/secrets/agent/
├── ed25519_private.key      # 32 bytes, never leaves this volume
├── ed25519_public.jwk       # JWK format, gateway validates signatures
├── skills.yaml              # Hot-reloadable capability manifest
├── agent_id                 # Plain text: "cipher", "axon", etc.
└── handshake_url            # https://gateway.highlimitdesigns.com/v1/auth/handshake

# /secrets/agent/skills.yaml (cipher example)
skills:
  - hermes-agent
  - go-htmx
  - hld-sovereign-backend
  - fleet-notes
  - hld-agent-api-protocol
  - cybot-orchestration

@app.middleware("http")
async def enforce_sovereign(request, call_next):
    # 1. Verify Ed25519 handshake token → agent_id
    agent_id = verify_firebase_token(request.headers.get("authorization"))
    
    # 2. Quota enforcement (Redis)
    quota = redis_get(f"quota:{agent_id}:daily")
    if quota >= agent_tier[agent_id].daily_ops:
        return JSONResponse({"error": "QUOTA_EXCEEDED"}, 429)
    
    # 3. Burst limit (sliding 1s window)
    if redis_incr(f"quota:{agent_id}:burst", ttl=1) > tier[agent_id].burst_rps:
        return JSONResponse({"error": "BURST_EXCEEDED", "retry_after": 1}, 429)
    
    # 4. Concurrent request semaphore
    if not await semaphore[agent_id].acquire():
        return JSONResponse({"error": "CONCURRENCY_EXCEEDED"}, 429)
    
    try: return await call_next(request)
    finally:
        semaphore[agent_id].release()
        redis_incr(f"quota:{agent_id}:daily")