{
  "accepts": [
    "web-bot-auth"
  ],
  "signature_agent": "dictionary member sig=\"https://...\"",
  "covered_components": [
    "@authority",
    "signature-agent;key=\"sig\""
  ],
  "required_params": [
    "created",
    "expires",
    "keyid",
    "nonce",
    "tag"
  ],
  "key_algorithm": "Ed25519",
  "max_validity_seconds": 3600,
  "replay_protection": "nonce per key, stored until expiry"
}