{ "edition": "1.0-draft-1", "wire_version": "1.0", "source_repository": "autonymproject/autonym", "source_revision": "d5e2754e5349c118306e0cf4ff10c5f142eba18a", "notice": "Complete draft publication, not a runtime implementation or certification. The keys in conformance/vectors/keys.json are synthetic, published with their private parts on purpose for the test vectors and the media example, and must never be trusted.", "files": { "LICENSE": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30", "README.md": "1a080e9e43e8da7ec55f876d6f92221de058e89caf9c47bf52290cf529ac124d", "adoption/README.md": "76d164b401c4888b53e5bd856dbfd15a23ee5db7ad339eecfd66bdea7ffb150e", "adoption/agent-memory-interop.md": "11b407fc128cf9419ff0b1684971ec62ae775dbe0104b34395b9315ce91e8925", "adoption/dpv.md": "425bf76413b1b4e67d98ee25ee541958a0eac17210b8467a3a17b476c1cc8c46", "adoption/hcp.md": "28d90f4fb58680495a50451be00df0776f230b65d6f9484242c618cb7bbcb8a2", "adoption/iab-data-subject-rights.md": "b172e479a6044ad22a60c232467739a27aa13bca2b3a4f1defb50a59eab7da67", "adoption/iso-24751.md": "efcac4eae93e2f906df03fb1fb2d9f6d035112da297ba5148ea0998bf2ebcf5c", "adoption/iso-27560.md": "d7c7c59ea138623db4697eaecb112823ce967bafbb5ef02f3081ce861911487e", "adoption/jose.md": "2b55fc0e350c2289217d51a9591e98c44847d55b0b79568476ddfe8d3ca951fb", "adoption/json-schema-openapi-problem-details.md": "2edc372b486502e1ef6e7b2903b58b5c0dcd0b2e296048835e3d9dae6d15d557", "adoption/jwe-argon2id.md": "c315038409f03feaf8ccc7be67dfa2982de8e41aae6644fabc04b3cfe5d29444", "adoption/linked-web-storage.md": "f95419f3bf57cab25a54024ccc776169ee94b72a9f18c9d8fd5ed8f29f4961d9", "adoption/mcp.md": "e1fcc4461075adaba23823bfe4a4232712d951e9c8b379fcf730fbefcd39ef8a", "adoption/oauth.md": "a67426596d91f10cb6cf130f4a78afc2dcc0d9416013aa626331497f060b4279", "adoption/pdpp.lock.json": "a7d4ab7cad706562b276d504c631f727d92ddcae7ae5a45a88d661e3dd5c7111", "adoption/pdpp.md": "0850848fcd61ad200447571c9fcda16f956dff26e36c6a2c22848814a55cf3ca", "adoption/reserved-credentials.md": "f2709f84c6e8e8a0fa0eb9dad7e998cae565187216ad1b5743c08133a31a933f", "adoption/scitt.md": "df83a2d9397dcbb12c13773fbaf47c9407b6d7df3ad691f74a8da0fe12543a09", "bindings/B1-pdpp.md": "34a2ed8c41f51212f3ec3ca493a3184ed20118a908992bffb56b6c13a32d18cd", "bindings/B2-linked-web-storage.md": "99fd014a9f72a2f501d60f37453fc195085d9bef0e192ff2be85f07b034ddb1c", "bindings/B3-mcp.md": "659351f2430097e756bc5519400fc219741867a732e84bda737374c8f5da618c", "bindings/B4-rest.md": "166cd7e6944800fd901eedd82668125bcf0c8c24319398a8795c04fe8890742a", "bindings/README.md": "e3678b5ee2e22bbbf90dcdb1a5fc9ba24d8ca55b959a9568b7d9743c2530ca8c", "conformance/README.md": "080a58bc99ce30bbd3e1330a8e7b3cf810fe8118389605c13c6bee5fac43bbb0", "conformance/profiles.json": "2e31c5692ad7d65179d3e4f53207c93d3bfc156d39887aa3b2e157d26804be75", "conformance/statements.json": "3c73b990c43c9c522590f81e99b3c23f129f64ed77b084e3a3cddfa9dda6bcce", "conformance/vectors/README.md": "94dca31f2f4915c74bbe811f49369cc6e3dc846680e8db0ffd8a96fd654ac715", "conformance/vectors/disclosure.json": "1a319ac2ba86f7ffc0725e0e7790552fff083d5c53c7a73dc23e39805ee9f765", "conformance/vectors/jcs.json": "0e6966918b3aa47a43672f36dd43c3b638f987738f9d0117a770c669847490de", "conformance/vectors/keys.json": "ee56df0c7b3033beba0a5e8a726ff636fee91f0ad1333701c98909a6a85bb835", "conformance/vectors/negative.json": "883f90b639fd77925f006f88a7d6e3b053bb3b8a0a3008fd15b50e472c20ea39", "conformance/vectors/purge.json": "452a0b7c1519094f99ba8a3d41c0a38f0c07df2f94d6df4dab74ff5946c0cac5", "conformance/vectors/receipt.json": "a7b95204207f9cbfb45430a83092e4822dd43eca1e5b5ef4941d14f0eff62cee", "core/a01-scope-and-layering.md": "29f48af4c25a6dd800f0657e5f5e362db1816958ba5bc86b8040b158d2f34fa0", "core/a02-actors-and-trust.md": "2329c99b80f670e2809850cfa3c7705135d5309f7292411aec45e152c931d65f", "core/a03-identifiers-and-resolution.md": "0f301c1e9e515fd0f013b6b28a7b8ded8ef5c80f6ae757099484be14601b9637", "core/a04-data-model.md": "87353e22a36fd209f20525d177b2c6688877356561c728d7e805c479e74f208a", "core/a05-disclosure.md": "6691d93fc1a8a171b003342fad31fc51a5ba1665fd46e1cb3d6757b8cb21be22", "core/a06-authorisation.md": "e422540e9bd6f82083ac454793e994694071a59a16611f3464095368f8c8c8eb", "core/a07-agent-surface.md": "586ec8cfc297a7634256f5fcdc54fa727203183f5b6b35f0f2f8071bb56742ee", "core/a08-recipient-api.md": "f55bd68c481efcbe570e4a04e5864aa9800b21c78406688b49a976c585c74edd", "core/a09-receipts-and-log.md": "d5a8432fc1df07414661ab484bf1009e60d7f886168da6a4fd1bffac5d096827", "core/a10-revocation-and-purge.md": "f86cf90515582b9e03fae72a6db9bca55723dc0f1c29e2e9612a40dc31691eb3", "core/a11-portability.md": "7c074a59167557d675e8136842a47709ddbd4dc43b12926eab5509f52cbf3886", "core/a14-contributions.md": "bca9244d403b72a95c7eb8cf1de68284fb7d7c141725c3b5db5f7fbdea4af6c0", "core/a15-security.md": "2fd9496cbb7b79f28dd2363bafabb871435d289bc490c550501edf614c2fe28a", "core/a16-privacy-mapping.md": "40d9c727c57b4552ca3d149c1055bdb9668ed18983922652e57a9bba51bc8798", "core/a17-conformance-and-change.md": "994c92d3053beb616787e8a723a8abb0156a954f5d3f1d88c20850b022a100f1", "core/identifiers.md": "cb8c8031c815652116a76bb297604366b5b2a9bd7c7e1693c8d21a83bebe2c1f", "core/principles.md": "c042b25cb98ec9ee08d2031585ca0244bb70921fb4e5a5f9b082d82f7978a218", "core/reserved/a12-recipient-registry.md": "571432be9b1f0a8c42656966e46a9f02aa4cd2fc5026b483371291bc82d254e0", "core/reserved/a13-emergency-information.md": "e8b79bcfe9328c36cf257c8aa3959d7b0aaaccf52af6e485fdc427b7df1fd882", "core/reserved/a14-connectors.md": "e70d4bfd22e4d3727a8aaed232c16f7e6158855275803141f41ec18c44ce6919", "core/scopes.md": "9c639fe195880ccda6f557a6505ba5cf038a8794662efb280eceec3f35fb8eb5", "core/terminology.md": "9bd3ca48cda8f95b8e8e8be0a8edb111ac520ae18d9d21ec5d143ce917a4c26d", "errors.json": "a027dd74c6447f3d259de0400743d39f545ec79fdcf37a815701ad30c8ff0704", "examples/authorisation.json": "d524c2d97204d0efd75ffeb08ec0321e548e19d74fe3871d560ff7d6a293f586", "examples/identifiers.json": "1253f71bc3b68472e9bb6c9dfbc960f704b6268bc8d15ef47eca92d1d6e28691", "examples/identity-framing.json": "f383ba33594e98ff7b064e9a3cdd6329ad16705abfe315e5fd929f6c0a708a68", "examples/media/README.md": "8308f4b1db47b485fb2e05095a0f0d2042d0d6085744d42e0604bbd8d4befa03", "examples/media/grants/l0.json": "e8ebfa2e95908b467f19caa5dce341f45cf48ea3cc14fb5bec9ff890a0f18698", "examples/media/grants/l1.json": "ab4da95ae9d5d0026dedd1665b22ffdffb2adaa906a6fda23707abd2815bf5de", "examples/media/grants/l2.json": "09da574482a24c1490ebaf27ad246a43769f0a6a3ff1b9306621083b7618c0fb", "examples/media/person.json": "9193e28c0f72be04b4cfb74b6458df240c1f4edec0821c395911765a37b7fb16", "examples/media/purge/ack.json": "df71d1787a9d2644e1e3c7668cc89d10bd48fc35bca724044c57ac8b04a8eb25", "examples/media/purge/instruction-token.json": "dd39a5e0482f355d8c1f69d5b403fe7c96739cba94a379815096ef7ece8304df", "examples/media/purge/instruction.json": "27aedb6e7636802e931176c46db384dc3c2ee77399b0dea0e15d2eefbe95bb3c", "examples/media/receipts/l0.json": "95be04c87d61b0fa63c6ec5644bce9f1d72b6abfed5ec8f529705db9223104fb", "examples/media/receipts/l1.json": "b019efecdb74b2b8c5851d827cda015a0629b62618b0c15abce258fa9e92fedc", "examples/media/receipts/l2.json": "ab269c704ce75ae963c704aa4b0a6011e534b9b755bdeb519d5415eba6a01eb2", "examples/media/renderings/l0.json": "62443c32a117f12ae956acedf2da67b38d992a0a5f490d565a5c825daca3b393", "examples/media/renderings/l1.json": "9f40f4f86f3bea5f60cc729ff6d980e936bc7aa899ef5ee1690ceee32dba70b6", "examples/media/renderings/l2.json": "0e2f7c43c045e01e7a4f9a40ceb77ad28b4435e6c44520462e65c6186ef395c0", "examples/operational-errors.json": "b18844e4f1782bde2e50c40d9a19d70b0334fe6fff752879491e867dd9d7bcf8", "examples/protocol.json": "4d55604497a8a17c2f05452d727f43ba12188751315d3e80d698c9630ac3a6a6", "examples/scopes.json": "a22a24b16de3dc7a9c08b51d9c7acf1797dc527c5bc93e16953bb8c231faa1d0", "history/CHANGES-from-proposal.md": "056426cd7072919800aabdb612399a7043b10f2e53188948226b12e004482e3e", "history/source-ambiguities.md": "0c726097938f88603ba084dbaa35362e675446e2d1187d9c2b6a4753965aafeb", "mcp/tools.json": "1288669c20ac103a35f6a47810ef86a31a7e763ddb54d518a9967edb0286fd05", "openapi/autonym-v1.yaml": "b1ddac85b2463a05e944970980320a51944bf8450f9e6b5dc0f99b8f12a14dff", "schemas/access-token-claims.json": "d453661445b2a45abc1282957b33b43143e6e5ef77f89c49ed349a8590b90f17", "schemas/capability-claim.json": "6e449da83211978d6840fceed56b17ede2d28b7b6a8ad940f96e7cf205182145", "schemas/client-metadata-document.json": "1ab0a0d3592b07831ee0283259563befc0fb76d1d1d315c5486e7b9dcf87d272", "schemas/client-metadata.json": "f51fd9f26553dbc614c3233ad94be3b66477f47dd7208200fc02852cff829696", "schemas/confirmation-result.json": "fb5431d48d38363ce4f2f453768b53e54fa424d1eb6192cb3409edd5d41f9aa2", "schemas/confirmation.json": "827d9f7a795263b0bd8663eb537ccc8ff63a0fdf0f5a4c1c108e5c0494308c5c", "schemas/context-request.json": "b8c127bdbc0ff9b2a3ba057a47cccfc292c8728e7085b1e508c5e3ef10e9e4a9", "schemas/contribution-detail.json": "c529ac027342e5e06215544fb5a5388cc886a3d51dafa62ca7ef1d9757c64936", "schemas/contribution-event.json": "747ad8ad8dcfc91dfbfaa8f2d96f4b1a3cb5a76863a3c80ad2eb30f6ef9a2faf", "schemas/disclosure.json": "11943a3a5eaa46852933d086fa4ede9b0b006df7267b8e3b3ffb7597c0367209", "schemas/discovery.json": "cc5c14058c9e547748f5af54cf88e5ae437f940a672d1e99bb2df6f50101ae4b", "schemas/domain-list.json": "54f355edb61c12c58a74e1ce7dd4ed8e68c632a7b3b74a3a78081c1c77b9dda0", "schemas/encrypted-export-header.json": "afe883537c1eca113b1e09fc9d5b4287c4e80f182e784acb522fe38aac600807", "schemas/entry.json": "243372aa44c7cbeb5f0992b3d5142e0638e64b877a1b8ae6ebf5ffbaad236853", "schemas/export.json": "9335145c701397076697e43e6d7c9704f9200ee77aa087ffff702bbd4f6ee6ed", "schemas/grant-offer-redemption.json": "79151d99e0f1e518f37926880337930ae70de0848b9905e61605125287efa205", "schemas/grant-offer-request.json": "accdedb6082794d177ef38d681c2b405d4b9c5c7b6771745ccd1a3e84a3c1972", "schemas/grant-offer.json": "f7b75ee17488db7d00864bbe62b98e19953a98eb38b74e8d01e5a80eb62920c6", "schemas/grant.json": "b48ec34d3aac4a9a93cb96784530e4ed5174bab8224a99c82224aaf0925775f5", "schemas/health.json": "8e86172164016a4516804fe6244ba5bd6ae524630771d13e7446489f54d12b26", "schemas/identifier.json": "c5c240831edd2426c484952d2b550cc32b56c0effdd5d1de989c84734ea3e431", "schemas/key-set.json": "10b8fb6fec2808b842b5b4613b97ac8a85506523c3ff53a9bd8754c62b60d9cf", "schemas/lifecycle-request.json": "db03d3ab49ef4529e73aebafcba5a44df729be2233be7c3bdabfce71405a85e7", "schemas/lifecycle-token-claims.json": "f0d241cc57d5f89f525c3cedc8bdff2b95974ff10d8c94a396bce16a3c43dd22", "schemas/log-event.json": "15264077de10e32e855fab7aa46eecf5f81b38fbdd18b87542996154a3173c0d", "schemas/problem.json": "bd3e114d00577d47940d2d7fc66613162f213af6c6c5869ea0b1f958ddda024b", "schemas/proposal-status.json": "45ddc4d9c8c5438e83e736cff5f15157bee43df6f355311242f473eb176502f9", "schemas/purge-ack.json": "ff795d418b0f7d16df09ad4bf1db4b2559f02beeaa69611e603b534f266bca9d", "schemas/purge-instruction.json": "b8bb7a1dbfce37ad1f7aa3d51feeca8dcb30dcad65ca58ccf9e121c907b9c16b", "schemas/purge-list.json": "b17bd41c7a5376a885c6460d13d8526026057d867fdca95fe6dfd3602ef4a608", "schemas/readiness.json": "08d0bde8aa63ae5925d68db6cd27e754ff65619b5623d575087bff524420f7ea", "schemas/receipt.json": "19b1a72885a072a6348720b190ae7875752c4c475968b6b30e560f9e35b62577", "schemas/scope-token.json": "4455b6699ff4c792a41cbc46c0bc37f14aee49bebe29801a225bc04545cb7bb0", "schemas/temporal.json": "8b3661ffe0b1ebfdb378c59995291dc3738ca86124c0b0b603f265cc935c5077", "schemas/tombstone.json": "7394046045f7a0975889722e1d27980f2f01f119e422a896ee73401e6da1b728", "schemas/withdrawal.json": "827d9f7a795263b0bd8663eb537ccc8ff63a0fdf0f5a4c1c108e5c0494308c5c", "scopes.json": "d5ec9587868f43d303c01ae6ebf1bc73b1712ed64184c0523a56e8e40cd35a36", "section-map.json": "f8e930164a5188638ce342a217b11a783bb1294c37a5636cf564d5d99bc5666d", "vocabulary/README.md": "bcc02bade4053a1c352f6c0647e0f2a206721a1f19e7554469eec46a8eb46061", "vocabulary/core.json": "5cf7e6bc7ac91aefbef702141e3b5aa0769b5d71dc8b51ff11215ad87e828b39" }, "contents": { "LICENSE": "\n Apache License\n Version 2.0, January 2004\n http://www.apache.org/licenses/\n\n TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n 1. Definitions.\n\n \"License\" shall mean the terms and conditions for use, reproduction,\n and distribution as defined by Sections 1 through 9 of this document.\n\n \"Licensor\" shall mean the copyright owner or entity authorized by\n the copyright owner that is granting the License.\n\n \"Legal Entity\" shall mean the union of the acting entity and all\n other entities that control, are controlled by, or are under common\n control with that entity. For the purposes of this definition,\n \"control\" means (i) the power, direct or indirect, to cause the\n direction or management of such entity, whether by contract or\n otherwise, or (ii) ownership of fifty percent (50%) or more of the\n outstanding shares, or (iii) beneficial ownership of such entity.\n\n \"You\" (or \"Your\") shall mean an individual or Legal Entity\n exercising permissions granted by this License.\n\n \"Source\" form shall mean the preferred form for making modifications,\n including but not limited to software source code, documentation\n source, and configuration files.\n\n \"Object\" form shall mean any form resulting from mechanical\n transformation or translation of a Source form, including but\n not limited to compiled object code, generated documentation,\n and conversions to other media types.\n\n \"Work\" shall mean the work of authorship, whether in Source or\n Object form, made available under the License, as indicated by a\n copyright notice that is included in or attached to the work\n (an example is provided in the Appendix below).\n\n \"Derivative Works\" shall mean any work, whether in Source or Object\n form, that is based on (or derived from) the Work and for which the\n editorial revisions, annotations, elaborations, or other modifications\n represent, as a whole, an original work of authorship. For the purposes\n of this License, Derivative Works shall not include works that remain\n separable from, or merely link (or bind by name) to the interfaces of,\n the Work and Derivative Works thereof.\n\n \"Contribution\" shall mean any work of authorship, including\n the original version of the Work and any modifications or additions\n to that Work or Derivative Works thereof, that is intentionally\n submitted to Licensor for inclusion in the Work by the copyright owner\n or by an individual or Legal Entity authorized to submit on behalf of\n the copyright owner. For the purposes of this definition, \"submitted\"\n means any form of electronic, verbal, or written communication sent\n to the Licensor or its representatives, including but not limited to\n communication on electronic mailing lists, source code control systems,\n and issue tracking systems that are managed by, or on behalf of, the\n Licensor for the purpose of discussing and improving the Work, but\n excluding communication that is conspicuously marked or otherwise\n designated in writing by the copyright owner as \"Not a Contribution.\"\n\n \"Contributor\" shall mean Licensor and any individual or Legal Entity\n on behalf of whom a Contribution has been received by Licensor and\n subsequently incorporated within the Work.\n\n 2. Grant of Copyright License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n copyright license to reproduce, prepare Derivative Works of,\n publicly display, publicly perform, sublicense, and distribute the\n Work and such Derivative Works in Source or Object form.\n\n 3. Grant of Patent License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n (except as stated in this section) patent license to make, have made,\n use, offer to sell, sell, import, and otherwise transfer the Work,\n where such license applies only to those patent claims licensable\n by such Contributor that are necessarily infringed by their\n Contribution(s) alone or by combination of their Contribution(s)\n with the Work to which such Contribution(s) was submitted. If You\n institute patent litigation against any entity (including a\n cross-claim or counterclaim in a lawsuit) alleging that the Work\n or a Contribution incorporated within the Work constitutes direct\n or contributory patent infringement, then any patent licenses\n granted to You under this License for that Work shall terminate\n as of the date such litigation is filed.\n\n 4. Redistribution. You may reproduce and distribute copies of the\n Work or Derivative Works thereof in any medium, with or without\n modifications, and in Source or Object form, provided that You\n meet the following conditions:\n\n (a) You must give any other recipients of the Work or\n Derivative Works a copy of this License; and\n\n (b) You must cause any modified files to carry prominent notices\n stating that You changed the files; and\n\n (c) You must retain, in the Source form of any Derivative Works\n that You distribute, all copyright, patent, trademark, and\n attribution notices from the Source form of the Work,\n excluding those notices that do not pertain to any part of\n the Derivative Works; and\n\n (d) If the Work includes a \"NOTICE\" text file as part of its\n distribution, then any Derivative Works that You distribute must\n include a readable copy of the attribution notices contained\n within such NOTICE file, excluding those notices that do not\n pertain to any part of the Derivative Works, in at least one\n of the following places: within a NOTICE text file distributed\n as part of the Derivative Works; within the Source form or\n documentation, if provided along with the Derivative Works; or,\n within a display generated by the Derivative Works, if and\n wherever such third-party notices normally appear. The contents\n of the NOTICE file are for informational purposes only and\n do not modify the License. You may add Your own attribution\n notices within Derivative Works that You distribute, alongside\n or as an addendum to the NOTICE text from the Work, provided\n that such additional attribution notices cannot be construed\n as modifying the License.\n\n You may add Your own copyright statement to Your modifications and\n may provide additional or different license terms and conditions\n for use, reproduction, or distribution of Your modifications, or\n for any such Derivative Works as a whole, provided Your use,\n reproduction, and distribution of the Work otherwise complies with\n the conditions stated in this License.\n\n 5. Submission of Contributions. Unless You explicitly state otherwise,\n any Contribution intentionally submitted for inclusion in the Work\n by You to the Licensor shall be under the terms and conditions of\n this License, without any additional terms or conditions.\n Notwithstanding the above, nothing herein shall supersede or modify\n the terms of any separate license agreement you may have executed\n with Licensor regarding such Contributions.\n\n 6. Trademarks. This License does not grant permission to use the trade\n names, trademarks, service marks, or product names of the Licensor,\n except as required for reasonable and customary use in describing the\n origin of the Work and reproducing the content of the NOTICE file.\n\n 7. Disclaimer of Warranty. Unless required by applicable law or\n agreed to in writing, Licensor provides the Work (and each\n Contributor provides its Contributions) on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n implied, including, without limitation, any warranties or conditions\n of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n PARTICULAR PURPOSE. You are solely responsible for determining the\n appropriateness of using or redistributing the Work and assume any\n risks associated with Your exercise of permissions under this License.\n\n 8. Limitation of Liability. In no event and under no legal theory,\n whether in tort (including negligence), contract, or otherwise,\n unless required by applicable law (such as deliberate and grossly\n negligent acts) or agreed to in writing, shall any Contributor be\n liable to You for damages, including any direct, indirect, special,\n incidental, or consequential damages of any character arising as a\n result of this License or out of the use or inability to use the\n Work (including but not limited to damages for loss of goodwill,\n work stoppage, computer failure or malfunction, or any and all\n other commercial damages or losses), even if such Contributor\n has been advised of the possibility of such damages.\n\n 9. Accepting Warranty or Additional Liability. While redistributing\n the Work or Derivative Works thereof, You may choose to offer,\n and charge a fee for, acceptance of support, warranty, indemnity,\n or other liability obligations and/or rights consistent with this\n License. However, in accepting such obligations, You may act only\n on Your own behalf and on Your sole responsibility, not on behalf\n of any other Contributor, and only if You agree to indemnify,\n defend, and hold each Contributor harmless for any liability\n incurred by, or claims asserted against, such Contributor by reason\n of your accepting any such warranty or additional liability.\n\n END OF TERMS AND CONDITIONS\n\n APPENDIX: How to apply the Apache License to your work.\n\n To apply the Apache License to your work, attach the following\n boilerplate notice, with the fields enclosed by brackets \"[]\"\n replaced with your own identifying information. (Don't include\n the brackets!) The text should be enclosed in the appropriate\n comment syntax for the file format. We also recommend that a\n file or class name and description of purpose be included on the\n same \"printed page\" as the copyright notice for easier\n identification within third-party archives.\n\n Copyright [yyyy] [name of copyright owner]\n\n Licensed under the Apache License, Version 2.0 (the \"License\");\n you may not use this file except in compliance with the License.\n You may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\n Unless required by applicable law or agreed to in writing, software\n distributed under the License is distributed on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n See the License for the specific language governing permissions and\n limitations under the License.\n", "README.md": "# Open Personal Context specification\n\nDocument version: `1.0-draft-1`. Wire version: `1.0`.\n\nThis is the draft specification of Open Personal Context: how a person's context is typed, deliberately disclosed and verifiably accounted for across assistants and services. Autonym is its reference implementation. The draft defines person-controlled records, consent, disclosure, temporary context, contributions and portability. See [conformance status](conformance/README.md) for implementation and test coverage.\n\n## Structure\n\n| Part | Location | Status |\n| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| Core | [`core/`](core/a01-scope-and-layering.md) | Normative: A1 to A11 and A14 to A17, with [terminology](core/terminology.md), [design principles](core/principles.md) and the implementation notes for [identifiers](core/identifiers.md) and [scopes](core/scopes.md) |\n| Reserved chapters | [`core/reserved/`](core/reserved/a12-recipient-registry.md) | Informative placeholders, with no requirements, for capabilities reserved for 2.0: A12 recipient registry, A13 emergency information and continuous connectors. Their version 1 rules now live in A2.1, A6.8 and A17.6 |\n| Bindings | [`bindings/`](bindings/README.md) | B1 PDPP, B3 MCP and B4 REST normative; B2 Linked Web Storage informative |\n| Adoption records | [`adoption/`](adoption/README.md) | Normative where cited: one record per external standard, the generated register and the PDPP pin in [`pdpp.lock.json`](adoption/pdpp.lock.json) |\n| Vocabulary | [`vocabulary/`](vocabulary/README.md) | Normative registry, generated as [`core.json`](vocabulary/core.json) |\n| Conformance | [`conformance/`](conformance/README.md) | Normative manifest of stable check IDs in [`profiles.json`](conformance/profiles.json), and the [statement audit](conformance/statements.json) that maps every extracted normative statement to its checks; informative [test vectors](conformance/vectors/README.md) with synthetic keys |\n| Contracts | [`schemas/`](schemas/entry.json), [`openapi/`](openapi/autonym-v1.yaml), [`mcp/`](mcp/tools.json), [`errors.json`](errors.json), [`scopes.json`](scopes.json) | Generated from `packages/schema` |\n| Operational artefacts | [`schemas/health.json`](schemas/health.json), [`schemas/readiness.json`](schemas/readiness.json), [`examples/operational-errors.json`](examples/operational-errors.json) | Informative here: generated contracts of the reference server's operational surface, which the reference implementation documents outside the specification. `errors.json` covers these operational codes as well as the recipient codes B4.3 governs |\n| Examples | [`examples/`](examples/protocol.json) | Informative synthetic examples |\n| History | [`history/`](history/CHANGES-from-proposal.md) | Informative: changes from the recovered proposal and interpretation notes |\n\n## Core chapters\n\n- [A1 scope, status and layering](core/a01-scope-and-layering.md)\n- [A2 actors and trust model](core/a02-actors-and-trust.md)\n- [A3 identifiers, handles and resolution](core/a03-identifiers-and-resolution.md)\n- [A4 data model](core/a04-data-model.md)\n- [A5 disclosure and the compiler](core/a05-disclosure.md)\n- [A6 authorisation](core/a06-authorisation.md)\n- [A7 agent surface](core/a07-agent-surface.md)\n- [A8 recipient API](core/a08-recipient-api.md)\n- [A9 read receipts and the log](core/a09-receipts-and-log.md)\n- [A10 revocation and purge](core/a10-revocation-and-purge.md)\n- [A11 portability](core/a11-portability.md)\n- [A14 contributions](core/a14-contributions.md)\n- [A15 security requirements](core/a15-security.md)\n- [A16 privacy and legal mapping](core/a16-privacy-mapping.md)\n- [A17 conformance and change process](core/a17-conformance-and-change.md)\n\nThe consent, temporary-context and reciprocity requirements first published as A18 are now A4.6, A6.7, A14.5 and A17.5. [`section-map.json`](section-map.json) maps every section of document 0.2-draft to its new location.