DEPLOY THE GATE.ONE COMMAND.
Run a real authorization service — decide, issue a short-lived capability, verify at the actuator, and sign a receipt. No cloud account, no proprietary stack.
Experimental open draft. Open source.
ONE-CLICK DEPLOY
The service exposes the three roles of the protocol as plain HTTP/JSON. You only need Python 3.11+ on the machine that guards your device — the single dependency installs itself.
Windows — no install (recommended)
Download, unzip, and double-click kinegrant-serve.exe. No Python needed.
Windows — double-click, done
Unzip kinegrant-deploy.zip, double-click start.cmd. When you see listening on http://127.0.0.1:8770, it is running. Keep that window open.
macOS / Linux — one command
# inside the unzipped folder
sh start.shAfter publishing to PyPI — one command anywhere
pip install kinegrant-protocol
kinegrant-serve --demoVERIFY IT IS ALIVE
curl http://127.0.0.1:8770/healthRUN THE FULL LOOP
curl -X POST http://127.0.0.1:8770/run -H "Content-Type: application/json" -d '{"agent":"urn:robot:delivery-1","target":"urn:space:demo:door-7","action":"open","purpose":"delivery","context":{"risk_tier":1}}'The response returns decision, a signed capability, the gate claims, a signed receipt, and receipt_chain_valid: true. Change action to record and it is denied.
THE FOUR ENDPOINTS
/authorize
Policy decision + a short-lived signed capability.
/verify
Fail-closed, single-use gate right before the actuator moves.
/receipt
Executor-signed audit record after the action.
/run
The whole loop in one call, for your first test.
EDIT POLICY, NO RESTART