AgentEnvelope: Deterministic Derived Authority for Autonomous Systems

AgentEnvelope v1 defines a deterministic authority protocol for autonomous systems, AI agents, bots, workflow steps, microservices, and distributed devices. Authority is derived from customer‑held custody material, not issued by hosted services. Verifiers can check action signatures against public records without receiving vault roots or private keys. The specification formalizes canonical JSON, HKDF‑SHA256 derivation, secp256k1 signing, and keccak‑256 hashing to enable stateless verification and mint‑delegated capabilities under Apache 2.0.