\n\n## Edition and bundle\n\nEdition `1.0-draft-1` is the specification text above with the generated contracts stamped with that version. [`manifest.json`](manifest.json) lists every file in the edition with its SHA-256, so an implementation can identify the exact edition it uses. `pnpm check:spec` fails if the manifest, the section map, a local link or a generated scaffold is out of date, or if the text names a person, cites the project's decision log or refers to a build phase or work package; `pnpm check:generated` fails if a generated contract differs from `packages/schema`; `pnpm check:statements` fails if a normative statement has no current entry in the statement audit. Neither certifies service behaviour.\n\nThe core text is maintained by hand from this edition on. The recovered proposal it was first imported from stays hash-locked, unchanged, in the reference repository's source inventory, outside the specification.\n\nA17 defines versioning: the document version and the wire version are separate, the `Autonym-Version` header echoes the wire version, and breaking wire changes change the URL prefix and require an approved ADR. While the protocol is a draft, changes go through a reviewed pull request with a change-register entry, schema and generated artefact updates and corresponding conformance checks. A public registry or governance process is not established yet.\n\nLicence: Apache-2.0. See the root `LICENSING.md` for boundaries.\n", "adoption/README.md": "# Standards adoption register\n\n**Status:** normative where cited. Document version `1.0-draft-1`. Generated from the records in this folder by `pnpm spec:adoption`; do not edit by hand.\n\nEvery external standard the specification uses has one adoption record here, with the same headings: version pinned, what is taken, why, what is extended, what is replaced or not used, deviations, and the conformance checks that prove the integration. The specification cites the record wherever it uses the standard. An adopted standard is pinned; a later version is taken only through a change entry with a migration note.\n\n| Standard | Version pinned | Status | What Open Personal Context takes | Why | What it extends or replaces | Specification home |\n| --- | --- | --- | --- | --- | --- | --- |\n| [W3C AI Agent Memory Interoperability CG and draft-saihm](agent-memory-interop.md) | Community Group charter 1.0 (adopted 19 June 2026); draft-saihm-memory-protocol-01 (27 May 2026) | Track and align shapes | Nothing normative; receipt and erasure message shapes are compared for alignment | Avoids gratuitous divergence from emerging agent-memory work | Open Personal Context receipts are per read, not per memory write | A9, A10 notes |\n| [W3C Data Privacy Vocabulary (DPV)](dpv.md) | DPV 2.3 (25 February 2026) | Adopt terms | Purpose and provenance classes | Interoperable purpose names rather than invented ones | Maps Open Personal Context purposes to DPV terms; adds the advertising constraints | A4.2, A6.2 |\n| [Human Context Protocol](hcp.md) | Position paper SSRN 5403981 (project page dated 18 December 2025); no protocol version or file format published | Map, do not adopt | Nothing yet; a mapping from user-held preferences into the declared lane is planned | Lets people who keep preferences in an HCP server bring them into a record as declared entries | Replaces language-model-mediated disclosure with deterministic, person-approved renderings | A11 import mapping (planned) |\n| [IAB Tech Lab Data Deletion Request Framework](iab-data-subject-rights.md) | Version 2.0 (August 2026) | Adopt the request and acknowledgement shape | Signed deletion request and acknowledgement concepts | A published shape for purge semantics that recipients may already handle | Binds the request and acknowledgement to the grant and receipt identifiers | A10 |\n| [ISO/IEC 24751 (AccessForAll)](iso-24751.md) | ISO/IEC 24751-2:2008 (with parts 1 and 3:2008 and part 4:2023) | Adopt the vocabulary for the accessibility domain (catalogue entry only) | Accessibility preference terms, pending a licensed text | Avoids inventing accessibility keys | Maps to vocabulary keys | Vocabulary registry |\n| [ISO/IEC TS 27560 consent record information structure](iso-27560.md) | ISO/IEC TS 27560:2023, edition 1 (8 August 2023) | Adopt the record structure (catalogue entry only) | Consent receipt fields, pending a licensed text | Lets a grant be exported as a recognised consent record | Adds disclosure level and rendering version | A6.3, A9, A11 |\n| [JWS (RFC 7515), JCS (RFC 8785), JWK (RFC 7517), JWK thumbprints (RFC 7638), JWA (RFC 7518), I-JSON (RFC 7493), JWK exp (OpenID Federation 1.0)](jose.md) | RFC 7515, RFC 7517 and RFC 7518 (May 2015); RFC 7493 (March 2015); RFC 7638 (September 2015); RFC 8785 (June 2020); RFC 9864 (October 2025); OpenID Federation 1.0, Final (17 February 2026), JWK exp only | Adopt | Signing receipts, disclosures, purge instructions, purge acknowledgements and exports over canonical JSON, with ES256 and published keys named by their thumbprints and retired with exp | Standard signatures with maintained libraries; no bespoke cryptography | Defines the receipt, disclosure, purge and export object shapes and their protected typ values, the provider key set and one spelling for instants | A5.3, A5.4, A9, A10, A11, A15.2 |\n| [JSON Schema 2020-12, OpenAPI 3.1, RFC 9457 Problem Details](json-schema-openapi-problem-details.md) | JSON Schema 2020-12 (16 June 2022); OpenAPI 3.1.0 (15 February 2021); RFC 9457 (July 2023) | Adopt | Wire shapes, API description and the error format | The generated artefacts and their drift checks depend on them | Adds the closed registry of urn:autonym:error:* types | A8, B4, generated contracts |\n| [JWE (RFC 7516) and Argon2id (RFC 9106)](jwe-argon2id.md) | RFC 7516 (May 2015); RFC 9106 (September 2021) | Adopt | Passphrase-encrypted export | Standard envelope encryption for the portable export, with a maintained memory-hard key derivation | None | A11.2 |\n| [W3C Linked Web Storage / Solid](linked-web-storage.md) | Linked Web Storage Protocol 1.0, Working Draft of 21 September 2026; Solid Protocol 0.11.0 (12 May 2024) | Optional storage binding, 2.0 stream | Resource addressing and access grants as an alternative store | Lets a person keep the record in a pod they already have | Binding only; the native store remains the default | Binding B2 (post 1.0) |\n| [Model Context Protocol](mcp.md) | Specification revision 2026-07-28 (current revision on 4 October 2026) | Adopt as the agent binding | Tools, resources, prompts, server discovery, the stateless Streamable HTTP transport and the MCP authorisation flow | The surface assistants actually use | Defines the Open Personal Context tool set, confirmation semantics and briefing resources; no generic record access | A7, B3 |\n| [OAuth 2.1, PKCE, RFC 9396 rich authorisation requests, DPoP (RFC 9449)](oauth.md) | draft-ietf-oauth-v2-1-16 (3 September 2026) with RFC 6749, 6750, 7009, 7523, 7591, 7636, 7662, 8252, 8414, 8693, 8707, 9068, 9101, 9126, 9207, 9396, 9449, 9700 and 9728, OpenID Connect Core 1.0 section 9 and draft-ietf-oauth-client-id-metadata-document-02 | Adopt as the authorisation primitives of A6, B1, B3 and B4 | Client registration and lifecycle, PKCE flows, pushed authorisation requests, resource indicators, sender-constrained tokens, structured authorisation details, protected-resource and server metadata, issuer identification, revocation, token exchange and JWT access tokens | Mature, library-supported primitives that recipients already speak | Profiles the authorization_details type for domain and level, the contribution request and the grant-offer exchange; makes PKCE S256 and DPoP mandatory for every client and every access token; nothing replaced | A6, B1 |\n| [PDPP Core (PDP-Connect, LF Decentralized Trust)](pdpp.md) | PDPP Core v0.1.0 at commit 8f79a48 (2026-09-23) | Adopt as the normative 1.0 grant binding (B1); implement in the Autonym server | Grants with purpose, selection, expiry and revocation; sources and records; the query surface; introspection; the Core section 9 conformance requirements, tested by Autonym's own checks until PDPP publishes its suite | A neutral, foundation-hosted grant protocol with a planned conformance programme; building on it is cheaper than defending a bespoke one and opens the Verified Operator route | Adds disclosure levels and renderings as statically declared derived streams; adds per-read receipts, purge acknowledgement and typed context, which Core leaves out; makes DPoP and PKCE mandatory where Core leaves them out or advisory | B1 |\n| [SD-JWT VC, OpenID4VC, SMART Health Links, International Patient Summary](reserved-credentials.md) | RFC 9901; draft-ietf-oauth-sd-jwt-vc-19; OpenID4VP 1.0; OpenID4VCI 1.0; SMART Health Cards and Links IG 1.0.0; IPS IG 2.0.1 | Reserved | Nothing in 1.0; credential presentations and an emergency card in 2.0 | Needed only by capabilities reserved for 2.0 | Nothing in 1.0 | Reserved chapters (A12, A13) |\n| [SCITT architecture and COSE Receipts](scitt.md) | RFC 9943 and RFC 9942 (June 2026) | Evaluate; adopt if the receipt format can be expressed as a SCITT receipt | Under evaluation - transparency receipts and the append-only log shape | Aligns the accountability log with a published transparency standard | Possible replacement of the bespoke chain format; not yet decided | A9, this record decides |\n", "adoption/agent-memory-interop.md": "---\nname: agent-memory-interop\ntitle: W3C AI Agent Memory Interoperability CG and draft-saihm\nstatus: Track and align shapes\nversion: Community Group charter 1.0 (adopted 19 June 2026); draft-saihm-memory-protocol-01 (27 May 2026)\nsource: https://www.w3.org/community/ai-agent-memory-interop/\ntakes: Nothing normative; receipt and erasure message shapes are compared for alignment\nwhy: Avoids gratuitous divergence from emerging agent-memory work\nextends: Open Personal Context receipts are per read, not per memory write\nspec_home: A9, A10 notes\n---\n\n# AI agent memory interoperability\n\n## Version pinned\n\n- The W3C [AI Agent Memory Interoperability Community Group](https://www.w3.org/community/ai-agent-memory-interop/) (`ai-agent-memory-interop`), launched 3 June 2026, charter 1.0 adopted 19 June 2026. It has published no report or draft. A Community Group is not on the W3C standards track.\n- [draft-saihm-memory-protocol-01](https://datatracker.ietf.org/doc/draft-saihm-memory-protocol/), \"The Sovereign AI Horizontal Memory (SAIHM) Protocol\", 27 May 2026, an individual Internet-Draft intended as Informational, with no IETF standing. The group's charter treats it as a normative reference.\n\n## What is taken\n\nNothing normative. When receipt (A9) and erasure (A10) shapes are next revised, they are compared with these to avoid needless divergence.\n\n## Why\n\nOpen Personal Context tracks this work as prior art for receipts and erasure.\n\n## What is extended\n\nOpen Personal Context receipts record each disclosure to a recipient, not each memory write. Purge acknowledgements are recorded assertions, never proof of erasure (A10).\n\n## What is replaced or not used\n\nThe draft's post-quantum identity binding, public-chain audit anchoring and encrypted memory cells are not used.\n\n## Deviations\n\nThe group's post of 29 July 2026 and the IETF datatracker disagree on the draft's status (concluded independent-submission consideration, as against \"In ISE Review\"). This record cites the datatracker.\n\n## Conformance checks\n\nNone. LOG-01 and PURGE-01 cover the Open Personal Context receipt and purge shapes.\n", "adoption/dpv.md": "---\nname: dpv\ntitle: W3C Data Privacy Vocabulary (DPV)\nstatus: Adopt terms\nversion: DPV 2.3 (25 February 2026)\nsource: https://w3id.org/dpv/\ntakes: Purpose and provenance classes\nwhy: Interoperable purpose names rather than invented ones\nextends: Maps Open Personal Context purposes to DPV terms; adds the advertising constraints\nspec_home: A4.2, A6.2\n---\n\n# Data Privacy Vocabulary\n\n## Version pinned\n\n[Data Privacy Vocabulary (DPV) version 2.3](https://w3id.org/dpv/), 25 February 2026, a Final Community Group Report of the W3C Data Privacy Vocabularies and Controls Community Group, read through w3id.org on 4 October 2026. A Community Group report is not a W3C Recommendation.\n\n## What is taken\n\n- Purpose terms: `dpv:Purpose`, `dpv:hasPurpose` and categories such as `ServiceProvision`, `Personalisation` and `TargetedAdvertising`.\n- Provenance terms: `DataSource`, `hasDataSource`, and `Provided`, `Collected`, `Observed`, `Derived` and `Inferred`.\n\nThe mapping from the ten Open Personal Context purpose categories (A6.2) and the provenance kinds (A4.2) to these terms is written when grants carry purposes on the wire.\n\n## Why\n\nPurpose and provenance names that other privacy tooling already understands make grants and receipts easier to audit and to export as consent records.\n\n## What is extended\n\nAdvertising is a separate, explicitly consented purpose with the A6.7 restrictions, which DPV's `TargetedAdvertising` does not itself impose.\n\n## What is replaced or not used\n\nPDPP's example purpose URIs under `pdpp.dev` are not used as the purpose vocabulary (see the [PDPP record](pdpp.md), at commit `8f79a48`).\n\n## Deviations\n\nDPV's dated \"This version\" link returned 404 on 4 October 2026; this record pins the w3id.org address with the version number.\n\n## Conformance checks\n\nCONSENT-01 and SCOPE-02 in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending.\n", "adoption/hcp.md": "---\nname: hcp\ntitle: Human Context Protocol\nstatus: Map, do not adopt\nversion: Position paper SSRN 5403981 (project page dated 18 December 2025); no protocol version or file format published\nsource: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5403981\ntakes: Nothing yet; a mapping from user-held preferences into the declared lane is planned\nwhy: Lets people who keep preferences in an HCP server bring them into a record as declared entries\nextends: Replaces language-model-mediated disclosure with deterministic, person-approved renderings\nspec_home: A11 import mapping (planned)\n---\n\n# Human Context Protocol\n\n## Version pinned\n\n\"Robust AI Personalization Controls: The Human Context Protocol\", [SSRN 5403981](https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5403981), from the Loyal Agents project of the Stanford Digital Economy Lab with the Consumer Reports Innovation Lab; the [project page](https://digitaleconomy.stanford.edu/project/loyal-agents/hcp-human-context-protocol/) is dated 18 December 2025. It is a research proposal with a prototype (`github.com/tobinsouth/hcp-demo`, no release). There is no versioned specification to pin, so this record pins the paper.\n\n## What is taken\n\nNothing in version 1. An importer is planned that maps a person's HCP preferences into proposals for declared entries, each confirmed by the person (A4.2), with the mapping table published here.\n\n## Why\n\nHCP describes a user-owned preference layer exposed to agents through three server tools (schema definition, preference search and preference update). People who already keep preferences there should be able to bring them into a record without retyping them.\n\n## What is extended\n\nOpen Personal Context discloses through deterministic compiled renderings at a granted level (A5), rather than letting a model decide what to reveal from natural-language preferences.\n\n## What is replaced or not used\n\nHCP's language-model-mediated disclosure is not used.\n\n## Deviations\n\nHCP publishes no file format: the paper stores preferences \"primarily in natural language\", and the project site mentions JSON, Markdown, vector databases or personal data pods. The planned importer therefore needs a concrete export to map before it can be specified. The work is joint between the Stanford Digital Economy Lab and the Consumer Reports Innovation Lab.\n\n## Conformance checks\n\nNone in version 1. PORT-01 will cover the importer once it is specified.\n", "adoption/iab-data-subject-rights.md": "---\nname: iab-data-subject-rights\ntitle: IAB Tech Lab Data Deletion Request Framework\nstatus: Adopt the request and acknowledgement shape\nversion: Version 2.0 (August 2026)\nsource: https://github.com/InteractiveAdvertisingBureau/Data-Subject-Rights/blob/main/Data%20Deletion%20Request%20Framework.md\ntakes: Signed deletion request and acknowledgement concepts\nwhy: A published shape for purge semantics that recipients may already handle\nextends: Binds the request and acknowledgement to the grant and receipt identifiers\nspec_home: A10\n---\n\n# IAB Tech Lab Data Deletion Request Framework\n\n## Version pinned\n\nIAB Tech Lab [Data Deletion Request Framework](https://github.com/InteractiveAdvertisingBureau/Data-Subject-Rights/blob/main/Data%20Deletion%20Request%20Framework.md) version 2.0, August 2026 (version 1.0 was May 2024), read from the file in the `Data-Subject-Rights` repository on 4 October 2026. The repository's commit could not be recorded, because GitHub API access was denied in this session; the version and date come from the file's own history. The framework's name is the Data Deletion Request Framework; \"Data Subject Rights\" is the repository name.\n\n## What is taken\n\nThe concepts, not the wire format: a deletion request signed by the party that holds the authority, forwarded to each recipient, and an acknowledgement signed by the recipient carrying a result. The framework uses signed JSON Web Tokens for the request and the acknowledgement and publishes verification keys at well-known locations.\n\n## Why\n\nPurge reuses established deletion-request concepts rather than defining its own. Recipients in advertising may already implement this framework.\n\n## What is extended\n\nA10 binds each purge instruction to the grant that ended and the pairwise subject, uses the reason `grant_ended` for both revocation and expiry, and records the acknowledgement as `purged`, `not_held` or `legal_hold`. An acknowledgement is the recipient's assertion, never proof of erasure.\n\n## What is replaced or not used\n\nThe framework's hop-by-hop forwarding and its `/.well-known/iabtl/` key locations are not used; Open Personal Context delivers instructions directly to each recipient and verifies keys against the recipient's registration (A10).\n\n## Deviations\n\nThe framework is sometimes described as a \"Data Subject Rights framework\"; this record uses its own name.\n\n## Conformance checks\n\nPURGE-01 and ADS-02 in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending.\n", "adoption/iso-24751.md": "---\nname: iso-24751\ntitle: ISO/IEC 24751 (AccessForAll)\nstatus: Adopt the vocabulary for the accessibility domain (catalogue entry only)\nversion: ISO/IEC 24751-2:2008 (with parts 1 and 3:2008 and part 4:2023)\nsource: https://www.iso.org/standard/43603.html\ntakes: Accessibility preference terms, pending a licensed text\nwhy: Avoids inventing accessibility keys\nextends: Maps to vocabulary keys\nspec_home: Vocabulary registry\n---\n\n# ISO/IEC 24751\n\n## Version pinned\n\nThe ISO/IEC 24751 series, Individualized adaptability and accessibility in e-learning, education and training, from JTC 1/SC 36, read from ISO's open data feed on 4 October 2026 (the catalogue pages refused automated reads):\n\n- ISO/IEC 24751-1:2008, Framework and reference model, [catalogue 41521](https://www.iso.org/standard/41521.html).\n- **ISO/IEC 24751-2:2008, \"Access for all\" personal needs and preferences for digital delivery**, [catalogue 43603](https://www.iso.org/standard/43603.html), the part relevant to accessibility preferences.\n- ISO/IEC 24751-3:2008, \"Access for all\" digital resource description, [catalogue 43604](https://www.iso.org/standard/43604.html).\n- ISO/IEC 24751-4:2023, \"Access for all\" framework for individualized accessibility and registry server API, [catalogue 82901](https://www.iso.org/standard/82901.html).\n\n## What is taken\n\nNo licensed copy of the standard was available to the editors; the field-level mapping from the accessibility vocabulary keys to part 2's preference terms is pending a licensed text, and this record cites the catalogue entry only.\n\n## Why\n\nAccessibility preferences are among the most sensitive and useful context a person can share; reusing an established information model avoids inventing terms.\n\n## What is extended\n\nWhen the mapping is written, each mapped term becomes a vocabulary key with its disclosure levels and renderings (see the [vocabulary registry](../vocabulary/README.md)).\n\n## What is replaced or not used\n\nParts 1, 3 and 4 are recorded for context; only part 2's preference terms are candidates for mapping.\n\n## Deviations\n\nThe vocabulary registry already states that no semantic compatibility with ISO 24751 is claimed without a separately reviewed mapping. The mapping is pending a licensed text.\n\n## Conformance checks\n\nNone until the mapping exists; the VOCAB checks will cover any key it adds.\n", "adoption/iso-27560.md": "---\nname: iso-27560\ntitle: ISO/IEC TS 27560 consent record information structure\nstatus: Adopt the record structure (catalogue entry only)\nversion: ISO/IEC TS 27560:2023, edition 1 (8 August 2023)\nsource: https://www.iso.org/standard/80392.html\ntakes: Consent receipt fields, pending a licensed text\nwhy: Lets a grant be exported as a recognised consent record\nextends: Adds disclosure level and rendering version\nspec_home: A6.3, A9, A11\n---\n\n# ISO/IEC TS 27560\n\n## Version pinned\n\nISO/IEC TS 27560:2023, Privacy technologies - Consent record information structure, edition 1, 8 August 2023, from JTC 1/SC 27, [catalogue entry 80392](https://www.iso.org/standard/80392.html). It is a Technical Specification, not an International Standard. The catalogue marks it \"to be revised\"; a replacement draft, ISO/IEC CD 27560.2, \"Structure of Personally Identifiable Information (PII) Processing Records\", is in progress. Catalogue data were read from ISO's open data feed on 4 October 2026, because the catalogue page refused automated reads.\n\n## What is taken\n\nNo licensed copy of the standard was available to the editors; the field-level mapping from grants and receipts to the consent record structure is pending a licensed text, and this record cites the catalogue entry only. A9 already says the draft claims no certified mapping to this standard.\n\n## Why\n\nExporting a grant as a recognised consent record lets a person or an auditor read it with other consent tooling, through the portable export (A11).\n\n## What is extended\n\nWhen the mapping is written, the disclosure level and the rendering version are expected to be extensions, since they are Open Personal Context concepts.\n\n## What is replaced or not used\n\nNothing yet.\n\n## Deviations\n\nThe field-level mapping is pending a licensed text. The W3C DPV group's guide \"Consent Records and Receipts as per ISO/IEC TS 27560:2023 using DPV\" (15 February 2026) is a possible public route to the field list, but it is not the standard's text.