honornet-agent-presentation-openai-agents

Tools for the OpenAI Agents SDK that make an OpenAI-Agents agent HonorNet-capable — able to present an issuer-signed credential, an owner-signed mandate, and a per-transaction proof to a HonorNet acceptance endpoint, and receive an approve/decline verdict.

It is a shim, not a framework

This wrapper is a protocol shim under HonorNet's hard rule 3, the same boundary as the MCP client it wraps. The analog is Visa publishing an EMV kernel: the kernel holds the card's key, mints the per-transaction cryptogram, and presents it — it decides nothing about what the cardholder buys.

These tools do exactly that and no more:

• hold an issuer-signed credential (load_credential),
• hold an owner-signed mandate (load_mandate),
• mint the per-transaction proof of possession, assemble the three-part ADR-009 bundle, and present it (present).

They decide nothing about what the agent buys, ranks, or chooses, and never call a model. The approve/decline verdict is always the network's; present relays it verbatim and adds no judgment. The tool set is exactly the three the core client defines — this wrapper cannot add a fourth.

Install

pip install honornet-agent-presentation-openai-agents

This pulls the core honornet-agent-presentation client (which carries the pure-Python signing, zero third-party deps) and openai-agents.

Use

from agents import Agent
from honornet_presentation import PresentationClient
from honornet_presentation_openai_agents import make_honornet_tools

client = PresentationClient(
    agent_seed=AGENT_SEED,                 # the agent's own Ed25519 seed
    endpoint="https://api.honornet.ai/authorize",
    api_key=SANDBOX_OR_LIVE_CALLER_KEY,    # operator-configured, not an agent argument
)

agent = Agent(
    name="checkout-agent",
    tools=make_honornet_tools(client),     # -> [load_credential, load_mandate, present]
)

The agent decides what the transaction is; the operator configures where it is presented (the endpoint); the shim decides neither. See epic-AC-530 and the four-party model.

License

Apache-2.0.