

This wrapper is a protocol shim under HonorNet's hard rule 3, the same boundary as the MCP client it wraps. The analog is Visa publishing an EMV kernel: the kernel holds the card's key, mints the per-transaction cryptogram, and presents it — it decides nothing about what the cardholder buys.

These tools do exactly that and no more:

• hold an issuer-signed credential (load_credential),
• hold an owner-signed mandate (load_mandate),
• mint the per-transaction proof of possession, assemble the three-part ADR-009 bundle, and present it (present).

They decide nothing about what the agent buys, ranks, or chooses, and never call a model. The approve/decline verdict is always the network's; present relays it verbatim and adds no judgment. The tool set is exactly the three the core client defines — this wrapper cannot add a fourth.

Install

pip install honornet-agent-presentation-langchain

This pulls the core honornet-agent-presentation client (which carries the pure-Python signing, zero third-party deps) and langchain-core.

Use

from honornet_presentation import PresentationClient
from honornet_presentation_langchain import make_honornet_tools

client = PresentationClient(
    agent_seed=AGENT_SEED,                 # the agent's own Ed25519 seed
    endpoint="https://api.honornet.ai/authorize",
    api_key=SANDBOX_OR_LIVE_CALLER_KEY,    # operator-configured, not an agent argument
)
tools = make_honornet_tools(client)        # -> [load_credential, load_mandate, present]

# Hand `tools` to any LangChain agent (create_tool_calling_agent, LangGraph, ...).

The agent decides what the transaction is; the operator configures where it is presented (the endpoint); the shim decides neither. See epic-AC-530 and the four-party model.

License

Apache-2.0.