Skip to content
Hussh
Connect MCP

One DocuSign and Fund Setup Workflow

Vendor-neutral agreement execution and fund-setup workflow under One, with Nav/Connections authorization, trusted action confirmation, and e-signature provider options.

Concept

TL;DR: Vendor-neutral agreement execution and fund-setup workflow under One, combining stateful fund operations, Nav/Connections consent authorization, trusted action confirmation, and eSignature API v2.1 or DocuSign MCP provider integration.

Status as of 2026-07-24: see body.

Relations

Architecture Overview

The One DocuSign and Fund Setup Workflow defines a vendor-neutral agreement execution capability beneath a stateful Fund Operations workflow in Hussh One. It bridges investor onboarding, legal document preparation, and e-signature execution while preserving strict agent boundaries and zero-knowledge privacy guarantees.

In this architecture, One acts solely as the semantic router and user-facing intelligence layer. It explains workflow progress, gathers required inputs, and presents explicit confirmation cards. Execution authority for e-signatures remains strictly with the vendor-neutral agreement provider (AgreementExecutionProvider), which routes requests through an eSignature API v2.1 adapter or an optional UAT-gated DocuSign MCP server.

Product & Agent Ontology Boundaries

To maintain clear agent responsibilities, agreement execution and fund setup do not introduce a standalone "DocuSign Agent." Instead, tasks are delegated across specialist domains:

  • One (Semantic Router): Understands user intent, initiates Fund Operations workflows, and reports real-time status.
  • Fund Operations (Workflow Owner): Manages the state machine for fund creation, entity formation, and document tracking.
  • Kai (Finance Specialist): Provides financial context, capital commitment parameters, and LP/GP balance data when requested.
  • KYC (Identity Specialist): Supplies approved, user-consented identity and investor accreditation outputs without sharing raw documents.
  • Nav & Connections (Consent & Auth): Nav manages explicit information disclosure review; Connections owns DocuSign account linkage, OAuth tokens, and revocation status.
  • Generated Action Gateway: Enforces trusted confirmation, step-up authentication, and idempotent settlement before sending any binding agreement.

Vendor-Neutral Execution Capabilities

All external e-signature interactions project into stable, vendor-neutral capability interfaces rather than raw provider tool calls:

CapabilityScope & FunctionConfirmation Required
agreements.connection.statusCheck DocuSign account linkage & permission postureNo
agreements.templates.listList approved counsel-verified fund templatesNo
agreements.envelope.prepare_draftCreate draft envelope bound to reviewed inputsYes
agreements.envelope.reviewGenerate sender or recipient review URLNo
agreements.envelope.sendDispatch reviewed, unchanged draft for signatureYes (with Step-Up Auth)
agreements.envelope.statusTrack recipient signature and envelope progressNo
agreements.envelope.remindSend reminders to pending signersYes
agreements.envelope.voidVoid an in-flight agreementYes (with Step-Up Auth)
agreements.envelope.retrieve_completedRetrieve completed package for PKM vault storageYes (Disclosure Review)

Security & Verification Laws

  1. Counsel Approval Gate: An LLM or agent cannot invent fund terms, substitute for counsel approval, or modify legal text. Only counsel-approved document templates with immutable hashes are executable.
  2. Explicit Confirmation & Step-Up Auth: Draft preparation and envelope sending are strictly separate. Sending legally binding documents requires explicit physical user confirmation and step-up authentication. Spoken or typed phrases alone cannot trigger dispatch.
  3. Encrypted PKM Vault Storage: Upon signature completion, final agreements and certificates of completion are retrieved, encrypted client-side, and stored in the user's PKM source vault. Telemetry retains metadata only.
  4. Isolated Credentials: DocuSign OAuth tokens and JWT secrets reside exclusively in the enterprise connector domain and are never exposed to agent prompts or client-side storage.

Sources