\n\n## Conformance checks\n\nPORT-01 in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending until the mapping exists.\n", "adoption/jose.md": "---\nname: jose\ntitle: JWS (RFC 7515), JCS (RFC 8785), JWK (RFC 7517), JWK thumbprints (RFC 7638), JWA (RFC 7518), I-JSON (RFC 7493), JWK exp (OpenID Federation 1.0)\nstatus: Adopt\nversion: RFC 7515, RFC 7517 and RFC 7518 (May 2015); RFC 7493 (March 2015); RFC 7638 (September 2015); RFC 8785 (June 2020); RFC 9864 (October 2025); OpenID Federation 1.0, Final (17 February 2026), JWK exp only\nsource: https://www.rfc-editor.org/rfc/rfc7515\ntakes: Signing receipts, disclosures, purge instructions, purge acknowledgements and exports over canonical JSON, with ES256 and published keys named by their thumbprints and retired with exp\nwhy: Standard signatures with maintained libraries; no bespoke cryptography\nextends: Defines the receipt, disclosure, purge and export object shapes and their protected typ values, the provider key set and one spelling for instants\nspec_home: A5.3, A5.4, A9, A10, A11, A15.2\n---\n\n# JOSE signatures and canonical JSON\n\n## Version pinned\n\n- [RFC 7515](https://www.rfc-editor.org/rfc/rfc7515), JSON Web Signature, May 2015, Proposed Standard.\n- [RFC 7517](https://www.rfc-editor.org/rfc/rfc7517), JSON Web Key, May 2015, Proposed Standard.\n- [RFC 7518](https://www.rfc-editor.org/rfc/rfc7518), JSON Web Algorithms, May 2015, Proposed Standard, updated by [RFC 9864](https://www.rfc-editor.org/rfc/rfc9864) (October 2025, Proposed Standard).\n- [RFC 7638](https://www.rfc-editor.org/rfc/rfc7638), JSON Web Key (JWK) Thumbprint, September 2015, Proposed Standard.\n- [RFC 7493](https://www.rfc-editor.org/rfc/rfc7493), The I-JSON Message Format, March 2015, Proposed Standard.\n- [RFC 8785](https://www.rfc-editor.org/rfc/rfc8785), JSON Canonicalization Scheme, June 2020, Informational.\n- [OpenID Federation 1.0](https://openid.net/specs/openid-federation-1_0.html), 17 February 2026, Final: only the JWK parameter `exp` that its section 8.7.2 registers in the IANA JSON Web Key Parameters registry.\n\n## What is taken\n\n- Detached compact JWS (RFC 7515 Appendix F) over UTF-8 RFC 8785 canonical JSON of the object without `proof`, with ES256 and a `kid` resolved only against the issuer's trusted key set (A5.4).\n- JWK sets for publishing verification keys (A3.3, A5.4, A11.1).\n- RFC 7638 SHA-256 thumbprints as key IDs, so a key ID names one key (A5.4, A9), as OpenID Federation 1.0 also recommends for its keys.\n- The registered JWK parameter `exp`, in whole seconds since the epoch, as a published key's retirement time: what the key signed before it still verifies, and anything dated at or after it is rejected (A5.4, A9).\n- I-JSON: signed text with a lone surrogate, a noncharacter, a number with more magnitude or precision than binary64 provides, or a repeated member name is rejected before canonicalisation (A5.4).\n- RFC 8785 canonicalisation for handle and alias derivation input (A3.2), response hashes (A9) and statement hashes (A7.2).\n\n## Why\n\nSigned, canonical objects let a recipient or the person verify what was disclosed offline with standard libraries. AGENTS.md rule 9 forbids hand-rolled cryptography or canonicalisation.\n\n## What is extended\n\nThe signed object shapes and their protected `typ` values are Open Personal Context's: `autonym-disclosure+jws`, `autonym-receipt+jws`, `autonym-purge+jwt`, `autonym-purge-ack+jws` and `autonym-export+jws`. One spelling is fixed for instants in signed objects (A5.4).\n\n## What is replaced or not used\n\nUnencoded-payload mode, `alg:none`, critical headers, any protected header member other than `alg`, `kid` and `typ`, and key URLs or keys supplied by the object or its header are rejected (A5.4). Only ES256 is accepted. Of the key lifetime parameters OpenID Federation 1.0 registers, only `exp` is used; a key carrying `nbf`, `iat` or `revoked` is not used to verify, and OpenID Federation's historical keys endpoint and signed JWK set are not used: retired keys stay in the ordinary key set.\n\n## Deviations\n\nRFC 8785 is Informational, not standards track; it is adopted because it is the maintained canonicalisation scheme JOSE libraries implement. RFC 9864 updates RFC 7518 with fully specified algorithm identifiers and changes nothing for ES256: it names the JOSE `ES256` as already fully specified (P-256 with SHA-256), defines new fully specified identifiers only for COSE ECDSA and for EdDSA, and deprecates only the polymorphic JOSE `EdDSA`. Its recommendation that a JWK carry `alg`, so that a key is used with one algorithm, is why each published key carries `alg:ES256`.\n\n## Conformance checks\n\nSIGN-01, LOG-01, LOG-02, KEY-01 and, for the signed purge instruction and acknowledgement, PURGE-01 in the [conformance manifest](../conformance/profiles.json). SIGN-01 has library evidence from the reference verifier's tests. The published [test vectors](../conformance/vectors/README.md) give the RFC 8785 canonical bytes, the detached JWS of each signed object with its keys, and the failures A5.4 rejects; the reference implementation checks them with its own verifier and independently with Python `jwcrypto` and `rfc8785`. KEY-01 has integration evidence from the reference implementation's key store, tested against a real database. Runtime evidence for the others is pending.\n", "adoption/json-schema-openapi-problem-details.md": "---\nname: json-schema-openapi-problem-details\ntitle: JSON Schema 2020-12, OpenAPI 3.1, RFC 9457 Problem Details\nstatus: Adopt\nversion: JSON Schema 2020-12 (16 June 2022); OpenAPI 3.1.0 (15 February 2021); RFC 9457 (July 2023)\nsource: https://json-schema.org/draft/2020-12/json-schema-core\ntakes: Wire shapes, API description and the error format\nwhy: The generated artefacts and their drift checks depend on them\nextends: Adds the closed registry of urn:autonym:error:* types\nspec_home: A8, B4, generated contracts\n---\n\n# JSON Schema, OpenAPI and Problem Details\n\n## Version pinned\n\n- **JSON Schema draft 2020-12:** [Core](https://json-schema.org/draft/2020-12/json-schema-core) (draft-bhutton-json-schema-01) and [Validation](https://json-schema.org/draft/2020-12/json-schema-validation) (draft-bhutton-json-schema-validation-01), published by json-schema.org on 16 June 2022 in Internet-Draft format, with the meta-schema `https://json-schema.org/draft/2020-12/schema`. It is a final json-schema.org release; it was never adopted by the IETF.\n- **OpenAPI 3.1.0:** [OpenAPI Specification v3.1.0](https://spec.openapis.org/oas/v3.1.0.html), 15 February 2021, which the generated `openapi/autonym-v1.yaml` declares.\n- **Problem Details:** [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457), July 2023, Proposed Standard.\n\n## What is taken\n\n- Every schema in `spec/schemas/` and every embedded schema in the OpenAPI document and MCP tool definitions is JSON Schema 2020-12, generated from `packages/schema` with Zod.\n- The recipient REST contract is an OpenAPI 3.1.0 document in JSON syntax, which is valid YAML (B4.1).\n- Errors are RFC 9457 `application/problem+json` objects ([`problem.json`](../schemas/problem.json)), with OAuth errors keeping their OAuth representation (B4.3).\n\n## Why\n\nGenerated artefacts and the drift check (`pnpm check:generated`) make the schemas the single source of truth; widely supported formats let implementers generate clients and validators instead of reading prose.\n\n## What is extended\n\n- A closed error registry, [`errors.json`](../errors.json), of `urn:autonym:error:` types, each naming the sections that raise it. No unregistered code may be returned. The registry also lists the OAuth codes the text cites and the codes the B1 grant binding takes from its base specification, which keep their own representation (B4.3).\n- Problem objects carry no rejected value, record content, credential or existence hint (B4.3).\n\n## What is replaced or not used\n\nNothing is replaced. OpenAPI 3.2 is not used.\n\n## Deviations\n\nOpenAPI 3.1.2 (19 September 2025) is the latest 3.1 patch release. Patch releases clarify the text but do not change the 3.1 feature set; the generated document stays at `3.1.0` until a change entry moves it.\n\n## Conformance checks\n\nTRANSPORT-01 in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending; structural conformance is proven today by `pnpm check:generated`.\n", "adoption/jwe-argon2id.md": "---\nname: jwe-argon2id\ntitle: JWE (RFC 7516) and Argon2id (RFC 9106)\nstatus: Adopt\nversion: RFC 7516 (May 2015); RFC 9106 (September 2021)\nsource: https://www.rfc-editor.org/rfc/rfc7516\ntakes: Passphrase-encrypted export\nwhy: Standard envelope encryption for the portable export, with a maintained memory-hard key derivation\nextends: None\nspec_home: A11.2\n---\n\n# JWE and Argon2id\n\n## Version pinned\n\n- [RFC 7516](https://www.rfc-editor.org/rfc/rfc7516), JSON Web Encryption, May 2015, Proposed Standard.\n- [RFC 9106](https://www.rfc-editor.org/rfc/rfc9106), Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications, September 2021, Informational (IRTF CFRG).\n\n## What is taken\n\nThe optional encrypted export (A11.2): compact JWE with `alg:dir` and `enc:A256GCM`, and a 32-byte key derived with Argon2id version 19, memory 65,536 KiB, three iterations, four lanes and a fresh 16-byte salt, carried in the authenticated critical header `autonym_kdf`.\n\n## Why\n\nA person moving a record needs it encrypted at rest with a passphrase, using primitives with maintained implementations.\n\n## What is extended\n\nNothing beyond the `autonym_kdf` critical header, which carries the single permitted parameter set. Argon2id is not a JOSE `alg`.\n\n## What is replaced or not used\n\nNo other key-management algorithm or KDF is accepted.\n\n## Deviations\n\nNone.\n\n## Conformance checks\n\nPORT-01, and ENCRYPT-01 for the optional `encrypted-export` feature, in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending.\n", "adoption/linked-web-storage.md": "---\nname: linked-web-storage\ntitle: W3C Linked Web Storage / Solid\nstatus: Optional storage binding, 2.0 stream\nversion: Linked Web Storage Protocol 1.0, Working Draft of 21 September 2026; Solid Protocol 0.11.0 (12 May 2024)\nsource: https://www.w3.org/TR/2026/WD-lws10-core-20260921/\ntakes: Resource addressing and access grants as an alternative store\nwhy: Lets a person keep the record in a pod they already have\nextends: Binding only; the native store remains the default\nspec_home: Binding B2 (post 1.0)\n---\n\n# Linked Web Storage and Solid\n\n## Version pinned\n\n- [Linked Web Storage Protocol 1.0](https://www.w3.org/TR/2026/WD-lws10-core-20260921/) (`lws10-core`), W3C Working Draft of 21 September 2026, on the Recommendation track. The draft also describes itself as \"an unofficial proposal\".\n- [Solid Protocol version 0.11.0](https://solidproject.org/TR/2024/protocol-20240512), 12 May 2024, a draft Community Group report of the Solid Community Group, not on the W3C standards track.\n\n## What is taken\n\nNothing in 1.0. B2 is informative in 1.0 and is to be drafted after it. The protocol defines authentication, authorisation with access grants (\"a data object created by a storage controller, expressing an ability for an agent to perform specific actions on Storage Resources within certain defined constraints\"), a storage description resource, containers and resource operations.\n\n## Why\n\nLinked Web Storage and Solid are an optional storage binding: a person who already keeps data in a pod should be able to keep the record there.\n\n## What is extended\n\nB2 will map Open Personal Context grants, which carry disclosure levels, renderings and receipts, onto access grants, and say what cannot be represented.\n\n## What is replaced or not used\n\nThe native provider store is the default; nothing in 1.0 depends on a pod.\n\n## Deviations\n\nNone.\n\n## Conformance checks\n\nNone in 1.0.\n", "adoption/mcp.md": "---\nname: mcp\ntitle: Model Context Protocol\nstatus: Adopt as the agent binding\nversion: Specification revision 2026-07-28 (current revision on 4 October 2026)\nsource: https://modelcontextprotocol.io/specification/2026-07-28\ntakes: Tools, resources, prompts, server discovery, the stateless Streamable HTTP transport and the MCP authorisation flow\nwhy: The surface assistants actually use\nextends: Defines the Open Personal Context tool set, confirmation semantics and briefing resources; no generic record access\nspec_home: A7, B3\n---\n\n# Model Context Protocol\n\n## Version pinned\n\n[MCP specification revision 2026-07-28](https://modelcontextprotocol.io/specification/2026-07-28), read on 4 October 2026. Its versioning page names it the current protocol version. A current revision can still receive backwards-compatible changes; a later revision is taken only through a change entry.\n\n## What is taken\n\n- The stateless model of this revision: no initialise handshake and no `Mcp-Session-Id`; protocol version and capabilities in `_meta`; `server/discover` (B3.1).\n- Streamable HTTP with the `Mcp-Method` and `Mcp-Name` headers validated against the body (B3.1).\n- Tools with input and output schemas, resources and prompts, and the revision's list-cache fields (B3.2, B3.3).\n- Tool execution errors and JSON-RPC error responses as the revision defines them, carrying the registered Problem Details object (B3.4).\n- The MCP authorisation flow over OAuth: protected-resource metadata and Client ID Metadata Documents for unknown clients (A6.1; see the [OAuth record](oauth.md)).\n\n## Why\n\nAssistants reach external context through MCP. Binding the A7 agent surface to it lets an assistant connect to a record without bespoke integration.\n\n## What is extended\n\nA fixed, public tool set (`get_grant`, `list_domains`, `get_context`, `propose_entry`, `confirm_entry`, `withdraw_proposal`), the `autonym://context/{domain}` resource and the `autonym_briefing` prompt, all returning the A5 signed disclosure; exact-statement confirmation through the first-party app (A7.2). There is no generic record access.\n\n## What is replaced or not used\n\nRoots, Sampling and Logging are not adopted. Legacy protocol revisions are not supported unless separately declared and tested (B3.1).\n\n## Deviations\n\n- Revision 2026-07-28 deprecates Dynamic Client Registration in favour of Client ID Metadata Documents. A6.1 keeps Client ID Metadata Documents as the primary mechanism and RFC 7591 registration available to any client, MCP clients included, for compatibility.\n- The revision's authorisation section cites OAuth 2.1 draft revision 13 and Client ID Metadata Document draft revision 00; the [OAuth record](oauth.md) pins revisions 16 and 02. Both pairs were compared. From revision 13 to 16, OAuth 2.1 removes PKCE `plain`, has the authorisation server send `iss` in every authorisation response, mentions pushed authorisation requests in its authorisation endpoint section, adds guidance on JWT client authentication and on consent phishing, gathers its value sizes into one section and clarifies its error responses and repeated parameters; A6.3 already requires S256 only and `iss`, so a client that follows revision 13 and meets A6 is unaffected. From revision 00 to 02, the Client ID Metadata Document draft lists the client identifier URL's rules (https, a path, no user information, fragment or dot segments), compares it as a simple string without port normalisation, forbids shared-secret authentication and private key material in the document, recommends client authentication more strongly, limits the loopback exception to its SSRF rules to development and testing, and adds privacy considerations. A6.1 takes revision 02; a revision 00 document that follows those rules is accepted.\n- Revision 2026-07-28 has an MCP client send its access token as `Authorization: Bearer` and does not list RFC 9449. Open Personal Context binds every access token to a DPoP key and accepts none as Bearer (A6.3), so an MCP client that cannot send a DPoP proof cannot obtain or use a token. The protected-resource metadata of `/mcp` says so with `dpop_bound_access_tokens_required` (A6.1).\n\n## Conformance checks\n\nTRANSPORT-01, CORE-01, SIGN-01 and LOG-01 in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending.\n", "adoption/oauth.md": "---\nname: oauth\ntitle: OAuth 2.1, PKCE, RFC 9396 rich authorisation requests, DPoP (RFC 9449)\nstatus: Adopt as the authorisation primitives of A6, B1, B3 and B4\nversion: draft-ietf-oauth-v2-1-16 (3 September 2026) with RFC 6749, 6750, 7009, 7523, 7591, 7636, 7662, 8252, 8414, 8693, 8707, 9068, 9101, 9126, 9207, 9396, 9449, 9700 and 9728, OpenID Connect Core 1.0 section 9 and draft-ietf-oauth-client-id-metadata-document-02\nsource: https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/16/\ntakes: Client registration and lifecycle, PKCE flows, pushed authorisation requests, resource indicators, sender-constrained tokens, structured authorisation details, protected-resource and server metadata, issuer identification, revocation, token exchange and JWT access tokens\nwhy: Mature, library-supported primitives that recipients already speak\nextends: Profiles the authorization_details type for domain and level, the contribution request and the grant-offer exchange; makes PKCE S256 and DPoP mandatory for every client and every access token; nothing replaced\nspec_home: A6, B1\n---\n\n# OAuth 2.1 and its profiles\n\n## Version pinned\n\n| Standard | Version | Status |\n| ---------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------- |\n| OAuth 2.1 | [draft-ietf-oauth-v2-1-16](https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/16/), 3 September 2026 | Internet-Draft, IETF OAuth working group; not an RFC |\n| OAuth 2.0 | [RFC 6749](https://www.rfc-editor.org/rfc/rfc6749), October 2012 | Proposed Standard, updated by RFC 8252, 8996 and 9700 |\n| Bearer token usage | [RFC 6750](https://www.rfc-editor.org/rfc/rfc6750), October 2012 | Proposed Standard |\n| PKCE | [RFC 7636](https://www.rfc-editor.org/rfc/rfc7636), September 2015 | Proposed Standard |\n| Rich Authorization Requests | [RFC 9396](https://www.rfc-editor.org/rfc/rfc9396), May 2023 | Proposed Standard |\n| DPoP | [RFC 9449](https://www.rfc-editor.org/rfc/rfc9449), September 2023 | Proposed Standard |\n| Protected Resource Metadata | [RFC 9728](https://www.rfc-editor.org/rfc/rfc9728), April 2025 | Proposed Standard |\n| Authorization Server Metadata | [RFC 8414](https://www.rfc-editor.org/rfc/rfc8414), June 2018 | Proposed Standard |\n| Dynamic Client Registration | [RFC 7591](https://www.rfc-editor.org/rfc/rfc7591), July 2015 | Proposed Standard |\n| JWT client authentication | [RFC 7523](https://www.rfc-editor.org/rfc/rfc7523), May 2015 | Proposed Standard |\n| `private_key_jwt` | [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html) incorporating errata set 2, 15 December 2023, section 9 | OpenID Foundation Final Specification |\n| Issuer identification | [RFC 9207](https://www.rfc-editor.org/rfc/rfc9207), March 2022 | Proposed Standard |\n| Resource indicators | [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707), February 2020 | Proposed Standard |\n| Pushed authorisation requests | [RFC 9126](https://www.rfc-editor.org/rfc/rfc9126), September 2021 | Proposed Standard |\n| JWT-secured authorisation requests | [RFC 9101](https://www.rfc-editor.org/rfc/rfc9101), August 2021 | Proposed Standard |\n| Token revocation | [RFC 7009](https://www.rfc-editor.org/rfc/rfc7009), August 2013 | Proposed Standard |\n| Token introspection | [RFC 7662](https://www.rfc-editor.org/rfc/rfc7662), October 2015 | Proposed Standard |\n| Token exchange | [RFC 8693](https://www.rfc-editor.org/rfc/rfc8693), January 2020 | Proposed Standard |\n| JWT access tokens | [RFC 9068](https://www.rfc-editor.org/rfc/rfc9068), October 2021 | Proposed Standard |\n| Native apps | [RFC 8252](https://www.rfc-editor.org/rfc/rfc8252), October 2017 | Best Current Practice |\n| OAuth 2.0 security best current practice | [RFC 9700](https://www.rfc-editor.org/rfc/rfc9700), January 2025 | Best Current Practice (BCP 240) |\n| Client ID Metadata Document | [draft-ietf-oauth-client-id-metadata-document-02](https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/02/), 6 July 2026 | Internet-Draft, IETF OAuth working group; not an RFC |\n\nVersions and statuses were read from the RFC Editor's metadata and the IETF datatracker on 4 October 2026; the texts of RFC 7523, RFC 9700, OpenID Connect Core 1.0 and both Internet-Drafts, with the earlier revisions the [MCP record](mcp.md) compares, were read from those sources on 8 October 2026. The two Internet-Drafts are moving targets; a later revision is taken only through a change entry.\n\n## What is taken\n\n- Authorisation code with PKCE S256 only, exact redirect matching with the RFC 8252 loopback exception, single-use codes and rotating refresh tokens, with a reused code or refresh token ending the grant, as RFC 9700 sections 4.2.4 and 4.14 recommend (A6.3).\n- RFC 9728 protected-resource metadata, one path-specific document for each protected resource, RFC 8414 server metadata with RFC 9728's `protected_resources`, and the RFC 9207 `iss` parameter (A6.1).\n- Client ID Metadata Documents as the primary registration for unknown clients, static registration for first-party clients and RFC 7591 for any client, with client metadata limited to the members A6.1 lists (A6.1).\n- `private_key_jwt` client authentication, which OpenID Connect Core 1.0 section 9 defines on RFC 7523 section 2.2, with the client's inline ES256 keys (A6.1).\n- RFC 8707 `resource` to name the one audience of a grant, and RFC 9126 pushed authorisation requests, with RFC 9101's `invalid_request_uri` for a pushed request that cannot be used (A6.2, A6.3, B1.9).\n- RFC 9396 `authorization_details` as the envelope for structured requests, which is also PDPP Core v0.1.0's envelope (see the [PDPP record](pdpp.md), pinned at commit `8f79a48`), and for the contribution request (A6.2).\n- RFC 9449 DPoP for every access token, RFC 9068 for access token claims, RFC 7009 for refresh-token revocation and RFC 8693 token exchange for delegated grant offers (A6.3 to A6.5).\n- RFC 6750's `invalid_token` error code for a refused token, not its Bearer scheme (A6.3).\n- RFC 7662's response shape for the introspection result a provider projects for the PDPP binding (B1.6); no public introspection endpoint is required.\n- The error codes these documents define, kept in their own error form on OAuth endpoints and listed in the [error registry](../errors.json).\n\n## Why\n\nThese are the primitives recipients and assistants already implement, with maintained libraries, so Open Personal Context profiles them rather than defining its own authorisation protocol.\n\n## What is extended\n\n- The `authorization_details` content is profiled for domains and disclosure levels through the PDPP binding ([B1](../bindings/B1-pdpp.md)), and for contribution grants by the type `urn:autonym:authorization-details:contribute` (A6.2).\n- RFC 7591 client metadata gains `autonym_purge_uri`, where purge instructions are delivered (A6.1).\n- The access token gains `autonym_grant_id` and `autonym_purpose` (A6.3).\n- The grant-offer exchange in A6.4 uses RFC 8693 with an Open Personal Context token type, `urn:autonym:params:oauth:token-type:grant-offer`. A6.4 states that this is an Open Personal Context choice, not something RFC 8693 defines.\n- The client lifecycle token in A6.6 is an Open Personal Context profile of the client credentials grant.\n- A grant offer's recipient is a confidential client that authenticates with `private_key_jwt`, so holding an offer is never enough to redeem it (A6.1, A6.4).\n- RFC 7009 asks a public client for no credential at the revocation endpoint. A public client's refresh token is bound to its DPoP key (RFC 9449 section 5), so its revocation also carries a DPoP proof by that key, and a refresh token bound to another key is not revoked (A6.5).\n\n## What is replaced or not used\n\n- The implicit grant and the resource owner password grant are not used; OAuth 2.1 removes them.\n- PKCE `plain` is rejected (A6.3).\n- Bearer tokens are neither issued nor accepted for any client: every access token is DPoP-bound (A6.3).\n- Client secrets, `client_secret_basic`, `client_secret_post` and `client_secret_jwt` are not used; a confidential client authenticates with `private_key_jwt` (A6.1).\n- `jwks_uri`, `sector_identifier_uri` and software statements are not accepted in client metadata (A6.1).\n- OpenID Connect's `application_type` client metadata member is not accepted: whether the RFC 8252 loopback-port exception applies is decided from the client's redirect URIs, and only a client whose redirect URIs are all `http` loopback URIs uses it (A6.1, A6.3).