Think Carfax, but the agent signs it — not the dealer.
import { quickExit, quickVerify, toJSON } from "cellar-door-exit"; // Create a signed departure marker const { marker } = quickExit("did:web:platform.example"); // Verify it — works offline, works years later const result = quickVerify(toJSON(marker)); console.log(result.valid); // true
The world is building AI agents that won't stay in one place.
They'll call tools on other platforms. They'll be cloned across environments. Platforms will shut down, get acquired, or change terms. Agents will be banned, migrated, or simply outgrow where they started.
Every one of these transitions is invisible today. No record. No proof. The platform pretends it never happened.
Think of it like global shipping. Point-to-point delivery works with simple rules: the sender is responsible. But a global supply chain with twelve handoffs needs bills of lading and chain-of-custody documentation — not because packages became people, but because the complexity of the movement exceeded what origin-liability alone could track. AI agents are at that inflection point now.
That's not just inconvenient — it's a liability gap that makes agent deployment uninsurable and unauditable.
AI agents probably can't be contained forever.
But they can still be safe.
EXIT markers are signed, portable, offline-verifiable departure certificates.
7 mandatory fields. ~335 bytes. Content-addressed. Verifiable years later without the origin platform being online.
Both parties sign. Full mutual attestation.
Agent signs alone. No cooperation needed.
Immediate exit. One step. No waiting.
The standard path when both agent and platform are willing participants.
Result: Strongest trust signal. Two independent signatures on one record.
When the platform is unresponsive, hostile, or the agent simply chooses to leave.
Result: Weaker trust, but the agent is never trapped. The right to leave is unconditional.
For hostile environments, security incidents, or imminent data loss.
exitType: "emergency"emergencyJustification fieldResult: Minimum viable departure record. Speed over completeness.
Without departure records, only organizations big enough to absorb unlimited liability will run agents. That's three companies. Maybe four.
EXIT makes departure auditable. Auditable departure makes freedom viable.
Anti-weaponization is baked into the protocol spec — not bolted on after the fact.
Ed25519 (default) + P-256 (FIPS)
Algorithm negotiation, fail-closed
Amendment & Revocation with discovery
Crypto-shredding for GDPR erasure
LangChain · Vercel AI SDK · MCP · Eliza
1,401 tests · 13 packages · Apache 2.0
See EXIT through the lens of an Agent developer.
EXIT Protocol Specification v1.2
Source, tests, integrations, issues
See EXIT through six lenses — from Poet to Cynic to Agent.