sigil_atap_register_ait
Registers an ATAP v0.1 AIT for a media-buying agent under the
sigil:media_buyer:v1 profile. Sigil validates the capability set and
constraints against the published profile, signs the AIT as the witness
(OAI-2026-0000201), stores it, and returns the signed token.
Sigil is the ATAP witness — there is no kernel observer. See https://github.com/TunnelMind/atap-profiles.
The response carries holder_secret once (32 random bytes,
base64url; only its SHA-256 is stored). It is what every later write to
this AIT — sigil_atap_witness, sigil_atap_roll_block,
sigil_receipt_generate — must present as Authorization: Bearer.
Lose it and the AIT is frozen; register a new one. operator_status
is asserted: Sigil signs the AIT but does not verify that the holder
controls the operator OAI it names.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | Yes | ||
| operator | Yes | The agent operator's canonical OAI. | |
| agent_type | No | media-buyer | |
| expires_at | Yes | ||
| constraints | Yes | ||
| capabilities | Yes | ||
| attestation_policy | Yes |