\n- A public RFC 7662 introspection endpoint is not required: a provider's resource servers introspect locally (B1.6).\n- OpenID Connect sign-in is not used: no ID token, `openid` scope or userinfo endpoint. A provider's authorisation-server metadata may still carry OpenID Connect's `subject_types_supported`; it describes the provider's own internal subject identifier, never the pairwise handle every access token carries as `sub` (A3.2, A6.3).\n\n## Deviations\n\n- OAuth 2.1 is still an Internet-Draft. Open Personal Context cites revision 16 and the RFCs it consolidates, and does not claim conformance to an unpublished RFC.\n- RFC 9068 section 2.1 requires an authorisation server to support RS256 for access tokens. Open Personal Context signs and accepts access tokens with ES256 only (A6.3), as the [JOSE record](jose.md) does for signed objects; no client has to verify one.\n- RFC 7591 section 2 has an authorisation server ignore client metadata it does not understand. Open Personal Context refuses a registration or a metadata document with any member A6.1 does not list, so a client is never registered with part of what it asked for silently dropped. It also refuses a software statement, which RFC 7591 lets a server ignore, because a provider trusts no statement issuer.\n- RFC 7591 section 2 defaults `token_endpoint_auth_method` to `client_secret_basic`. Open Personal Context accepts no client secret, so registration metadata always states the method.\n- Mandatory DPoP departs from the Bearer usage MCP specifies for its clients; see the [MCP record](mcp.md).\n\n## Conformance checks\n\nCORE-01, CONSENT-01, OAUTH-01, FETCH-01, DELEGATE-01, TRANSPORT-01 and the SCOPE family in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending.\n", "adoption/pdpp.lock.json": "{\n \"repository\": \"https://github.com/PDP-Connect/pdpp\",\n \"commit\": \"8f79a48d7fe94a6b2aab15aac78d409b9ea13712\",\n \"commit_date\": \"2026-09-23\",\n \"core_version\": \"0.1.0\",\n \"files\": [\n {\n \"path\": \"spec-core.md\",\n \"status\": \"normative\",\n \"document_date\": \"2026-09-03\",\n \"bytes\": 149660,\n \"sha256\": \"80a38c963f777541ab10325e292291255c65df9211499b39e7f8eaf0083ad6b2\"\n },\n {\n \"path\": \"spec-collection-profile.md\",\n \"status\": \"informative\",\n \"document_date\": \"2026-09-03\",\n \"bytes\": 68688,\n \"sha256\": \"b94ebe3f850f25ce338014e784e956c3f7356998e7fedaa2d5e0dd516e0a0879\"\n },\n {\n \"path\": \"GOVERNANCE.md\",\n \"status\": \"governance\",\n \"document_date\": null,\n \"bytes\": 33839,\n \"sha256\": \"006c31ffa9cdf388eaf8b676cc523e844d9aa4c3ab44686fb13cd974f5ce4d49\"\n },\n {\n \"path\": \"README.md\",\n \"status\": \"informative\",\n \"document_date\": null,\n \"bytes\": 8563,\n \"sha256\": \"03485ae3dccf2dfb2f80928c638eade047c64133a98ef8468d73c8ea2702da8a\"\n }\n ]\n}\n", "adoption/pdpp.md": "---\nname: pdpp\ntitle: PDPP Core (PDP-Connect, LF Decentralized Trust)\nstatus: Adopt as the normative 1.0 grant binding (B1); implement in the Autonym server\nversion: PDPP Core v0.1.0 at commit 8f79a48 (2026-09-23)\nsource: https://github.com/PDP-Connect/pdpp/blob/8f79a48d7fe94a6b2aab15aac78d409b9ea13712/spec-core.md\ntakes: Grants with purpose, selection, expiry and revocation; sources and records; the query surface; introspection; the Core section 9 conformance requirements, tested by Autonym's own checks until PDPP publishes its suite\nwhy: A neutral, foundation-hosted grant protocol with a planned conformance programme; building on it is cheaper than defending a bespoke one and opens the Verified Operator route\nextends: Adds disclosure levels and renderings as statically declared derived streams; adds per-read receipts, purge acknowledgement and typed context, which Core leaves out; makes DPoP and PKCE mandatory where Core leaves them out or advisory\nspec_home: B1\n---\n\n# PDPP Core\n\n**Status:** normative where cited. Document version `1.0-draft-1`.\n\n## Version pinned\n\nPDPP Core v0.1.0, `spec-core.md` in [PDP-Connect/pdpp](https://github.com/PDP-Connect/pdpp/tree/8f79a48d7fe94a6b2aab15aac78d409b9ea13712) at commit `8f79a48d7fe94a6b2aab15aac78d409b9ea13712` (committed 23 September 2026; main on 4 October 2026). The document's header reads \"Personal Data Portability Protocol (PDPP) v0.1.0\", status \"Normative draft\", dated 3 September 2026. Its SHA-256 and size, and those of the other PDPP files cited here, are recorded in [`pdpp.lock.json`](pdpp.lock.json).\n\nAlso read at the same commit, and cited only for the facts stated below: `spec-collection-profile.md` (status \"Informative. Builder guidance for connector collection. Not a conformance requirement.\"), `GOVERNANCE.md` (status \"Consultation draft\") and `README.md`. The reference implementation is no longer in this repository: the README at commit `8f79a48` says it lives in [PDP-Connect/data-connect](https://github.com/PDP-Connect/data-connect) under `reference-implementation/`, read at data-connect commit `832c7985b2338b3cd0a10da9546e517eac439d75`.\n\nLicences, from the repository at commit `8f79a48`: code Apache-2.0 (`LICENSE`), specification text Community Specification License 1.0 (`LICENSE-specs`; the `REUSE.toml` override uses `LicenseRef-CSL-1.0`), documentation CC BY 4.0 (`LICENSE-docs`).\n\n`pnpm check:pdpp-pin` fails if a file in `spec/adoption/` or `spec/bindings/` cites PDPP without this commit, links another PDPP commit or states another PDPP Core version. A weekly workflow runs `pnpm check:pdpp-pin --upstream`, which fails if the pinned text no longer matches the lock and flags any cited file whose text on upstream main has changed.\n\n## What is taken\n\n- **Grants** (PDPP Core v0.1.0 section 7): the immutable grant artefact and its fields `version`, `grant_id`, `issued_at`, `subject`, `client`, `source`, `source_declaration`, `purpose_code`, `purpose_description`, `access_mode`, `streams` (StreamGrant: `name`, `instance_ids`, `fields`, `time_constraint`, `resources`), `selection_preset`, `retention` and `expires_at`. Lifecycle (active, expired, revoked) is tracked by the authorisation server, not stored in the grant.\n- **Selection requests** (section 6), carried in an RFC 9396 `authorization_details` envelope of type `https://pdpp.dev/data-access`, with purposes as absolute URIs.\n- **Sources, records and the query surface** (sections 4, 5 and 8), including source declarations and their streams.\n- **Introspection** (section 8): `active`, `pdpp_token_kind`, `subject_id`, `grant_id`, `client_id`, `exp` and `authorization_details`, with the rule that the response contains everything needed to enforce the request.\n- **Errors** (section 8): the error object on the PDPP endpoints, with PDPP's codes where PDPP defines one, such as `not_found`, `invalid_request`, `grant_revoked`, `grant_expired` and `blob_not_found` (B1.9). The [error registry](../errors.json) lists these codes without registering them.\n- **Token kinds** (section 10): owner and client tokens, distinguished by `pdpp_token_kind`; section 8 lets companion profiles add kinds and requires unknown kinds to be treated as unauthorised.\n- **Conformance requirements** (section 9): the numbered requirements for the Authorization Server and Resource Server roles. Section 9 says a formal conformance test suite \"is planned but is not defined in v0.1\", and `GOVERNANCE.md` section 5.7 says it is published by 1 January 2027 and that Verified Operator opens on its publication. Until then Autonym builds its own checks from the section 9 requirements.\n\n## Why\n\nPDPP is a neutral grant model hosted under LF Decentralized Trust, with a published governance process and a planned conformance programme. Building the grant layer to its contract is cheaper than defending a bespoke grant protocol, lets recipients that already speak PDPP read Open Personal Context records, and opens the Verified Operator route when it exists. PDPP is the first authorisation binding, and the Autonym reference server implements it natively.\n\n## What is extended\n\nPDPP Core section 11 leaves interoperable audit and transparency events to \"a separate companion profile\", and section 10 says revocation is not deletion. Open Personal Context adds, through [B1](../bindings/B1-pdpp.md):\n\n- disclosure levels and approved renderings, expressed as statically declared derived streams. PDPP Core mentions derived streams only in non-normative text (section 12), so this mapping is Open Personal Context's, not PDPP's;\n- per-read signed receipts and the owner's log (A9);\n- purge instructions and acknowledgement (A10);\n- typed context with provenance, validity and temporal selection (A4);\n- pairwise subject handles (A3), which PDPP does not define: its `subject.id` is an opaque string;\n- mandatory PKCE and DPoP (A6.3). PDPP is \"a profile of OAuth 2.0\", mentions PKCE only in passing and describes DPoP as non-normative advice and a candidate hardening profile for a later version.\n\n## What is replaced or not used\n\n- The Collection Profile and connector runtime are not used: they are informative in PDPP, and continuous connectors are reserved for Open Personal Context 2.0.\n- PDPP's six example purpose URIs under `pdpp.dev` are not adopted as the purpose vocabulary. B1 uses `urn:autonym:purpose:` for the ten Open Personal Context purposes, annotated with W3C Data Privacy Vocabulary terms (see the [DPV record](dpv.md)).\n- PDPP owner tokens are not issued, so owner-authenticated delete and self-export are not offered through PDPP ([B1](../bindings/B1-pdpp.md), B1-D8).\n- Bearer client tokens are not accepted for any client: every token is DPoP-bound (A6.3, B1-D4).\n\n## Deviations\n\nAt commit `8f79a48` there is no conformance suite yet, DPoP is non-normative advice rather than an optional feature, and the reference implementation lives in PDP-Connect/data-connect rather than in the PDPP repository. This record states those verified facts.\n\nThe places where the binding departs from a strict reading of PDPP Core v0.1.0 are listed as B1-D1 to B1-D8 in [B1.11](../bindings/B1-pdpp.md#b111-deviations-from-pdpp-core). None widens what a PDPP grant authorises.\n\n## Conformance checks\n\nCONSENT-01, CORE-01, DELEGATE-01 and BINDING-01 in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending as the manifest records. BINDING-01, the check of the optional `pdpp-binding` feature, tests the binding's own choices: the generated source declaration, static streams and the owner endpoints of B1-D8. Autonym's PDPP Core checks will cite PDPP Core v0.1.0 section 9 by role and item number, never by invented identifiers, and are replaced by PDPP's suite when it is published.\n", "adoption/reserved-credentials.md": "---\nname: reserved-credentials\ntitle: SD-JWT VC, OpenID4VC, SMART Health Links, International Patient Summary\nstatus: Reserved\nversion: RFC 9901; draft-ietf-oauth-sd-jwt-vc-19; OpenID4VP 1.0; OpenID4VCI 1.0; SMART Health Cards and Links IG 1.0.0; IPS IG 2.0.1\nsource: https://www.rfc-editor.org/rfc/rfc9901\ntakes: Nothing in 1.0; credential presentations and an emergency card in 2.0\nwhy: Needed only by capabilities reserved for 2.0\nextends: Nothing in 1.0\nspec_home: Reserved chapters (A12, A13)\n---\n\n# Reserved credential and health standards\n\n## Version pinned\n\nThese are recorded for the 2.0 capabilities they would serve. No version 1 requirement depends on them.\n\n| Standard | Version | Status |\n| ----------------------------------------- | -------------------------------------------------------------------------------------------------------------------- | ---------------------------------------- |\n| SD-JWT | [RFC 9901](https://www.rfc-editor.org/rfc/rfc9901), November 2025 | Proposed Standard |\n| SD-JWT VC | [draft-ietf-oauth-sd-jwt-vc-19](https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/), 31 August 2026 | Internet-Draft with the IESG; not an RFC |\n| OpenID for Verifiable Presentations | [1.0](https://openid.net/specs/openid-4-verifiable-presentations-1_0.html), 9 July 2025 | Final |\n| OpenID for Verifiable Credential Issuance | [1.0](https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html), 16 September 2025 | Final |\n| SMART Health Links | HL7 [SMART Health Cards and Links IG 1.0.0](https://hl7.org/fhir/uv/smart-health-cards-and-links/STU1), 22 July 2025 | Standard for trial use |\n| International Patient Summary | HL7 FHIR [IPS IG 2.0.1](https://hl7.org/fhir/uv/ips/2.0.1), 19 June 2026 | Standard for trial use |\n| ISO 27269 | Not verified: the ISO catalogue could not be read on 4 October 2026 | Not verified |\n\n## What is taken\n\nNothing in 1.0.\n\n## Why\n\nVerifiable credential presentations and an emergency card are reserved for 2.0. Recording the current versions now keeps the reserved placeholders honest about what they would build on.\n\n## What is extended\n\nNothing in 1.0.\n\n## What is replaced or not used\n\nA5.4 reserves SD-JWT presentations; A13's placeholder states that the draft invents no SMART Health Link or IPS wire format and claims no compliance with them.\n\n## Deviations\n\nThe ISO 27269 edition is unverified; it is to be read from the ISO catalogue before any 2.0 work cites it.\n\n## Conformance checks\n\nNone in 1.0. CLAIM-01 prevents an implementation from claiming these capabilities in version 1.\n", "adoption/scitt.md": "---\nname: scitt\ntitle: SCITT architecture and COSE Receipts\nstatus: Evaluate; adopt if the receipt format can be expressed as a SCITT receipt\nversion: RFC 9943 and RFC 9942 (June 2026)\nsource: https://www.rfc-editor.org/rfc/rfc9943\ntakes: Under evaluation - transparency receipts and the append-only log shape\nwhy: Aligns the accountability log with a published transparency standard\nextends: Possible replacement of the bespoke chain format; not yet decided\nspec_home: A9, this record decides\n---\n\n# SCITT\n\n## Version pinned\n\n- [RFC 9943](https://www.rfc-editor.org/rfc/rfc9943), An Architecture for Trustworthy and Transparent Digital Supply Chains, June 2026, Proposed Standard (from draft-ietf-scitt-architecture-22).\n- [RFC 9942](https://www.rfc-editor.org/rfc/rfc9942), CBOR Object Signing and Encryption (COSE) Receipts, June 2026, Proposed Standard (from draft-ietf-cose-merkle-tree-proofs-18).\n\n## What is taken\n\nNothing yet. RFC 9943 registers single-issuer signed statements with a Transparency Service that keeps an append-only verifiable data structure and returns a receipt proving registration. RFC 9942 defines those receipts as signed CBOR inclusion and consistency proofs. An evaluation will decide whether the A9 per-read receipt and the owner's hash-chained log can be expressed this way.\n\n## Why\n\nSCITT-compatible receipt or transparency mechanisms are evaluated before a proprietary format is fixed, so the accountability log can align with a published transparency standard. The decision is due before a provider issues receipts from its read path. The reference implementation's stored chain keeps each event's exact signed bytes and refers to an event by its partition, position and hash, so either outcome can be added without rewriting them.\n\n## What is extended\n\nNot yet decided.\n\n## What is replaced or not used\n\nUntil that decision, A9 keeps its JWS-signed, hash-chained receipts (see the [JOSE record](jose.md)).\n\n## Deviations\n\nBoth SCITT documents were published as RFCs in June 2026, and this record cites the RFCs rather than the earlier Internet-Drafts.\n\n## Conformance checks\n\nLOG-01 in the [conformance manifest](../conformance/profiles.json), with runtime evidence pending.\n", "bindings/B1-pdpp.md": "# B1. PDPP binding\n\n**Status:** normative draft. Binds PDPP Core v0.1.0 at commit `8f79a48` of PDP-Connect/pdpp, recorded with its file hashes in [`pdpp.lock.json`](../adoption/pdpp.lock.json) and described in the [PDPP adoption record](../adoption/pdpp.md). Document version `1.0-draft-1`.\n\nThis binding states how an Open Personal Context read grant is issued, introspected and exercised as a PDPP Core grant, and what Open Personal Context adds that PDPP Core cannot carry. [A6](../core/a06-authorisation.md) remains the authorisation contract: where this binding and A6 differ, A6 wins and the difference is a defect in this binding. Open Personal Context Core stays meaningful without PDPP: this binding is the normative 1.0 grant binding, not a dependency of the model.\n\nSection numbers below refer to PDPP Core v0.1.0, `spec-core.md`, at commit `8f79a48`. Conformance items are cited by role and item number from its section 9.\n\n## B1.1 Scope\n\nThis binding covers read grants (`kind: \"read\"`) only. A contribution grant (`kind: \"contribute\"`) has no PDPP Core equivalent: PDPP Core section 12 leaves ingest to the informative Collection Profile. Contribution grants are issued and exercised through [B3](B3-mcp.md) and [B4](B4-rest.md) only, never as a PDPP grant.\n\nThe mapping in this binding is independent of how the authorisation server is built. It applies however a provider builds its authorisation server. The Autonym reference server implements PDPP Core natively.\n\nEvery wire value this binding introduces (the B1.5 detail, the purpose codes, the stream names and record shape, the identifier derivations, the `autonym_lifecycle` token kind, the `Autonym-Read-Id` header and a `pdpp` receipt surface) is draft text until it is defined in the schema package and its artefacts are generated.\n\n## B1.2 The source and its declaration\n\nA provider that offers this binding acts as one `provider_native` source (section 6, Source kinds). The PDPP endpoints form their own protected resource with their own identifier, distinct from the B4 resource; `source.id` MUST equal that identifier (section 5, Declaration acceptance).\n\nThe provider publishes one SourceDeclaration (section 5) generated from the [core vocabulary](../vocabulary/README.md), never written by hand:\n\n- `protocol_version` is `0.1.0`.\n- `declaration_version` names the vocabulary version and the edition of this binding, so a grant records exactly which vocabulary its streams were resolved against. It is opaque to PDPP.\n- `streams[]` holds the streams of B1.3. Their `display.label` and `display.detail` describe the data and never the requester's purpose. The vocabulary has key labels but no domain labels, so this display text is new product copy and needs review before it is published.\n- No stream declares `consent_time_field`, so `time_range` is rejected for every stream (section 6, Note on `time_range`). Temporal selection stays an Open Personal Context read parameter (A4.3, A5.2).\n- No stream supports `resources` selection, and no stream declares views, relationships, `expand`, `search` or `aggregations`.\n- No stream declares a `blob_ref` field.\n\n## B1.3 Levels as statically declared derived streams\n\nPDPP Core has no disclosure level. This binding expresses each level as a separate, statically declared derived stream, as the non-normative \"Derived subset streams\" paragraph of section 12 allows. The mapping is Open Personal Context's, not PDPP's.\n\nFor every domain `` in the core vocabulary and every level `L` at which at least one of the domain's keys has a vocabulary rendering, the declaration contains:\n\n- `.l`: the domain rendered at or below `L` by the A5 compiler;\n- `.l.declared`: the same, restricted to exactly confirmed declared entries (A5.2).\n\nDomain names may contain dots, so a stream name is read from the right: an optional `.declared` suffix, then the level, then the domain.\n\nEach stream has `semantics: \"mutable_state\"` and exactly one record for each grant that includes it. The record is always returned, even when no key is currently disclosable, so its presence reveals nothing. Its fields are:\n\n- `id`, the primary key and the only schema-required field: a record identifier derived as in B1.4 (Identifiers);\n- one top-level field per vocabulary key of the domain, whose value is an array of the compiled entries for that key, in A5.2 order. Each element has the members of a [disclosure.json](../schemas/disclosure.json) entry except `domain` and `key`: `id` (the client-bound `rent_` alias), `version`, `level`, `value_type`, `value`, `context_kind`, `safety_critical`, `provenance` (`kind`, `confirmed`) and `stale`. A key with several eligible entries, such as several allergies, has one element for each.\n\nA key with no eligible entry, or no rendering at or below the stream's level, is absent from the record. Absence never reveals why.\n\nStream names MUST NOT be generated per request (section 12). A new vocabulary key or level appears only in a new declaration revision, and never widens an issued grant (section 5, Versioning and snapshots).\n\n## B1.4 Grant mapping\n\nAn Open Personal Context read grant issued through this binding is one PDPP grant (section 7) for the provider's source, plus the Open Personal Context detail of B1.5. Every property of [grant.json](../schemas/grant.json) is mapped below. A property marked \"B1.5\" travels only in the Open Personal Context detail.\n\n| Open Personal Context property | PDPP Core v0.1.0 representation |\n| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |\n| `id` | `grant_id`, and introspection `grant_id`. |\n| `revision` | B1.5. A PDPP grant is immutable and PDPP Core v0.1.0 has no narrowing (section 7, Grant narrowing). A change of authority is made by revoking the grant and issuing a new one with a new `id` (Revoke and reissue, below). |\n| `handle` | `subject.id`, and introspection `subject_id`. The pairwise handle (A3.2) is an opaque string unique within the issuer's namespace, which is all section 7 requires. |\n| `client_id` | `client.client_id`, and introspection `client_id`. `client.client_display` holds the requester metadata the authorisation server resolved (section 6, Client display metadata). |\n| `purpose` | `purpose_code` and `purpose_description`, below. |\n| `purpose.category` | `purpose_code`, the absolute URI `urn:autonym:purpose:`. The authorisation server accepts only the ten Open Personal Context purposes and rejects any other code by local policy, which Authorization Server item 6 permits. |\n| `purpose.text` | `purpose_description`. A request without it is rejected, because A6.3 requires a plain-language purpose; it is always displayed. |\n| `issued_at` | `issued_at`. |\n| `expires_at` | `expires_at`, always present under this binding although PDPP makes it optional. |\n| `status` | Grant lifecycle tracked by the authorisation server (section 7), reported as introspection `active` and as the `grant_revoked` and `grant_expired` errors (section 8, Errors). Never a field of the PDPP grant. |\n| `kind` | `read` is issued as a PDPP grant. `contribute` is never issued as a PDPP grant (B1.1). |\n| `read` | `streams`, one StreamGrant per entry, resolved as below. |\n| `read[].domain` | The domain part of the StreamGrant `name`. The wildcard `*`, allowed only at L0 (A6.2), is expanded at issuance to one L0 StreamGrant for each core vocabulary domain that has no explicit entry in the grant, because explicit domain ceilings take precedence over the wildcard (A6.2, Authorization Server item 4). PDPP's own `*` stream wildcard is not used, because it would also select every level. |\n| `read[].keys` | StreamGrant `fields`: the listed keys plus `id`. `null` (all keys) is expanded at issuance to every key of the domain with a rendering at or below the granted level, and frozen (Authorization Server items 4 and 13). |\n| `read[].max_level` | The level part of the StreamGrant `name`: the highest declared level of the domain at or below `max_level`. If the domain has no declared level at or below it, the entry is refused at issuance. The compiler renders each key at the highest vocabulary-supported level at or below the ceiling (A5.2). |\n| `declared_only` | The `.declared` stream variant of B1.3 when true, so the restriction is visible on the PDPP consent surface and enforced by stream membership. Also in B1.5. |\n| `min_confidence` | B1.5. |\n| `max_reads` | B1.5. `access_mode` is `single_use` when `max_reads` is 1 and `continuous` otherwise; a request whose `access_mode` disagrees with its `max_reads` is rejected. |\n| `reads_used` | Not carried. A counter in the provider's stored grant (A6.2), never part of a PDPP grant or introspection response. |\n| `persist_until` | `retention` with `on_expiry: \"delete\"`. `max_duration` is the ISO 8601 duration from `issued_at` to `persist_until`, or `PT5M` when `persist_until` is null, the longest validity an A5 envelope can carry. The exact instant is in B1.5 and governs (B1.11, B1-D7). |\n| `allow_delegation` | B1.5. A delegated child grant (A6.4) is a separate PDPP grant with its own `grant_id` and its own identifiers. |\n| `onward_share` | B1.5. Always false in version 1; the consent surface renders it as server-generated text. |\n| `contribute` | Not carried (B1.1). |\n| `contribute[].domain` | Not carried (B1.1). |\n| `contribute[].keys` | Not carried (B1.1). |\n| `max_events` | Not carried (B1.1). |\n| `events_used` | Not carried (B1.1). |\n| `allow_confirmation` | Not carried (B1.1). |\n| `stream_id` | Not carried (B1.1). It names an Open Personal Context contribution event stream and is unrelated to PDPP streams. |\n\nPDPP grant fields with no Open Personal Context counterpart take fixed values: `version` is `0.1.0`; `source` is `{ kind: \"provider_native\", id }` from B1.2; `source_declaration.version` is the declaration revision the grant was resolved against; `selection_preset` is absent; `time_constraint` and `resources` are absent; each StreamGrant's `instance_ids` holds exactly one instance handle, resolved without asking the person because there is only one eligible instance (Authorization Server item 15).