Kevros — Agentic Identity Trust

Each tool targets a distinct action or resource: attest creates provenance records, bind declares intent, bundle aggregates evidence, verify checks policy pre-execution, verify-outcome validates results, and verify-token authenticates release tokens. Even the verify-* family is clearly differentiated by timing and purpose.

Tool names consistently use lowercase imperative verbs, with hyphenated modifiers for multi-word names (check-peer, verify-outcome, verify-token). The pattern is mostly consistent, though some tools are bare verbs (attest, bind, health) while others include a noun, creating a minor deviation from strict verb_noun style.

Nine tools is well within the ideal range for this domain. Each tool serves a clear purpose in the agentic identity trust lifecycle, from evidence creation to verification and peer assessment, without redundancy or excessive sprawl.

The tool surface covers the core workflow: intent binding, policy verification, provenance attestation, outcome verification, token verification, and compliance bundling. Minor gaps exist such as missing explicit revocation or role management, but agents can complete the primary governance lifecycle.