https://www.ngallo.it/tags/cose/Recent content in Cose onHugoen-uknicola.gallo@nitroagility.com (Nicola Gallo)nicola.gallo@nitroagility.com (Nicola Gallo)Tue, 11 Aug 2026 09:00:00 +0200https://www.ngallo.it/blog/2026-08-11/pic-x-token-types-jwts/Tue, 11 Aug 2026 09:00:00 +0200nicola.gallo@nitroagility.com (Nicola Gallo)https://www.ngallo.it/blog/2026-08-11/pic-x-token-types-jwts/<figure class="post-banner"> <img src="https://www.ngallo.it/images/2026-08-11/pic-x-token-types-jwts.png" alt="Designing PIC-X: PIC Token JWT and COSE Artifacts." loading="lazy"> <figcaption>Designing PIC-X. PIC Token JWT and COSE Artifacts.</figcaption> </figure> <p>PIC Profile 0.2 defines centralized PIC-X-mediated authority continuity.</p> <p>The active profile is:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">https://pic-protocol.org/profiles/0.2 </span></span></code></pre></div><p>This article defines the external PIC Token JWT envelope and the native COSE artifacts used by that profile.</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">OAuth access token + Initial Continuity Proposal </span></span><span class="line"><span class="cl"> | </span></span><span class="line"><span class="cl"> v </span></span><span class="line"><span class="cl">PIC-X </span></span><span class="line"><span class="cl"> | </span></span><span class="line"><span class="cl"> v </span></span><span class="line"><span class="cl">PIC-X/trusted-authority-signed PIC PCA COSE 0 </span></span><span class="line"><span class="cl"> | </span></span><span class="line"><span class="cl"> v </span></span><span class="line"><span class="cl">PIC-X-signed settled PIC Continuity COSE 0 </span></span><span class="line"><span class="cl"> | </span></span><span class="line"><span class="cl"> v </span></span><span class="line"><span class="cl">PIC-X-signed PIC Token JWT 0 </span></span></code></pre></div><p>Non-initial advancement is candidate-based:</p>