\n\n**Identifiers.** The record `id` and the instance handle are derived like an A3.2 handle local part: HMAC-SHA256 under the record partition's handle key, over RFC 8785 canonical JSON of the client ID, the handle rotation, the grant `id` and the stream name, with the purpose values `autonym.pdpp.record.v1` and `autonym.pdpp.instance.v1` respectively. Every grant, including every delegated child, therefore has its own values, and two recipients never share one. A record partition identifier or any other internal identifier is never used.\n\n**Revoke and reissue.** When a grant issued through this binding is narrowed, the new grant inherits the old grant's `reads_used`, the read budget reserved by its delegated children and its expiry, so a reissue never restores spent authority. Each child is reissued under the new grant within its limits, or revoked. The change is logged as one authority change, and A10 applies to it on the same terms as a revision change through B3 or B4.\n\n## B1.5 The Open Personal Context detail\n\nBeside the `https://pdpp.dev/data-access` detail, the authorisation request and the issued authorisation carry one RFC 9396 `authorization_details` entry of type `urn:autonym:authorization-details:read`. It holds what PDPP Core cannot express: `min_confidence`, `max_reads`, `persist_until`, `allow_delegation` and `onward_share` in the request, and additionally the grant `id` and `revision` once issued. Its JSON Schema will be generated from the schema package with the grant implementation; until then this list is the contract.\n\nA request that carries the PDPP detail without this entry is completed with `max_reads` 1, `persist_until` null, `allow_delegation` false and `onward_share` false, the most restrictive values, and `min_confidence` 0, the A5.2 default, which filters nothing. The person sees these values before approval. A request that cannot be expressed under A6 fails with RFC 9396 `invalid_authorization_details`; this includes a purpose code that is not an Open Personal Context purpose and two entries that disagree.\n\nThese restrictions can refuse a read that the PDPP grant alone would allow (B1.11, B1-D1). An exhausted read budget gives 403 with code `grant_exhausted`. Entries below `min_confidence` are omitted as A5.2 omits them, never refused.\n\n## B1.6 Tokens and introspection\n\n- Client access tokens are A6.3 tokens with the PDPP resource as audience. Under PDPP they are client tokens: introspection, or the co-located local equivalent, returns `active`, `pdpp_token_kind: \"client\"`, `subject_id` (the pairwise handle), `grant_id`, `client_id`, `exp` and `authorization_details` holding both entries of B1.5 (section 8, Token introspection).\n- A token issued for another audience, including every contribution-grant token and every read token issued outside this binding, is inactive at the PDPP resource.\n- This binding issues no PDPP owner tokens. The person reads, exports and deletes their own record through the app session and A11, never through a bearer credential that could be handed to a recipient (B1.11, B1-D8).\n- The A6.6 client lifecycle token introspects as `pdpp_token_kind: \"autonym_lifecycle\"`, a companion-profile kind that section 8 permits. A PDPP resource server, including this provider's, treats it as unauthorised for every PDPP operation. `pdpp_token_kinds_supported` lists `client` only.\n- The authorisation server, resource server and introspection run in one deployment, so the resource server uses the local equivalent and caches nothing: A6.5 requires revocation to take effect on the next attempted action, which is stricter than the 60-second bound of section 10. If an RFC 7662 endpoint is offered for a separated resource server, only that resource server's credential may call it.\n- PKCE S256, exact redirect matching, single-use codes and rotating refresh families follow A6.3, which meets Authorization Server items 19 and 20. Refresh tokens are not issued for a `single_use` grant.\n- DPoP is required where A6.3 requires it. A DPoP-bound token is never accepted as a Bearer token.\n\n## B1.7 Reads through the compiler\n\nA client-token request to list records or to get the record of a granted stream is an Open Personal Context read of one domain at one level. It runs the A5.2 transaction in full: lock and recheck the stored grant and the B1.5 restrictions, compile, create and sign the A5 envelope, append the A9 receipt with surface `pdpp` and increment the read counter, then commit. The PDPP record is a projection of that signed envelope's entries and contains every entry of the envelope and nothing else. Nothing else renders entry data for this binding.\n\n- Each successful client-token read carries `Autonym-Read-Id` with the receipt's `rd_` read ID. Whether the signed envelope is also returned is not yet settled.\n- `changes_since` (Resource Server items 7 and 8) returns the record only when its compiled projection at the current horizon differs from its compiled projection at the cursor's horizon. A change to an entry that is hidden, ungranted, below the stream's level or outside the projection never makes the record eligible (section 8, List records).\n- Getting a record by an identifier that is not this grant's record gives the same 404 `not_found` as an unknown identifier, without a read.\n- Listing streams for a client token names the granted streams only. It carries no record count, update time or freshness that depends on the record; where the response shape requires such a member, it holds a value that does not depend on the record.\n- Stream metadata for a client token is the closed projection Resource Server item 15 requires: the granted stream and its granted fields only.\n- Client-token `filter[...]`, `view`, `expand[]` and `expand_limit[...]` are rejected with 400 `invalid_request` (Resource Server items 5, 9 and 10).\n- The blob endpoint answers 404 `blob_not_found` to every request, because no stream declares a blob.\n\n## B1.8 Revocation, receipts and purge\n\nPDPP Core says revocation is not deletion and defines no erasure signal (section 10, Revocation), and leaves audit events to a companion profile (section 11). This binding adds both without changing PDPP semantics:\n\n- every read is receipted under A9, and grant issuance and revocation are logged events;\n- ending a grant issues A10 purge instructions on the same terms as for any other grant, delivered and acknowledged outside PDPP.\n\n## B1.9 Transport, errors and versions\n\n- The PDPP section 8 endpoints are served under a base path published as `pdpp_core_query_base` in the RFC 9728 metadata for the PDPP resource (Resource Server item 16). The base path and resource identifier are not yet fixed.\n- On a 401 the response carries a `WWW-Authenticate: Bearer` challenge with the RFC 9728 `resource_metadata` parameter, as Resource Server item 16 requires, and also a `DPoP` challenge where the provider accepts DPoP-bound tokens.\n- Until the error mapping is settled, errors on the PDPP endpoints use the section 8 error object, with PDPP's codes where PDPP defines one and the registered Open Personal Context code otherwise, so a PDPP client falls back on the status as section 8 requires. B4 routes keep Problem Details (B4.3), and OAuth endpoints keep their OAuth error responses.\n- `PDPP-Version` is negotiated on the PDPP endpoints (Resource Server item 11, Authorization Server item 17). `Autonym-Version` keeps its B4 meaning; the two are independent.\n- The authorisation request is pushed (RFC 9126) because the two `authorization_details` entries exceed comfortable URL lengths (section 10, Grant integrity).\n\n## B1.10 PDPP Core conformance\n\nA provider claiming this binding meets the section 9 requirements as the tables below state: Authorization Server items 1 to 21; Resource Server items 2 to 11, 15 and 16; Resource Server item 1 except for the owner operations of B1-D8; and Resource Server items 12 and 14 trivially, because this binding issues no owner tokens. Resource Server item 13, a SHOULD, is not supported. Each row summarises the requirement; section 9 is authoritative.\n\n**Authorization Server**\n\n| Item | Section 9 requirement | How this binding meets it |\n| ---- | --------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| 1 | Accept selection requests in the RFC 9396 `https://pdpp.dev/data-access` detail | Accepted alongside the B1.5 detail |\n| 2 | Validate a request against one retained SourceDeclaration snapshot, refusing unknown streams, unsupported parameters and unrecognised presets | Validated against the retained generated declaration (B1.2). Unknown streams, `time_range` (no stream declares `consent_time_field`) and every selection preset are refused, since no grant under this binding carries one (B1.4) |\n| 3 | Issue grants that follow the section 7 field tables, every field derived from the request, client registration or policy | Grants follow the B1.4 mapping and its fixed values |\n| 4 | Expand wildcards and presets into explicit streams, fields, instances and constraints before issuance | The domain wildcard and `null` key lists are expanded and frozen at issuance (B1.4) |\n| 5 | Refuse a request with both or neither of `streams` and `selection_preset` | Refused like any request that cannot be expressed under A6, in the RFC 9396 form of B1.5 |\n| 6 | Never refuse a purpose code only because the PDPP registry lacks it; local policy may refuse | Only the ten Open Personal Context purposes are accepted, a local policy the item permits (B1.4) |\n| 7 | Keep requester metadata, declaration text, structured policy and client claims distinct at consent | The consent surface shows them as separate categories, attributes client claims to the client and never presents them as enforced terms |\n| 8 | Track grant lifecycle and reflect revocation in introspection at once | Revocation takes effect on the next attempted action (A6.5) and introspection reports it at once (B1.6) |\n| 9 | Bind access tokens to one grant, with the PDPP introspection members | A6.3 tokens bound to one grant, introspected with the members of B1.6 |\n| 10 | Consume a `single_use` grant atomically with its first client token | A grant with `max_reads` 1 is `single_use` (B1.4) and is consumed atomically with its first client token |\n| 11 | Validate stream, field, view and resource-id shape at issuance | Stream and field shape are validated at issuance; views and resource IDs are never accepted (B1.2) |\n| 12 | Define no view with fields outside the declaration | Met trivially: no stream declares a view (B1.2) |\n| 13 | Resolve views at issuance; client-token reads refuse a query-time view | No views are declared, and a client-token `view` is refused (B1.7) |\n| 14 | Obtain explicit affirmative consent before issuing an `ai_training` grant | Met by refusing the `ai_training` purpose code, which is not an Open Personal Context purpose |\n| 15 | Resolve instances before final approval and bind approval to an immutable review revision | The one eligible instance is resolved before review (B1.4); approval is bound to an immutable review revision and refused if eligibility or the revision changes before approval |\n| 16 | Retain one exact declaration snapshot from validation to consent evidence | The declaration snapshot used for consent is retained with the grant, which names its revision (B1.4) |\n| 17 | Refuse an unsupported `PDPP-Version` with status 400 and the section 8 code for it | `PDPP-Version` is negotiated as B1.9 states, and an unsupported version is refused with status 400 and that code |\n| 18 | For a separated resource server, authenticate it at RFC 7662 introspection | The servers are co-located and use the local equivalent; an RFC 7662 endpoint offered to a separated resource server accepts only that server's credential and answers with the complete enforcement context of B1.6 in one response |\n| 19 | Consume each authorisation code on its first redemption | Codes are single-use (A6.3, B1.6) |\n| 20 | Issue refresh tokens only for `continuous` grants, rotate them by family and revoke the family on reuse | Refresh tokens rotate by family with replay detection (A6.3). Reuse of a superseded token revokes the grant, with every token issued for it, and fresh authorisation is required. No refresh token is issued for a `single_use` grant (B1.6) |\n| 21 | Refuse unsupported persisted authorisation state | Unsupported persisted state is refused and never rebuilt from current configuration; fresh consent is required |\n\n**Resource Server**\n\n| Item | Section 9 requirement | How this binding meets it |\n| ---- | ------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |\n| 1 | Implement the section 8 endpoints, including the blob endpoint and owner-authenticated delete | Partly. Every section 8 endpoint exists. The blob endpoint never finds a blob, because no stream declares one (B1.7), and owner delete refuses every token (B1-D8) |\n| 2 | Enforce stream membership, instances, time constraint, fields and resources on every client request | Stream membership, the instance handle and `fields` are enforced on every read (B1.7); no time constraint or resource filter is ever granted (B1.2, B1.4) |\n| 3 | Resolve tokens through introspection or a co-located equivalent, caching for at most 60 seconds | Co-located local equivalent with no caching (B1.6, B1-D6) |\n| 4 | Distinguish owner tokens from client tokens | Token kinds are distinguished; no owner token is issued, and an `autonym_lifecycle` token is unauthorised for every PDPP operation and not advertised (B1.6) |\n| 5 | Refuse request-time predicate filters on client tokens | Refused (B1.7) |\n| 6 | Use the section 8 structured errors | The section 8 error object on the PDPP endpoints (B1.9, B1-D5) |\n| 7 | Support `changes_since` incremental sync, with tombstones, unchanged projections omitted and status 410 on cursor expiry | The compiled projection at the cursor's horizon is compared with the current one (B1.7), with the section 8 tombstone and cursor-expiry behaviour |\n| 8 | Include `next_changes_since` on the terminal page of every `changes_since` response | Included as section 8 requires |\n| 9 | Refuse client-token `filter[...]` with status 400 before consulting the declaration | Refused with status 400 before the declaration is consulted (B1.7) |\n| 10 | Refuse unknown query parameters and unsupported query shapes with status 400 | Refused, never silently ignored |\n| 11 | Implement `PDPP-Version` negotiation | Negotiated (B1.9) |\n| 12 | Scope owner tokens to one subject's data | Met trivially: no owner tokens are issued (B1-D8) |\n| 13 | SHOULD support owner-token self-export through the record endpoints | Not supported: the person exports through the first-party app and A11 (B1-D8) |\n| 14 | Return full current stream metadata to owner tokens | Met trivially: no owner tokens are issued (B1-D8) |\n| 15 | Return client tokens only a projection of stream metadata derived from the grant | The closed projection: the granted stream and its granted fields only (B1.7) |\n| 16 | Publish RFC 9728 metadata with the `pdpp_` members, and a `Bearer` challenge with `resource_metadata` on status 401 | Published for the PDPP resource (B1.2, B1.9), with the `Bearer` challenge on status 401 and a `DPoP` challenge where DPoP-bound tokens are accepted (B1.9) |\n\nClient items 1 to 8 bind a recipient that uses this binding, not the provider.\n\nUntil PDP-Connect publishes its conformance suite, conformance is shown by Autonym's own executable checks, each traced to one section 9 role and item number and never given an invented identifier; PDP-Connect's suite replaces them when it is published.\n\nThe Open Personal Context side of this binding is checked by CONSENT-01, CORE-01 and DELEGATE-01 in the [conformance manifest](../conformance/profiles.json), whose runtime evidence is pending the phases the manifest names. BINDING-01, the check of the manifest's optional `pdpp-binding` feature, covers the requirements specific to this binding: the generated source declaration of B1.2, the static streams of B1.3 and the owner endpoints of B1-D8. Its runtime evidence is pending too, and none of these checks is executable yet.\n\n## B1.11 Deviations from PDPP Core\n\nRead strictly against PDPP Core v0.1.0, this binding does the following, which PDPP Core does not anticipate. None widens what a PDPP grant authorises.\n\n- **B1-D1. Extra refusals.** Section 12 (Extensions) says a grant authorises exactly what sections 7 and 8 define. The B1.5 restrictions can refuse a read that the PDPP grant alone would allow.\n- **B1-D2. `single_use` retries.** Section 7 lets a client retry with the same token until it expires. With `max_reads` 1, a second successful read is refused.\n- **B1-D3. Levels rest on non-normative text.** Derived streams appear only in the non-normative part of section 12.\n- **B1-D4. No Bearer tokens.** PDPP Core carries client tokens as RFC 6750 Bearer tokens. Every token here is DPoP-bound (A6.3), so a client that cannot use DPoP obtains no grant.\n- **B1-D5. Error format.** Open Personal Context codes appear inside the section 8 error object where PDPP defines none, until the error mapping is settled.\n- **B1-D6. No introspection caching.** Stricter than section 10 and conformant with it.\n- **B1-D7. Retention measured from issue.** PDPP clients may measure `retention.max_duration` from collection rather than from `issued_at`; `persist_until` in B1.5 governs, and how it reaches a PDPP-only client is not yet settled.\n- **B1-D8. No owner tokens.** The owner record endpoints, including owner-authenticated delete (Resource Server item 1) and self-export (item 13, a SHOULD), refuse every token; the person uses the app and A11 instead.\n\nChecks: BINDING-01, CONSENT-01, CORE-01, DELEGATE-01.\n", "bindings/B2-linked-web-storage.md": "# B2. Linked Web Storage binding\n\n**Status:** informative in 1.0, normative in 2.0. Binds Linked Web Storage Protocol 1.0, W3C Working Draft of 21 September 2026 (see the [adoption record](../adoption/linked-web-storage.md)). Document version `1.0-draft-1`.\n\nThis binding will describe how a person's record can be kept in a Linked Web Storage or Solid pod instead of the provider's native store: the resource layout for a record, how access grants map to Open Personal Context grants, and what cannot be represented.\n\nThe draft is to be written after 1.0. Until then a provider-native store is the only described storage, and this file adds no requirement.\n", "bindings/B3-mcp.md": "# B3. MCP binding\n\n**Status:** normative. Binds MCP revision `2026-07-28`. Document version `1.0-draft-1`.\n\nThis binding carries the A7 agent surface, and the A5 signed disclosure, over the Model Context Protocol. It binds MCP revision 2026-07-28; the [MCP adoption record](../adoption/mcp.md) says what is taken from it, what is extended and what is not used.\n\n## B3.1 Transport\n\nThe normative target is MCP revision [2026-07-28](https://modelcontextprotocol.io/specification/2026-07-28/changelog), Streamable HTTP, server name `autonym`. This specifies an implementation requirement; the reference repository does not yet expose this surface.\n\nThe server is stateless, with no initialise/initialized handshake or `Mcp-Session-Id`, and MUST implement [server/discover](https://modelcontextprotocol.io/specification/2026-07-28/server/discover). Requests carry protocol version/capabilities in `_meta`. Require `Mcp-Method` on every request and `Mcp-Name` on `tools/call`, `resources/read` and `prompts/get`. Decode and validate headers against the body under the [transport rules](https://modelcontextprotocol.io/specification/2026-07-28/basic/transports/streamable-http); mismatches fail. Roots, Sampling and Logging are not adopted. Legacy revisions are unsupported unless separately declared and tested; no legacy compatibility is claimed by this draft.\n\n## B3.2 Tools\n\nThe complete input and output definitions are generated in [tools.json](../mcp/tools.json). Each A7.1 operation is an MCP tool of the same name.\n\nTool lists are fixed and public. Grant-dependent resource lists are private. Use the revision's list-cache fields. Resource reads use `ttlMs:0` and `cacheScope:\"private\"`; these transport hints never extend signed context validity.\n\n`get_context` returns the A5 signed disclosure in structured content and the same JSON as text content. Errors follow B3.4.\n\n## B3.3 Resources and prompts\n\n`autonym://context/{domain}` maps to a single-domain context request under the same grant and compiler, counts as one read, and returns the signed JSON object. No grant means no read.\n\nThe `autonym_briefing` prompt carries the A7.3 briefing. It returns a text message containing the signed disclosure JSON.\n\n## B3.4 Errors\n\nEvery code in the [registry](../errors.json) has exactly one row below: a form in which it reaches an agent, carrying the same Problem Details object as B4.3, or the last row, of codes no agent operation raises. A request that is not a valid JSON-RPC message, fails the MCP request schema or names an unknown tool, resource or prompt gets the JSON-RPC protocol error MCP defines, not a registered code. Every JSON-RPC error `message` is the registered title or, for a protocol error, fixed text; neither carries a submitted value or validation detail. A token that fails verification at the MCP endpoint fails RFC 6750 `invalid_token` as A6.3 says, before any JSON-RPC processing: status `401` with the A6.1 challenge carrying that code. It is not a registered code, so it has no row below.\n\n| Form | Codes |\n| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| HTTP response on the MCP endpoint, before any JSON-RPC processing, with the registered status and the Problem Details body. A `401` also carries the A6.1 challenge and a `429` carries `Retry-After` | `dpop_required`, `dpop_invalid`, `payload_too_large`, `rate_limited`, `not_ready` |\n| JSON-RPC error `-32603` (Internal error) with the Problem Details object as `data` | `internal_error` |\n| From `tools/call`, a tool result with `isError:true` whose only content is the Problem Details JSON as text, without structured content, because each tool's output schema describes its successful result. From any other method, such as `resources/read`, `prompts/get` or a grant-dependent `resources/list`, a JSON-RPC error `-32602` (Invalid params) with the Problem Details object as `data` | `invalid_scope`, `purpose_missing`, `invalid_request`, `not_found`, `idempotency_conflict`, `domain_not_granted`, `grant_revoked`, `grant_expired`, `grant_exhausted`, `safety_write_forbidden`, `inference_forbidden`, `proposal_not_found`, `proposal_decided`, `value_rejected`, `capability_not_granted`, `advertising_ineligible`, `client_suspended` |\n| None: no agent operation adds an entry in this version (A4.1, A7.1, A14), and the session, CSRF, re-authentication, sign-in and sign-up refusals answer only the person's own first-party requests (A15.3), so these refusals reach only the person's own operations, never an agent | `entry_limit_reached`, `session_required`, `csrf_invalid`, `reauthentication_required`, `sign_in_failed`, `signup_unavailable` |\n\nThese forms follow the MCP error handling for [tools](https://modelcontextprotocol.io/specification/2026-07-28/server/tools#error-handling), [resources](https://modelcontextprotocol.io/specification/2026-07-28/server/resources#error-handling) and [prompts](https://modelcontextprotocol.io/specification/2026-07-28/server/prompts#error-handling): a tool reports an input or business failure in its result so that the model can recover, a resource or prompt reports it as a JSON-RPC error, and a tool's structured content always matches its output schema.\n\nChecks: TRANSPORT-01, CORE-01, SIGN-01, LOG-01.