feat: APS-AgentMesh adapter — structural authorization gates

[aeoess]

APS-AgentMesh Integration

Responds to @imran-siddique's invitation in #478.

Bridges Agent Passport System (APS) structural authorization into AGT's PolicyEngine as external trust signals.

What this PR adds

packages/agentmesh-integrations/aps-agentmesh/ — a new integration package with:

Component	Purpose
APSPolicyGate	Injects APS PolicyDecision into AGT evaluate(action, context)
APSTrustBridge	Maps APS passport grades (0-3) to AGT trust scores (0-1000)
APSScopeVerifier	Validates APS delegation scope chains for task assignment
aps_context()	Builds AGT-compatible context dict from APS artifacts

Architecture

APS governs between processes (cryptographic proof of authorization scope). AGT governs inside the process (policy evaluation, trust scoring). APS structural authorization = hard constraint (gate). AGT behavioral trust = soft signal.

AGT policy rule example

- name: require-aps-authorization
  type: capability
  conditions:
    aps_decision.verdict: 'permit'
  allowed_actions:
    - 'deploy.*'

Tests

17 tests covering: decision parsing, scope chain validation, trust bridging, policy gate context building, scope verification (prefix match, wildcard, depth, budget), and AGT context shape compatibility.

Next steps from #478

1. ✅ Draft PR with minimal APS adapter (this PR)
2. Define interface contract for consuming APS PolicyDecision artifacts
3. Add cross-verification tests using shared decision artifact format
4. Map Entity Verification v1.0 to did:agentmesh: DID scheme

APS: aeoess.com | SDK v1.29.1 (1,919 tests) | MCP v2.19.0 (125 tools) | Paper