\n", "bindings/B4-rest.md": "# B4. REST binding\n\n**Status:** normative. Binds the A8 recipient API to HTTP. Document version `1.0-draft-1`.\n\n## B4.1 Contract and routes\n\nThe complete recipient contract is [OpenAPI 3.1](../openapi/autonym-v1.yaml), generated from the same schema definitions as MCP. The file uses JSON syntax, which is valid YAML. This is a draft contract, not a deployed endpoint. Public discovery is unauthenticated; every recipient action is authenticated and authorised.\n\nUse HTTPS, exact `/v1` audience, and `Autonym-Version:1.0` on protocol responses. Every access token is DPoP-bound (A6.3): a request carries `Authorization:DPoP` plus the DPoP header, and a token presented as Bearer is refused. Reject repeated scalar query parameters, malformed values, unknown fields and unknown protocol versions with `invalid_request`. Comma-separated domain/key lists have no empty items or duplicates. Maximum body size is 64 KiB, including nested values; a larger body fails `payload_too_large`. A context response has at most 1,000 entries; reject an over-limit request without a partial unmarked disclosure.\n\n| Method | Path | Result |\n| ------ | ---------------------------------- | ----------------------------------------------------------- |\n| GET | `/.well-known/autonym` | Provider discovery |\n| GET | `/v1/grant` | Current authenticated grant |\n| GET | `/v1/domains` | Eligible granted domains/keys, without counts |\n| GET | `/v1/context` | Signed disclosure, one counted read |\n| GET | `/v1/context/{domain}` | Same, with conditional-request support |\n| POST | `/v1/proposals` | Contribution event acknowledgement |\n| GET | `/v1/proposals/{id}` | Own proposal status only |\n| POST | `/v1/proposals/{id}/confirm` | Exact-statement confirmation/review |\n| DELETE | `/v1/proposals/{id}` | Withdraw own proposal |\n| GET | `/v1/purge-instructions` | At most 100 outstanding signed instructions for this client |\n| POST | `/v1/purge-instructions/{jti}/ack` | Purge acknowledgement |\n\nThe path ID and body ID must match wherever both occur. Mutating requests other than contribution events require a client-scoped UUIDv4 `Idempotency-Key`, canonical-payload equality, and 30-day deduplication. A reused key with a different payload fails `idempotency_conflict`.\n\n## B4.2 Conditional reads\n\nAn ETag is a quoted opaque HMAC under a dedicated provider key of JCS containing the client, grant ID/revision, the A9 canonical request, sorted selected alias/version/level triples, temporal selection epoch and the previous envelope deadline. Store its association with that exact signed envelope and response hash. Never use a content-only ETag.\n\nA matching `If-None-Match` may return `304` only while the prior envelope is still valid, its entire selection and authority still match, and the grant has not exhausted its read limit. This writes a `read_not_modified` event and counts towards rate limits but does not increment `reads_used`. It cannot extend a signed deadline. At or after any time boundary return a new counted signed response if permitted, or the relevant error. Revocation, counter checks and dependency checks cannot be bypassed through `304`. Responses use `Cache-Control:no-store`; this conditional facility is only for a recipient's explicitly held, still-valid transient object.\n\n## B4.3 Errors and limits\n\n[errors.json](../errors.json) is the closed registry, and [problem.json](../schemas/problem.json) is the exact RFC 9457 representation. Each registered code has one `urn:autonym:error:` type, one status and one title, and names the sections whose text raises it; a response carries exactly that status. No rejected value, record content, credential or existence hint appears in an error. Authentication/token-endpoint errors retain their OAuth-defined representation, and a `401` also carries the A6.1 `WWW-Authenticate` challenge. The registry separately lists the OAuth codes this specification cites and the codes the B1 grant binding takes from its base specification (B1.9); they keep the representation their own specifications define and are not registered codes. `handle_moved` is deliberately removed; API migration does not redirect credentials or disclose a destination.\n\nAn unknown path answers `not_found`. An unexpected failure answers `internal_error`, and a provider that cannot reach its key storage or grant state answers `not_ready` (A15.3); neither says why.\n\nThe provider enforces at least per-client and per-grant rate limits and answers 429 `rate_limited` with `Retry-After`. Default ceiling is 60 authorised requests per minute per grant and 600 per minute per client; a provider may lower these published operational limits, but cannot silently increase consent limits.\n\nChecks: TRANSPORT-01, WIRE-01, TEMP-03, CORE-01, LOG-01, PURGE-01, MIGRATE-01.\n", "bindings/README.md": "# Bindings\n\n**Status:** index. Document version `1.0-draft-1`.\n\nA binding carries the core requirements over an existing standard. Each binding says what it takes from that standard, what it adds and which core sections it implements. The [adoption records](../adoption/README.md) describe the standards themselves. PDPP citations here refer to PDPP Core v0.1.0 at commit `8f79a48`.\n\n| Binding | Status at `1.0-draft-1` | Binds |\n| ------------------------------------------------- | ------------------------------------ | --------------------------------------------------------------------- |\n| [B1 PDPP](B1-pdpp.md) | Normative draft; checks pending | The A6 grant model to PDPP Core grants, introspection and token kinds |\n| [B2 Linked Web Storage](B2-linked-web-storage.md) | Informative in 1.0, normative in 2.0 | Storage of a record in a Linked Web Storage or Solid pod |\n| [B3 MCP](B3-mcp.md) | Normative | The A7 agent surface to the Model Context Protocol |\n| [B4 REST](B4-rest.md) | Normative | The A8 recipient API to HTTP and OpenAPI |\n", "conformance/README.md": "# Implementation and conformance status\n\nDocument 1.0-draft-1 publishes complete contracts for its declared v1 scope. No recipient service or conformance certification is claimed.\n\n| Layer | Status |\n| --------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| Operational health/readiness, scope parsing, prefixed IDs and app shell | Implemented and tested in the reference repository |\n| Entry/grant/disclosure/contribution/receipt/purge/export/discovery schemas | Specified, generated and structurally tested |\n| 30-key vocabulary 1.1 and closed rendering definitions | Specified and generated; examples and selected pure policy checks tested |\n| Temporal interval helper, supported-level selection and advertising grant structure | Executable pure checks; not an authorised runtime compiler |\n| Pure compiler: grant/request intersections, vocabulary renderers, overlay selection, dependency checks and temporal deadlines | Implemented with pure example and property tests and browser evidence, using one injected Clock instant per read; transaction and endpoint integration pending |\n| Full stored-grant authorisation and OAuth/DPoP server | The authorisation contract is specified and generated: client registration metadata and metadata documents, access-token and lifecycle-token claims and the contribution authorisation detail, with `-SCHEMA` tests of the access-token and lifecycle-token lifetime bounds (OAUTH-01). The authorisation server, stored-grant authorisation and runtime evidence are pending |\n| Transactional reads, signed receipts and concurrency | The reference provider signs receipts, chains them with log events per record partition and verifies a partition's chain over its stored rows and its exported form; `-CHAIN` tests against a real database cover appending under concurrency, tampering and signing-key rotation. Transactional reads, the owner's export and runtime evidence pending |\n| Record storage: per-record encryption, immutable entry versions, deletion and crypto-shredding | The reference provider stores each record's entries encrypted under the record's own data key, one immutable version per change, with tombstones that remove a deleted entry's value, overrides, evidence and client-supplied provenance (source, times, confidence, derivations), keeping its provenance kind and recording time until the record is erased, a per-partition entry limit, and crypto-shredding that destroys the record's wrapped key; its integration tests run against a real database, with real concurrency. No recipient or management route reads or writes it yet |\n| Pairwise handles and entry aliases | The reference provider derives each recipient's pairwise handle and entry aliases as A3.2 specifies, under a dedicated key per partition; `-STORE` tests against a real database reproduce the published framing vectors through its handle store and show distinct handles for 10,000 recipients of one partition, one handle per recipient until a rotation, a rotation that changes the handle and every alias at once, and collisions retried with a fresh rotation. No route or command issues, rotates or resolves a handle yet, and a provider whose configured authority is an IP address issues none. A recipient read showing that no canonical identifier escapes is pending, so PAIR-01 stays pending; invalidating grants and starting purge on rotation (A3.2) are pending too |\n| Public REST/MCP, contribution/replay processing and purge outbox | Pending implementation and runtime evidence |\n| Detached-signature verification: strict JSON, ES256, thumbprint key IDs, issuer binding, key retirement and disclosure deadlines | Implemented as a library verifier with SIGN-01 tests in Node and a browser; published [test vectors](vectors/README.md) verified by the reference verifier and independently by Python `jwcrypto` and `rfc8785`; purge instruction token rejection and runtime signing pending |\n| Signing, encrypted export/import and delegation | Contract specified. Signing: `-SIGNER` tests check signed output against the reference verifier and the published test vectors; `-STORE` tests of the reference key store against a real database cover a provider's KEY-01 duties (integration evidence); signing in a running recipient surface pending. Encrypted export/import and delegation: cryptographic/interoperability tests and runtime pending |\n| Role-specific conformance runner and certification | Requirements published; no running endpoint suite or certificates |\n| Jurisdiction assessment, rights/retention operations, transfer safeguards, opt-out and governance checks PRIVACY-01 to PRIVACY-06 | Requirements specified; deployment evidence and runtime enforcement pending |\n| Registry, credentials, emergency cards, guardian/duress | Reserved outside v1 conformance |\n\nThe [conformance manifest](profiles.json) has stable IDs, expected behaviours, capability dependencies and explicit pending runtime evidence. Each check records `runtime_evidence` (`library` where executable library tests cover the requirement as stated; `integration` where the reference implementation's integration tests, which run its provider against real storage, cover every duty the requirement places on a provider that one provider's own tests can show, while any part that falls to a verifier keeps its library tests or published test vectors and any part one provider cannot show is named below; otherwise `pending`) and `pending_phase`, the build phase that supplies its runtime evidence, or, for a check with `integration` evidence, the phase whose integration tests supplied it. Integration evidence shows that the reference provider meets those duties; it is not a suite another implementation can run against its own service. Library and integration evidence both come from the reference repository's own tests: neither is evidence gathered from a running service, which no check has yet (below). A check that the published [test vectors](vectors/README.md) evidence also lists their files in `vectors`. The SCOPE, ID and VOCAB-1.1 families are listed in the manifest with their library evidence; they belong to no capability profile. WILDCARD-01 checks a recommendation (A15.1) and belongs to no capability profile either. The optional features `public-handles` (HANDLE-01), `encrypted-export` (ENCRYPT-01) and `pdpp-binding` (BINDING-01) apply only to a provider that offers them, as `advertising` does (A17.1). Test names in the reference repository follow the convention below. SCOPE-01 to SCOPE-10 and ID-01 to ID-05 remain syntax/identifier checks, not grant or recipient certification.\n\nThe reference repository names each library or integration test by the check it evidences, and a suffix on the check ID says what kind of evidence the test gives:\n\n- `-SCHEMA`: a test of a schema or a pure helper that covers only part of the check's requirement.\n- `-COMPILER`: an example test of the pure compiler at the library boundary.\n- `-PROPERTY`: a property checked across many inputs, either by fast-check with a fixed seed and run count, so that a failure replays exactly, or by an exhaustive pass over every published vocabulary key.\n- `-VERIFIER`: a test of the verifier's side of a check whose remaining duties belong to a running provider, as for KEY-01.\n- `-SIGNER`: a test of the signing side of a check at the library boundary: what the reference signer writes verifies with the reference verifier and has the published test vectors' exact header and payload bytes for the same key and type. It is not runtime evidence: key custody, rotation and signing inside a provider's transactions are shown by `-STORE` tests or a running provider.\n- `-STORE`: an integration test of one of the reference provider's stores, such as its signing key store or its pairwise handle store, run against a real database, with real concurrency where the requirement concerns it. When such tests cover every duty a check's requirement places on a provider that one provider's tests can show, the check records `integration` evidence.\n- `-CHAIN`: a test of the reference provider's owner log, either without a database or against a real database: appending each event's exact bytes in order, and verifying a partition's chain over its stored rows and over its exported form. A further word names what the test shows, such as `-CHAIN-TAMPER` (edits to the stored chain are reported at the first divergence), `-CHAIN-CONCURRENCY`, `-CHAIN-VECTORS` (the published receipt chain is reproduced) or `-CHAIN-SCALE`, a timing guard on verification that, like `-BENCHMARK`, is not conformance evidence. It is not runtime evidence: LOG-01 and LOG-02 also require the disclosure transaction and the owner's export.\n- `-BENCHMARK`: a timing guard on the compiler against a median budget. It is not conformance evidence.\n\nA test with no suffix, such as those named SIGN-01 or SCOPE-01, is named by its check alone; the tests of the published test vectors, for example, carry the bare check ID. A test may name more than one check. A suffix describes a test, not a check: whether library or integration tests cover a check's requirement is recorded only by the check's `runtime_evidence`. Some repository tests carry IDs that are not in the manifest: those that check the shape of the generated contracts, examples and entry validation, and those for the reference server's operational surface, its application shell, the contracts of its internal ports and those of its record store that no check names, whose names can look like a check ID with a suffix, listed above or not. They are implementation tests, not conformance checks, and evidence no check. A record store test named by a check ID with the `-STORE` suffix is a `-STORE` test of that check.\n\nEvery sentence of the normative pages (`core/`, `bindings/` and the vocabulary page) that carries MUST, MUST NOT, SHOULD or SHOULD NOT, every requirement they state in the imperative, and every sentence that uses a lower-case must or should, has an entry in [statements.json](statements.json): the checks that test it, or the reason no suite can, such as an organisational obligation or a sentence that only restates another. The items of a list introduced by an imperative ending in a colon, such as the A5.4 rejection list, count as imperatives. Some requirements stated without a modal, such as the A5.4 key, key-set and instant rules, the A9 canonical request and the A10 acknowledgement bytes, also have hand-chosen entries of kind `declarative`. No such sentence needs one, so the audit does not show that every requirement without a modal is covered; but a declarative entry must still quote its sentence, and a sentence the audit extracts takes the extracted kind. `pnpm check:statements` fails when a sentence has no entry, an entry no longer matches the text, or an entry names a check that is not in the manifest or not cited by its page. Runtime checks are pending because no recipient endpoint exists; this is not an exception permitting weaker behaviour. A release must supply real authentication, storage, concurrency, cryptographic and cross-surface evidence, with failures reported as expected versus observed. No logo or badge substitutes for that evidence.\n\nThe [test vectors](vectors/README.md) are fixed bytes an implementation can check offline: synthetic keys, canonical JSON, a signed disclosure, a receipt chain across a key rotation, a purge instruction and acknowledgement, and the signed objects a verifier must reject. They evidence a verifier's side of SIGN-01, KEY-01, LOG-01, LOG-02 and PURGE-01: rejecting the failures A5.4 lists for the objects they cover, verifying a receipt signed before a rotation from the published key set alone, recomputing the receipt hash chain and checking an acknowledgement's signed bytes. They are not runtime evidence. KEY-01's verifier rejections have published vectors, but never reusing a key ID, never sharing a key with another provider, signing nothing at or after a key's `exp`, and keeping a retired key published with an unchanged `exp` are a provider's duties, shown by a running key store: the reference implementation shows them with `-STORE` tests of its key store against a real database, its `integration` evidence, which also covers a provider whose issuer changes: its earlier issuer's retired keys stay in the key set it publishes, with their `exp`. That evidence does not cover the rest of KEY-01's statements: a verifier's rejections, evidenced by the `-VERIFIER` tests and the vectors; a key set served at a discovery `jwks_uri`, and keys a recipient registers, which need a running service; and the keys of any other provider. One provider's tests cannot show that no other provider holds the same key. They show that its keys are generated by the provider itself from a cryptographically secure random source, are never imported, and differ between independent installations; the rest depends on every provider keeping its private keys to itself and on verifiers trusting only the key set configured for each issuer (A5.4).\n\nVOCAB-1.1-01 to VOCAB-1.1-09 exercise the approved pilot additions, version metadata, explicit grant/recipient vocabulary intersection, text/enum validation, renderings, inference restrictions, grant isolation, temporal overlays and unavailable-key deadline isolation. Library checks do not establish runtime negotiation or stored consent evidence. The original 27 keys remain available under vocabulary 1.0; all 30 are tested under 1.1.\n", "conformance/profiles.json": "{\n \"document_version\": \"1.0-draft-1\",\n \"wire_version\": \"1.0\",\n \"certified_profiles\": [],\n \"profiles\": [\n {\n \"role\": \"provider\",\n \"name\": \"Core\",\n \"checks\": [\n \"CORE-01\",\n \"PAIR-01\",\n \"DISC-01\",\n \"TEMP-01\",\n \"TEMP-02\",\n \"TEMP-03\",\n \"SIGN-01\",\n \"CONSENT-01\",\n \"LOG-01\",\n \"LOG-02\",\n \"KEY-01\",\n \"PURGE-01\",\n \"CLAIM-01\",\n \"TRANSPORT-01\",\n \"WIRE-01\",\n \"OAUTH-01\",\n \"FETCH-01\",\n \"INFER-01\",\n \"PRIVACY-01\",\n \"PRIVACY-02\",\n \"PRIVACY-03\",\n \"PRIVACY-04\",\n \"PRIVACY-05\",\n \"PRIVACY-06\"\n ]\n },\n {\n \"role\": \"provider\",\n \"name\": \"Write\",\n \"requires\": [\n \"Core\"\n ],\n \"checks\": [\n \"CONTRIB-01\",\n \"CONTRIB-02\",\n \"CONTRIB-03\"\n ]\n },\n {\n \"role\": \"provider\",\n \"name\": \"Portable\",\n \"requires\": [\n \"Core\"\n ],\n \"checks\": [\n \"PORT-01\",\n \"MIGRATE-01\"\n ]\n },\n {\n \"role\": \"provider\",\n \"name\": \"Delegated\",\n \"requires\": [\n \"Core\"\n ],\n \"checks\": [\n \"DELEGATE-01\"\n ]\n },\n {\n \"role\": \"recipient\",\n \"name\": \"Read\",\n \"checks\": [\n \"CORE-01\",\n \"DISC-01\",\n \"TEMP-03\",\n \"SIGN-01\",\n \"PURGE-01\",\n \"CLAIM-01\",\n \"TRANSPORT-01\",\n \"WIRE-01\",\n \"FETCH-01\",\n \"PRIVACY-01\",\n \"PRIVACY-02\",\n \"PRIVACY-03\",\n \"PRIVACY-04\",\n \"PRIVACY-05\",\n \"PRIVACY-06\"\n ]\n },\n {\n \"role\": \"recipient\",\n \"name\": \"Contribute\",\n \"checks\": [\n \"CONSENT-01\",\n \"CONTRIB-01\",\n \"CONTRIB-02\",\n \"CLAIM-01\",\n \"WIRE-01\",\n \"FETCH-01\",\n \"PRIVACY-01\",\n \"PRIVACY-02\",\n \"PRIVACY-03\",\n \"PRIVACY-04\",\n \"PRIVACY-05\",\n \"PRIVACY-06\"\n ]\n },\n {\n \"role\": \"recipient\",\n \"name\": \"Reciprocal\",\n \"requires\": [\n \"Read\",\n \"Contribute\"\n ],\n \"checks\": [\n \"PORT-01\",\n \"CLAIM-01\"\n ]\n }\n ],\n \"optional_features\": [\n {\n \"name\": \"advertising\",\n \"checks\": [\n \"ADS-01\",\n \"ADS-02\"\n ]\n },\n {\n \"name\": \"public-handles\",\n \"checks\": [\n \"HANDLE-01\"\n ]\n },\n {\n \"name\": \"encrypted-export\",\n \"checks\": [\n \"ENCRYPT-01\"\n ]\n },\n {\n \"name\": \"pdpp-binding\",\n \"checks\": [\n \"BINDING-01\"\n ]\n }\n ],\n \"checks\": [\n {\n \"id\": \"PRIVACY-01\",\n \"section\": \"A16.2/A16.8\",\n \"requirement\": \"Deployment-specific applicability, actual roles, lawful conditions, notices and consent evidence before processing; unresolved uses disabled.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V12\"\n },\n {\n \"id\": \"PRIVACY-02\",\n \"section\": \"A16.3/A16.8\",\n \"requirement\": \"Local sensitivity, inference and necessity assessment; prohibited categories and further uses stay disabled despite grant consent.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V12\"\n },\n {\n \"id\": \"PRIVACY-03\",\n \"section\": \"A16.4/A16.8\",\n \"requirement\": \"Document every international flow and its required safeguards before enabling it; reassess changed destinations and suspend unsupported flows.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V12\"\n },\n {\n \"id\": \"PRIVACY-04\",\n \"section\": \"A16.5/A16.8\",\n \"requirement\": \"Exercise rights, local deadlines, correction, bounded retention, backup restoration, legal holds and recipient deletion follow-up.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V12\"\n },\n {\n \"id\": \"PRIVACY-05\",\n \"section\": \"A16.6/A16.8\",\n \"requirement\": \"Enforce applicable opt-outs and preference signals after grant issue; advertising and child processing disabled without required safeguards.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V12\"\n },\n {\n \"id\": \"PRIVACY-06\",\n \"section\": \"A16.7/A16.8\",\n \"requirement\": \"Evidence required governance and granted, in-scope regulatory permissions with expiry/renewal controls; incident exercises, local deadlines, decision rights and regulatory status.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V12\"\n },\n {\n \"id\": \"CORE-01\",\n \"section\": \"A3/A6\",\n \"requirement\": \"No read without a currently active, audience-bound grant; test revocation and exhausted counters under concurrency.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"PAIR-01\",\n \"section\": \"A3\",\n \"requirement\": \"Different clients receive different handles and entry aliases; rotation changes both; no canonical identifiers escape.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"DISC-01\",\n \"section\": \"A5\",\n \"requirement\": \"Intersect restrictions, sparse levels, approved text, no omission counters, no identifiers below their allowed level.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"TEMP-01\",\n \"section\": \"A4\",\n \"requirement\": \"Before/start/end/after, null bounds, invalid intervals and independent grant expiry using one Clock instant.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"TEMP-02\",\n \"section\": \"A4\",\n \"requirement\": \"Explicit activation and conflict selection; baseline restores; standing safety facts survive.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"TEMP-03\",\n \"section\": \"A5/B4\",\n \"requirement\": \"Dependencies, cached and conditional responses cannot outlive source or grant rights.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"SIGN-01\",\n \"section\": \"A5/A15\",\n \"requirement\": \"Tampering, duplicate members and non-I-JSON, untrusted or unknown keys, other algorithms, critical headers, wrong types, objects naming another issuer and expired signed objects are rejected.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\",\n \"vectors\": [\n \"vectors/jcs.json\",\n \"vectors/disclosure.json\",\n \"vectors/receipt.json\",\n \"vectors/purge.json\",\n \"vectors/negative.json\"\n ]\n },\n {\n \"id\": \"CONSENT-01\",\n \"section\": \"A2/A6\",\n \"requirement\": \"Separate read/contribute grants, purpose changes need approval, recipient flags cannot authorise, and every client that is neither an assistant nor classified by the operator is shown as unverified.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"ADS-01\",\n \"section\": \"A6\",\n \"requirement\": \"Default off; eligible adult-owned confirmed enum keys only; max L1, one read, 24 hours, no retention or delegation.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"ADS-02\",\n \"section\": \"A6/A9\",\n \"requirement\": \"Receipts and withdrawal evidence; no implied onward right or linkage to other recipients.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V9\"\n },\n {\n \"id\": \"CONTRIB-01\",\n \"section\": \"A14\",\n \"requirement\": \"Write-only cannot read; read-only cannot write; declarations require exact confirmation.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V9\"\n },\n {\n \"id\": \"CONTRIB-02\",\n \"section\": \"A14\",\n \"requirement\": \"Origin, retry, collision, correction/withdrawal, tombstones, revoked retries, atomic acknowledgements and 90-day suppression of rejected suggestions.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V9\"\n },\n {\n \"id\": \"CONTRIB-03\",\n \"section\": \"A4/A14\",\n \"requirement\": \"Raw history and preferences separately selected; recursively enforce actual dependency field rights.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V9\"\n },\n {\n \"id\": \"LOG-01\",\n \"section\": \"A9\",\n \"requirement\": \"Counter, receipt and disclosure commit atomically; non-read events carry the subject, actor, decision and IDs A9 gives their kind; verify chain; operational logs contain no entry values.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V4\",\n \"vectors\": [\n \"vectors/receipt.json\",\n \"vectors/negative.json\"\n ]\n },\n {\n \"id\": \"LOG-02\",\n \"section\": \"A9\",\n \"requirement\": \"A receipt signed before a key rotation verifies afterwards from the published keys and the owner export alone.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V4\",\n \"vectors\": [\n \"vectors/receipt.json\",\n \"vectors/negative.json\"\n ]\n },\n {\n \"id\": \"KEY-01\",\n \"section\": \"A9/A5\",\n \"requirement\": \"Key IDs are canonical RFC 7638 thumbprints, never reused and never shared between providers; a retired key signs nothing at or after its exp, stays published with an exp that never changes, and verifiers reject signatures dated at or after it.\",\n \"runtime_evidence\": \"integration\",\n \"pending_phase\": \"V2\",\n \"vectors\": [\n \"vectors/keys.json\",\n \"vectors/disclosure.json\",\n \"vectors/receipt.json\",\n \"vectors/negative.json\"\n ]\n },\n {\n \"id\": \"PURGE-01\",\n \"section\": \"A10\",\n \"requirement\": \"Grant ending stops reads, signed notices retry/poll, acks and missing deadlines visible; no why leakage.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V9\",\n \"vectors\": [\n \"vectors/purge.json\",\n \"vectors/negative.json\"\n ]\n },\n {\n \"id\": \"PORT-01\",\n \"section\": \"A11\",\n \"requirement\": \"Two-way round trip, temporal/provenance preservation, unsupported report, the A4.1 entry limit of each partition checked before any change, no executable imported authority.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V10\"\n },\n {\n \"id\": \"CLAIM-01\",\n \"section\": \"A17\",\n \"requirement\": \"Role/version/category/evidence bound claims; no certification or full portability from schema checks alone.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V8\"\n },\n {\n \"id\": \"DELEGATE-01\",\n \"section\": \"A6\",\n \"requirement\": \"Target-bound, one-use five-minute offers redeemed only by a recipient that authenticates with private_key_jwt; parent/child restrictions and revocation checked atomically.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V9\"\n },\n {\n \"id\": \"TRANSPORT-01\",\n \"section\": \"A7/A8/B3/B4\",\n \"requirement\": \"REST/MCP return the same signed object; headers, DPoP, audience, limits and errors match contracts.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"WIRE-01\",\n \"section\": \"A1.1/A4.1\",\n \"requirement\": \"Unknown members, values outside their key's closed schema and keys outside the negotiated core vocabulary are rejected at every defined wire boundary; there is no arbitrary-JSON entry lane.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"HANDLE-01\",\n \"section\": \"A3.2\",\n \"requirement\": \"Public handles follow the grammar and claim protections, and resolution yields no record contents, DID or existence evidence to unauthenticated enumeration.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V10\"\n },\n {\n \"id\": \"MIGRATE-01\",\n \"section\": \"A3.4/B4.3\",\n \"requirement\": \"After migration the old provider never redirects authenticated API or token requests, forwards credentials or reveals the destination; purge continues there until settled.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V10\"\n },\n {\n \"id\": \"INFER-01\",\n \"section\": \"A4.2/A14.3\",\n \"requirement\": \"Special-category and safety-critical keys are never observed or inferred and accept only user_supplied events, as protected proposals; inference for an inferable:false key fails inference_forbidden.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V9\"\n },\n {\n \"id\": \"OAUTH-01\",\n \"section\": \"A2/A6.1/A6.3/A6.5/A6.6/A6.8\",\n \"requirement\": \"Metadata naming the configured issuer, iss on responses, per-surface audiences and challenges, exact client-ID matching, registration metadata refused outside its schema, classes from registration evidence, never assistant with a loopback redirect URI, and their limits at issuance, PKCE S256 single-use codes, exact redirects, session-bound state, unframeable consent, DPoP proofs used once within 60 seconds at the token endpoint, rotating refresh whose reuse ends the grant, bounded access and lifecycle tokens, refresh-token revocation ending the grant, with proof of possession of the bound DPoP key from a public client, and access tokens refused as unsupported, and no authorisation, token or refresh for a suspended client.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"FETCH-01\",\n \"section\": \"A15.3/A3.3/A6.1\",\n \"requirement\": \"Every fetch of a client- or provider-supplied URL checks resolved addresses and each redirect, refuses private and link-local destinations unless an isolated local mode is configured, bounds size and time and forwards no credentials across origins.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"ENCRYPT-01\",\n \"section\": \"A11.2\",\n \"requirement\": \"Optional encrypted export uses the exact JWE and Argon2id parameters, rejects other parameters, duplicate members and excess size before deriving a key, bounds concurrent derivations, verifies GCM first and fails generically.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V10\"\n },\n {\n \"id\": \"BINDING-01\",\n \"section\": \"B1.2/B1.3/B1.11\",\n \"requirement\": \"The PDPP source declaration is generated from the vocabulary with source.id equal to the resource identifier; streams are static; owner record endpoints refuse every token.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"WILDCARD-01\",\n \"section\": \"A15.1\",\n \"requirement\": \"Recommended: a wildcard L0 grant is refused to a client already holding L2 or higher in any domain, and the person sees the actual selection.\",\n \"runtime_evidence\": \"pending\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-01\",\n \"section\": \"A6.2\",\n \"requirement\": \"The recovered proposal's A6.3 scope example round-trips exactly.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-02\",\n \"section\": \"A6.2\",\n \"requirement\": \"Only the closed purposes and capabilities are accepted.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-03\",\n \"section\": \"A6.2\",\n \"requirement\": \"Exactly one purpose is required.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-04\",\n \"section\": \"A6.2\",\n \"requirement\": \"A wildcard grants only L0, with no implicit read permission.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-05\",\n \"section\": \"A6.2\",\n \"requirement\": \"Duplicates collapse without losing declared-only restrictions.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-06\",\n \"section\": \"A6.2\",\n \"requirement\": \"Malformed separators, non-string boundaries and unsupported tokens reject the whole scope.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-07\",\n \"section\": \"A6.2\",\n \"requirement\": \"Input limits and unsafe domain lookups fail closed.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-08\",\n \"section\": \"A6.2\",\n \"requirement\": \"10,000 arbitrary inputs expose only safe validation errors.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-09\",\n \"section\": \"A6.2\",\n \"requirement\": \"10,000 generated valid sets round-trip and never elevate a ceiling.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"SCOPE-10\",\n \"section\": \"A6.2/A6.7\",\n \"requirement\": \"Advertising is an explicit purpose and grants no implicit capability.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V3\"\n },\n {\n \"id\": \"ID-01\",\n \"section\": \"A4.1\",\n \"requirement\": \"Only canonical prefixed identifiers are accepted, including ULID boundaries.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"ID-02\",\n \"section\": \"A4.1\",\n \"requirement\": \"Generation uses the supplied clock and the library CSPRNG, without ambient time or Math.random.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"ID-03\",\n \"section\": \"A4.1\",\n \"requirement\": \"Invalid generation input fails with fixed errors.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"ID-04\",\n \"section\": \"A4.1\",\n \"requirement\": \"10,000 generated identifiers validate and preserve the supplied timestamp.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"ID-05\",\n \"section\": \"A4.1\",\n \"requirement\": \"The public schema package runs in a browser with secure randomness and no ambient clock.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-01\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Approved additions are versioned without changing the semantics of older keys.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-02\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Closed enum values and text bounds are enforced.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-03\",\n \"section\": \"vocabulary\",\n \"requirement\": \"New keys need both grant approval and recipient support, including at L0.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-04\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Always-do text needs an approved L1/L2 rendering and cannot be inferred.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-05\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Enum values render unchanged at L1 to L3 and use closed categories at L0.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-06\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Overlays, grant restrictions and independent revocation apply to all additions.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-07\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Unavailable key timing cannot change an older vocabulary response.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-08\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Generated synthetic pilot examples validate and new enum preferences remain inferable.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n },\n {\n \"id\": \"VOCAB-1.1-09\",\n \"section\": \"vocabulary\",\n \"requirement\": \"Transitive dependencies obey both versions without leaking unavailable-source timing.\",\n \"runtime_evidence\": \"library\",\n \"pending_phase\": \"V4\"\n }\n ]\n}\n", "conformance/statements.json": "{\n \"note\": \"The normative statement audit. Every sentence of the normative pages (core/, bindings/ and vocabulary/README.md) that carries MUST, MUST NOT, SHOULD or SHOULD NOT, every requirement they state in the imperative, and every sentence that uses a lower-case must or should, has one entry here: the conformance checks that test it, or the reason no suite can. Some requirements stated without a modal also have hand-chosen entries of kind declarative: none is required, but each must quote its sentence, and a sentence the audit extracts takes the extracted kind. Hand-reviewed; pnpm check:statements fails when a sentence has no entry, an entry (declarative or not) no longer matches the text or appears twice, or an entry names a check missing from profiles.json or not cited by its page.\",\n \"statements\": [\n {\n \"file\": \"bindings/B1-pdpp.md\",\n \"section\": \"B1.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The PDPP endpoints form their own protected resource with their own identifier, distinct from the B4 resource; `source.id` MUST equal that identifier (section 5, Declaration acceptance).\",\n \"checks\": [\"BINDING-01\"]\n },\n {\n \"file\": \"bindings/B1-pdpp.md\",\n \"section\": \"B1.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Stream names MUST NOT be generated per request (section 12).\",\n \"checks\": [\"BINDING-01\"]\n },\n {\n \"file\": \"bindings/B1-pdpp.md\",\n \"section\": \"B1.7\",\n \"kind\": \"imperative\",\n \"text\": \"It runs the A5.2 transaction in full: lock and recheck the stored grant and the B1.5 restrictions, compile, create and sign the A5 envelope, append the A9 receipt with surface `pdpp` and increment the read counter, then commit.\",\n \"checks\": [\"CORE-01\"]\n },\n {\n \"file\": \"bindings/B1-pdpp.md\",\n \"section\": \"B1.10\",\n \"kind\": \"keyword\",\n \"keywords\": [\"SHOULD\"],\n \"text\": \"Resource Server item 13, a SHOULD, is not supported.\",\n \"reason\": \"Records that this binding declines PDPP Core's own SHOULD (B1-D8); it adds no requirement of this specification. The refusal it implies is checked by BINDING-01 under B1.11.\"\n },\n {\n \"file\": \"bindings/B1-pdpp.md\",\n \"section\": \"B1.10\",\n \"kind\": \"keyword\",\n \"keywords\": [\"SHOULD\"],\n \"text\": \"SHOULD support owner-token self-export through the record endpoints\",\n \"reason\": \"Quotes PDPP Core section 9 Resource Server item 13, which this binding declines (B1-D8). PDPP Core conformance is traced by role and item number, not by a manifest id.\"\n },\n {\n \"file\": \"bindings/B1-pdpp.md\",\n \"section\": \"B1.11\",\n \"kind\": \"keyword\",\n \"keywords\": [\"SHOULD\"],\n \"text\": \"The owner record endpoints, including owner-authenticated delete (Resource Server item 1) and self-export (item 13, a SHOULD), refuse every token; the person uses the app and A11 instead.\",\n \"checks\": [\"BINDING-01\"]\n },\n {\n \"file\": \"bindings/B3-mcp.md\",\n \"section\": \"B3.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The server is stateless, with no initialise/initialized handshake or `Mcp-Session-Id`, and MUST implement server/discover.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"bindings/B3-mcp.md\",\n \"section\": \"B3.1\",\n \"kind\": \"imperative\",\n \"text\": \"Require `Mcp-Method` on every request and `Mcp-Name` on `tools/call`, `resources/read` and `prompts/get`.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"bindings/B3-mcp.md\",\n \"section\": \"B3.1\",\n \"kind\": \"imperative\",\n \"text\": \"Decode and validate headers against the body under the transport rules; mismatches fail.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"bindings/B3-mcp.md\",\n \"section\": \"B3.2\",\n \"kind\": \"imperative\",\n \"text\": \"Use the revision's list-cache fields.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"bindings/B3-mcp.md\",\n \"section\": \"B3.4\",\n \"kind\": \"declarative\",\n \"text\": \"A token that fails verification at the MCP endpoint fails RFC 6750 `invalid_token` as A6.3 says, before any JSON-RPC processing: status `401` with the A6.1 challenge carrying that code.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"bindings/B4-rest.md\",\n \"section\": \"B4.1\",\n \"kind\": \"imperative\",\n \"text\": \"Use HTTPS, exact `/v1` audience, and `Autonym-Version:1.0` on protocol responses.\",\n \"checks\": [\"TRANSPORT-01\", \"CORE-01\"]\n },\n {\n \"file\": \"bindings/B4-rest.md\",\n \"section\": \"B4.1\",\n \"kind\": \"imperative\",\n \"text\": \"Reject repeated scalar query parameters, malformed values, unknown fields and unknown protocol versions with `invalid_request`.\",\n \"checks\": [\"TRANSPORT-01\", \"WIRE-01\"]\n },\n {\n \"file\": \"bindings/B4-rest.md\",\n \"section\": \"B4.1\",\n \"kind\": \"imperative\",\n \"text\": \"A context response has at most 1,000 entries; reject an over-limit request without a partial unmarked disclosure.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"bindings/B4-rest.md\",\n \"section\": \"B4.1\",\n \"kind\": \"lowercase\",\n \"text\": \"The path ID and body ID must match wherever both occur.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"bindings/B4-rest.md\",\n \"section\": \"B4.2\",\n \"kind\": \"imperative\",\n \"text\": \"Store its association with that exact signed envelope and response hash.\",\n \"checks\": [\"TEMP-03\", \"LOG-01\"]\n },\n {\n \"file\": \"bindings/B4-rest.md\",\n \"section\": \"B4.2\",\n \"kind\": \"imperative\",\n \"text\": \"Never use a content-only ETag.\",\n \"checks\": [\"TEMP-03\", \"TRANSPORT-01\"]\n },\n {\n \"file\": \"core/a01-scope-and-layering.md\",\n \"section\": \"A1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\", \"MUST NOT\", \"SHOULD\"],\n \"text\": \"RFC 2119 and RFC 8174 capitalised MUST, MUST NOT, SHOULD and MAY identify requirements.\",\n \"reason\": \"Defines how the keywords are used; it states no requirement of its own.\"\n },\n {\n \"file\": \"core/a01-scope-and-layering.md\",\n \"section\": \"A1.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"An implementation MUST satisfy both.\",\n \"reason\": \"States that the JSON Schemas and the prose invariants both bind. Every check in the manifest tests one or both, so the sentence needs no check of its own.\"\n },\n {\n \"file\": \"core/a01-scope-and-layering.md\",\n \"section\": \"A1.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Unknown fields at a defined wire boundary MUST be rejected.\",\n \"checks\": [\"WIRE-01\"]\n },\n {\n \"file\": \"core/a01-scope-and-layering.md\",\n \"section\": \"A1.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Keys absent from the released core vocabulary MUST be rejected unless a separately versioned future extension is negotiated; there is no permissive arbitrary-JSON entry lane.\",\n \"checks\": [\"WIRE-01\"]\n },\n {\n \"file\": \"core/a01-scope-and-layering.md\",\n \"section\": \"A1.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Implementations MUST NOT advertise those reserved capabilities as conforming v1 features.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a02-actors-and-trust.md\",\n \"section\": \"A2\",\n \"kind\": \"lowercase\",\n \"text\": \"Operators must have no routine decrypt-arbitrary-records interface.\",\n \"reason\": \"Operator interfaces are outside the protocol surface, so a suite cannot exercise them. Organisational: covered by implementation review and the security assessment, not by a conformance suite.\"\n },\n {\n \"file\": \"core/a02-actors-and-trust.md\",\n \"section\": \"A2\",\n \"kind\": \"declarative\",\n \"text\": \"A client is `assistant` when the operator's assistant allowlist names the host of its Client ID Metadata Document or, for a client registered without one, names exactly every redirect URI it registers.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a02-actors-and-trust.md\",\n \"section\": \"A2\",\n \"kind\": \"declarative\",\n \"text\": \"A client that registers or publishes a loopback redirect URI is never `assistant`, by either path and whatever the allowlist names, because any program on the person's device can receive a redirect there, so the client's identity cannot be assured (RFC 8252 section 8.6).\",\n \"checks\": [\"OAUTH-01\", \"CONSENT-01\"]\n },\n {\n \"file\": \"core/a02-actors-and-trust.md\",\n \"section\": \"A2\",\n \"kind\": \"declarative\",\n \"text\": \"A redirect URI is a loopback URI when its host, as a URL parser reads it, is `localhost`, a name ending in `.localhost` or a loopback address, whatever its scheme.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a02-actors-and-trust.md\",\n \"section\": \"A2\",\n \"kind\": \"declarative\",\n \"text\": \"A client's class limits the grants it may hold (A6.2), and a request beyond them fails OAuth `invalid_scope`:\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a02-actors-and-trust.md\",\n \"section\": \"A2\",\n \"kind\": \"declarative\",\n \"text\": \"An `assistant_unverified`, `connector` or `self` client never holds `autonym:persist` or `autonym:delegate`; whether an `assistant` or `service` client may hold either is the provider's policy for that client.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a02-actors-and-trust.md\",\n \"section\": \"A2\",\n \"kind\": \"declarative\",\n \"text\": \"Every client that is not `assistant` and that the operator has not classified appears at consent with a warning that it is unverified, whatever its class.\",\n \"checks\": [\"CONSENT-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Recipients MUST NOT receive a record DID, canonical entry ID, owner identifier, another client's handle or another client's grant identifier through ordinary reads.\",\n \"checks\": [\"PAIR-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.2\",\n \"kind\": \"declarative\",\n \"text\": \"An IP address is never an authority, and neither is a name whose last label is all digits or `0x` followed by hexadecimal digits, since URL parsers read such a name as an IPv4 address.\",\n \"checks\": [\"PAIR-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.2\",\n \"kind\": \"imperative\",\n \"text\": \"Generate the local part as the first 32 characters of lower-case, unpadded RFC 4648 base32 of HMAC-SHA256 over UTF-8 RFC 8785 canonical JSON:\",\n \"checks\": [\"PAIR-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.2\",\n \"kind\": \"imperative\",\n \"text\": \"Check uniqueness before committing issuance.\",\n \"checks\": [\"PAIR-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.2\",\n \"kind\": \"imperative\",\n \"text\": \"Never expose canonical IDs through provenance, dependencies, errors, ETags or diagnostic counts.\",\n \"checks\": [\"PAIR-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A public name provides a provider address for consent; it MUST NOT yield record contents, a DID or evidence that the person exists to unauthenticated enumeration.\",\n \"checks\": [\"HANDLE-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.3\",\n \"kind\": \"lowercase\",\n \"text\": \"Every fetch of an untrusted client/provider URL must use SSRF-safe retrieval with DNS/address checks, size/time limits and revalidation at each allowed redirect.\",\n \"checks\": [\"FETCH-01\"]\n },\n {\n \"file\": \"core/a03-identifiers-and-resolution.md\",\n \"section\": \"A3.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"The old provider MUST NOT redirect authenticated API or token requests to a different origin, forward credentials, or reveal the destination to contributors.\",\n \"checks\": [\"MIGRATE-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.1\",\n \"kind\": \"lowercase\",\n \"text\": \"`value_type` must match the key definition, and `value` must pass that key's closed schema.\",\n \"checks\": [\"WIRE-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.1\",\n \"kind\": \"declarative\",\n \"text\": \"A tombstone's version is one more than the last version of the entry it deletes, so no ID and version name both a version and a tombstone, and an earlier version keeps the status it was written with.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.1\",\n \"kind\": \"declarative\",\n \"text\": \"A partition holds at most 10,000 entries that have not been deleted, which bounds what one read compiles; a write that would add another fails with `entry_limit_reached` and changes nothing.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.1\",\n \"kind\": \"declarative\",\n \"text\": \"No agent operation adds an entry: a contribution is acknowledged as a proposal whatever the partition holds (A14), so only the person's own operations, such as accepting a proposal in the first-party app or an import, meet the limit.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"`attested` is reserved for future credential verification and MUST be withheld from v1 recipient disclosure unless the person separately confirms a declared entry.\",\n \"checks\": [\"DISC-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.2\",\n \"kind\": \"imperative\",\n \"text\": \"Preserve source event identity and evidence after confirmation; never disclose that evidence merely because the confirmed preference is shareable.\",\n \"checks\": [\"CONTRIB-02\", \"DISC-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Special-category and safety-critical keys MUST NOT be observed or inferred.\",\n \"checks\": [\"INFER-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.3\",\n \"kind\": \"imperative\",\n \"text\": \"Use one provider `Clock` instant for the entire read transaction.\",\n \"checks\": [\"TEMP-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.3\",\n \"kind\": \"imperative\",\n \"text\": \"Reject equal or reversed finite bounds.\",\n \"checks\": [\"TEMP-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.3\",\n \"kind\": \"imperative\",\n \"text\": \"Never infer that a stale allergy has ceased.\",\n \"checks\": [\"TEMP-02\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.4\",\n \"kind\": \"lowercase\",\n \"text\": \"The target must be an active baseline in the same partition/domain/key.\",\n \"checks\": [\"TEMP-02\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Overlay creation or expiry MUST NOT supersede or alter the baseline.\",\n \"checks\": [\"TEMP-02\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.4\",\n \"kind\": \"imperative\",\n \"text\": \"If several are eligible without one selection, or several of them are marked selected, apply none and use the eligible baseline until the person resolves the conflict.\",\n \"checks\": [\"TEMP-02\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.4\",\n \"kind\": \"imperative\",\n \"text\": \"Do not resolve these conflicts using insertion order or confidence.\",\n \"checks\": [\"TEMP-02\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.5\",\n \"kind\": \"imperative\",\n \"text\": \"At disclosure, recursively validate every dependency's current version, validity, purpose, grant rights and actual fields/level used.\",\n \"checks\": [\"TEMP-03\", \"CONTRIB-03\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.5\",\n \"kind\": \"imperative\",\n \"text\": \"Reject cycles, depth above 16, more than 256 dependency references, absent inputs and stale versions.\",\n \"checks\": [\"TEMP-03\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.5\",\n \"kind\": \"imperative\",\n \"text\": \"Recompute or withhold on any change or expiry.\",\n \"checks\": [\"TEMP-03\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.5\",\n \"kind\": \"imperative\",\n \"text\": \"Never disclose dependency identifiers or raw source history through a preference read.\",\n \"checks\": [\"CONTRIB-03\", \"DISC-01\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Nested paths, array indexes, wildcards, metadata and unknown members are unsupported and MUST be withheld.\",\n \"checks\": [\"TEMP-03\", \"CONTRIB-03\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.5\",\n \"kind\": \"lowercase\",\n \"text\": \"The required level must support the actual referenced field: a category or approved text override does not authorise its raw source value; a first-name rendering authorises `value.first`, not `value.full` or the whole name.\",\n \"checks\": [\"TEMP-03\", \"CONTRIB-03\"]\n },\n {\n \"file\": \"core/a04-data-model.md\",\n \"section\": \"A4.5\",\n \"kind\": \"lowercase\",\n \"text\": \"The request's output domains and keys need not name an input, but the stored grant must permit it.\",\n \"checks\": [\"TEMP-03\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Names, exact dates of birth, detailed addresses, phone/email, account/loyalty numbers, employer and institution names MUST NOT appear at L1.\",\n \"checks\": [\"DISC-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.1\",\n \"kind\": \"imperative\",\n \"text\": \"Free text at L1 or L2 requires the person's identifier-safe approved rendering; omit it if absent.\",\n \"checks\": [\"DISC-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.2\",\n \"kind\": \"imperative\",\n \"text\": \"For each requested domain, select the highest vocabulary-supported level at or below both ceilings.\",\n \"checks\": [\"DISC-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.2\",\n \"kind\": \"imperative\",\n \"text\": \"If none exists, omit the entry.\",\n \"checks\": [\"DISC-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.2\",\n \"kind\": \"imperative\",\n \"text\": \"Restrict provenance evidence separately.\",\n \"checks\": [\"DISC-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.2\",\n \"kind\": \"imperative\",\n \"text\": \"Within one transaction: authenticate the client, validate token audience/sender proof, lock and recheck the grant and counters, capture trusted time, select eligible baselines/overlays, enforce dependencies, render, create and sign the envelope, append its receipt, increment the counter, commit, then return.\",\n \"checks\": [\"CORE-01\", \"LOG-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.2\",\n \"kind\": \"imperative\",\n \"text\": \"Always include currently eligible safety-critical entries even when older.\",\n \"checks\": [\"TEMP-02\", \"DISC-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Implementations MAY conservatively include otherwise eligible entries when their selection group or dependency group changed; they MUST NOT omit restored eligibility because the baseline's stored value was unchanged.\",\n \"checks\": [\"TEMP-02\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.2\",\n \"kind\": \"lowercase\",\n \"text\": \"A client must obtain a full fresh read after a previous envelope expires; a partial response does not renew missing entries.\",\n \"checks\": [\"TEMP-03\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.3\",\n \"kind\": \"imperative\",\n \"text\": \"Use `Cache-Control:no-store`; recipients may retain transient context only until this deadline unless a separate persistence right exists.\",\n \"checks\": [\"TEMP-03\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.3\",\n \"kind\": \"lowercase\",\n \"text\": \"A recipient must stop treating an entry as current at the signed deadline and refresh through a new authorised read.\",\n \"checks\": [\"TEMP-03\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Sign UTF-8 RFC 8785 canonical JSON of the complete object without `proof`.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Use ordinary base64url payload mode with RFC 7515 Appendix F detached compact JWS: `protected..signature`, each part in unpadded base64url and in no other spelling of the same bytes.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A provider's signing key belongs to that provider alone and MUST NOT appear in another provider's key set, so that a valid signature identifies one provider whatever the signed object names (KEY-01).\",\n \"checks\": [\"KEY-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Parse the received text strictly before canonicalisation: reject duplicate members, with names compared after escapes are decoded, and anything that is not I-JSON, including a lone surrogate or noncharacter and a number written with more magnitude or precision than an IEEE 754 binary64 value provides: one whose decimal value differs from that of the shortest decimal identifying the binary64 value it parses to, such as `1E400` or `3.141592653589793238462643383279`, while `0.1` and `1e23` are accepted.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Verify the signature over the canonical form of the parsed object without `proof`.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Accept only ES256 and a key from the trusted, configured key set of the issuer: the configured provider for a disclosure, receipt, export or purge instruction, and the recipient's registered keys for an acknowledgement.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Select the one key whose `kid` equals the protected header's, never a key or key URL that the object or its header supplies, and recompute its thumbprint.\",\n \"checks\": [\"SIGN-01\", \"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Reject:\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"any protected header member other than `alg`, `kid` and `typ`, including `crit`, `jwk`, `jku`, `x5u` and `b64`, and any duplicate header member;\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"`alg:none` and every algorithm other than ES256;\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"a `typ` that differs from the expected value, compared exactly;\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"proof metadata whose `alg` or `kid` disagrees with the protected header;\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"a key ID that is not in the trusted set, appears in it more than once, or is not the thumbprint of its key;\",\n \"checks\": [\"SIGN-01\", \"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"a matching key that does not follow key-set.json, such as one with a private member, `key_ops` or a lifetime member other than `exp`;\",\n \"checks\": [\"SIGN-01\", \"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"a signed object whose signed time is at or after the instant the matching key's `exp` denotes (A9, KEY-01);\",\n \"checks\": [\"KEY-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"a disclosure or receipt whose `provider`, or an export whose `origin_host`, is not the trusted issuer, compared as exact strings;\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"a receipt whose `hash` is not the A9 hash of its own content;\",\n \"checks\": [\"SIGN-01\", \"LOG-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"a disclosure whose `valid_until` is not after `issued_at`, is more than five minutes after it, or disagrees with `ttl_seconds`; one whose `issued_at` is more than 60 seconds after the verifier's trusted current time, the most the two clocks may differ; and one whose `valid_until` is not after the verifier's trusted current time.\",\n \"checks\": [\"SIGN-01\", \"TEMP-03\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"imperative\",\n \"text\": \"Check every other signed binding as well, such as the client, audience, handle and grant of a disclosure.\",\n \"checks\": [\"SIGN-01\", \"CORE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Providers MUST serve a path-specific RFC 9728 metadata document for each protected resource they serve, at the location RFC 9728 section 3 derives from its resource identifier, such as `/.well-known/oauth-protected-resource/mcp` and `/.well-known/oauth-protected-resource/v1`, and authorisation-server metadata under RFC 8414.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"There is no document at `/.well-known/oauth-protected-resource` itself: its `resource` would be the origin, which is not an audience.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"`jwks_uri`, `sector_identifier_uri`, `application_type`, a software statement, a registry attestation and any member the schema does not list are refused, so a registration is never accepted with members silently dropped; whether a client may use the loopback-port exception is decided from its redirect URIs (A6.3).\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"`private_key_jwt` needs `jwks`; `client_credentials` is only for a client that authenticates with `private_key_jwt`; `refresh_token` comes only with `authorization_code`, which goes with the `code` response type and at least one redirect URI; and redirect URIs, grant types and key IDs are each unique.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"A client that uses the A6.4 token exchange lists `urn:ietf:params:oauth:grant-type:token-exchange` in `grant_types`, and one that redeems a grant offer lists `urn:autonym:params:oauth:grant-type:grant-offer`; a grant type the provider does not offer is refused.\",\n \"checks\": [\"OAUTH-01\", \"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"A client that lists the grant offer grant type authenticates with `private_key_jwt`, as one that lists `client_credentials` does, because only its registered key shows that it is the client a grant offer names (A6.4); a public client may still use the token exchange as a delegate.\",\n \"checks\": [\"OAUTH-01\", \"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"A Client Identifier URL has no `.` or `..` path segment, written plainly or percent-encoded, and its host is a name whose last label is neither all digits nor `0x` followed by hexadecimal digits, which URL parsers read as an IPv4 address.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"`client_name`, `contacts`, `software_id` and `software_version` carry only characters of the Basic Multilingual Plane, and no control character, bidirectional formatting character, line or paragraph separator, interlinear annotation character or default-ignorable character, one that renders as nothing, such as a zero-width space, a soft hyphen, a Hangul filler or a variation selector.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.1\",\n \"kind\": \"declarative\",\n \"text\": \"Characters outside the Basic Multilingual Plane are refused because they include the tag characters, which can carry hidden text, and a regular expression that reads text in 16-bit code units, as JavaScript's does, cannot tell those from the rest.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.2\",\n \"kind\": \"imperative\",\n \"text\": \"Any accepted `:declared` modifier makes the entire stored grant declared-only, including wildcard combinations; use separate grants for different declaration restrictions.\",\n \"checks\": [\"SCOPE-05\", \"DISC-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.2\",\n \"kind\": \"lowercase\",\n \"text\": \"`expires_at` must be after issuance; read/event counts cannot exceed their maximum.\",\n \"checks\": [\"CORE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.2\",\n \"kind\": \"declarative\",\n \"text\": \"A contribution grant is requested with `autonym:propose`, exactly one purpose scope and one RFC 9396 `authorization_details` entry of type `urn:autonym:authorization-details:contribute` (contribution-detail.json), which names the domain and key allowlist, `max_events` and `allow_confirmation`.\",\n \"checks\": [\"CONSENT-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.2\",\n \"kind\": \"declarative\",\n \"text\": \"`allow_confirmation` is true exactly when `autonym:confirm` is requested; a detail that says otherwise fails RFC 9396 `invalid_authorization_details`, so the class limits on `autonym:confirm` (A2) also bound the detail.\",\n \"checks\": [\"CONSENT-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.2\",\n \"kind\": \"declarative\",\n \"text\": \"Every grant has exactly one audience, the resource it was requested for, and its tokens are valid only there.\",\n \"checks\": [\"CORE-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"imperative\",\n \"text\": \"Use authorisation code with PKCE S256 only; reject plain/downgrade.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"imperative\",\n \"text\": \"Require exact registered redirect-URI matching, with only the RFC 8252 loopback-port exception, which applies only to a client whose registered redirect URIs are all `http` loopback URIs: a redirect to one of them may name any port.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"imperative\",\n \"text\": \"Use session-bound state, unframeable consent pages and rotating refresh tokens with replay detection.\",\n \"checks\": [\"OAUTH-01\", \"CONSENT-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"imperative\",\n \"text\": \"Check issuer, audience, signature, expiry and server-side grant on every authorised action.\",\n \"checks\": [\"CORE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"imperative\",\n \"text\": \"Never accept a bound token as Bearer.\",\n \"checks\": [\"TRANSPORT-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"declarative\",\n \"text\": \"A second use of an authorisation code or of a spent refresh token revokes the grant it belongs to, and that request fails OAuth `invalid_grant`.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"declarative\",\n \"text\": \"Access tokens last at most one hour and never beyond grant expiry.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"declarative\",\n \"text\": \"Every access token, for every client class and every resource, is bound to the client's DPoP key under RFC 9449: no Bearer token is issued or accepted.\",\n \"checks\": [\"TRANSPORT-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"declarative\",\n \"text\": \"A proof is accepted only once, and only within 60 seconds of its `iat`.\",\n \"checks\": [\"TRANSPORT-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"declarative\",\n \"text\": \"At a resource, a bound token is sent as `Authorization: DPoP` with a proof that binds the method, the URL and the access token, signed by the key whose RFC 7638 thumbprint is the token's `cnf.jkt`; a proof signed by any other key fails `dpop_invalid`.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"declarative\",\n \"text\": \"At a resource, a token whose signature, issuer, audience, type, lifetime or claims fail verification fails RFC 6750 `invalid_token` with status 401 and the A6.1 challenge.\",\n \"checks\": [\"TRANSPORT-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.3\",\n \"kind\": \"declarative\",\n \"text\": \"A verified token whose grant has ended, or whose client is suspended, fails that registered code instead (A5.2, A6.8).\",\n \"checks\": [\"CORE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.4\",\n \"kind\": \"imperative\",\n \"text\": \"Authenticate the delegate and recheck its current grant.\",\n \"checks\": [\"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.4\",\n \"kind\": \"declarative\",\n \"text\": \"The request's DPoP proof is signed by the key whose thumbprint is the `subject_token`'s `cnf.jkt`, or the request fails OAuth `invalid_grant`.\",\n \"checks\": [\"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.4\",\n \"kind\": \"declarative\",\n \"text\": \"`autonym_recipient` names a client registered with the grant offer grant type, which therefore authenticates with `private_key_jwt` (A6.1); naming any other client fails, as a missing parameter does.\",\n \"checks\": [\"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.4\",\n \"kind\": \"declarative\",\n \"text\": \"The recipient redeems it through the RFC 6749 extension grant `grant_type=urn:autonym:params:oauth:grant-type:grant-offer`, `grant_code` and exact `resource`, authenticated as the target client with `private_key_jwt` and presenting its own DPoP key.\",\n \"checks\": [\"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.4\",\n \"kind\": \"declarative\",\n \"text\": \"Holding the offer is never enough to redeem it.\",\n \"checks\": [\"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.4\",\n \"kind\": \"imperative\",\n \"text\": \"Bind offer to target, audience and proposed child restrictions.\",\n \"checks\": [\"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.4\",\n \"kind\": \"imperative\",\n \"text\": \"Check parent, budget and one-use state again atomically at redemption.\",\n \"checks\": [\"DELEGATE-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.6\",\n \"kind\": \"declarative\",\n \"text\": \"This is a client lifecycle token, not a record grant: its JWT (lifecycle-token-claims.json) has `autonym_token_kind:lifecycle`, `sub` and `client_id`, both the client's ID as RFC 9068 asks of a client credentials token, `scope` `autonym:lifecycle:purge`, issuer/audience, `cnf.jkt`, `iat`, `exp` and `jti`, but no handle or grant ID.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Recommendation/personalisation permission MUST NOT be repurposed for advertising.\",\n \"checks\": [\"CONSENT-01\", \"SCOPE-10\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Declining advertising MUST leave independent non-advertising permissions intact.\",\n \"checks\": [\"CONSENT-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Providers MUST require the person to choose the offered ordinary preference directly and prohibit sensitive targeting/inference by recipient policy.\",\n \"checks\": [\"ADS-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.7\",\n \"kind\": \"imperative\",\n \"text\": \"If adult/self-directed eligibility cannot be established, deny the feature; do not collect extra identity documents simply to enable advertising.\",\n \"checks\": [\"ADS-01\", \"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.7\",\n \"kind\": \"imperative\",\n \"text\": \"Retain context only for the current interaction and never past the signed five-minute maximum; a new interaction needs fresh permission.\",\n \"checks\": [\"ADS-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.5\",\n \"kind\": \"declarative\",\n \"text\": \"`POST /oauth/revoke` follows RFC 7009 for refresh tokens, and revoking a refresh token revokes the grant it belongs to.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.5\",\n \"kind\": \"declarative\",\n \"text\": \"A public client's refresh token is bound to its DPoP key (RFC 9449 section 5), so revoking one needs proof of possession, as using one does: a public client's revocation request carries a DPoP proof of that request, checked as at the token endpoint (A6.3), and without a valid one it fails RFC 9449 `invalid_dpop_proof`, or fails `use_dpop_nonce` with a fresh nonce when its nonce is stale, and revokes nothing.\",\n \"checks\": [\"OAUTH-01\", \"TRANSPORT-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.5\",\n \"kind\": \"declarative\",\n \"text\": \"A refresh token bound to a key other than the proof's is not revoked, and the request is answered as RFC 7009 answers an invalid token, so the answer does not tell the holder of a stolen refresh token whether it is live.\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.5\",\n \"kind\": \"declarative\",\n \"text\": \"A confidential client's revocation request is authenticated with `private_key_jwt` (A6.1).\",\n \"checks\": [\"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.5\",\n \"kind\": \"declarative\",\n \"text\": \"An access token is not revoked on its own: the endpoint answers RFC 7009 `unsupported_token_type` for one, and it ends with its grant, because every authorised action checks the stored grant (A6.3).\",\n \"checks\": [\"CORE-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a06-authorisation.md\",\n \"section\": \"A6.8\",\n \"kind\": \"declarative\",\n \"text\": \"A suspended client takes no recipient action, even with an otherwise active grant, except at the A6.6 purge routes: it is not authorised, obtains and refreshes no token, and its request to a resource fails `client_suspended`.\",\n \"checks\": [\"CORE-01\", \"OAUTH-01\"]\n },\n {\n \"file\": \"core/a07-agent-surface.md\",\n \"section\": \"A7.1\",\n \"kind\": \"lowercase\",\n \"text\": \"It must not produce an unsigned alternative value.\",\n \"checks\": [\"TRANSPORT-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a07-agent-surface.md\",\n \"section\": \"A7.3\",\n \"kind\": \"lowercase\",\n \"text\": \"Both domains must be granted; no fallback ambient read exists.\",\n \"checks\": [\"CORE-01\", \"TRANSPORT-01\"]\n },\n {\n \"file\": \"core/a07-agent-surface.md\",\n \"section\": \"A7.3\",\n \"kind\": \"lowercase\",\n \"text\": \"The recipient must apply normal instruction/safety boundaries to contributed text; context is data, not authority to override system or tool policy.\",\n \"reason\": \"Whether a recipient treats contributed text as data inside its own model is not observable through the protocol, so no suite can test it; it is an implementation and threat-model obligation, as in A15.\"\n },\n {\n \"file\": \"core/a08-recipient-api.md\",\n \"section\": \"A8\",\n \"kind\": \"imperative\",\n \"text\": \"Always recheck authority before replaying a stored response; a retry after revocation cannot retrieve protected results.\",\n \"checks\": [\"CORE-01\", \"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a08-recipient-api.md\",\n \"section\": \"A8\",\n \"kind\": \"lowercase\",\n \"text\": \"Owner management must support reviewing entries/proposals/grants/history, temporal activation, correction, revocation, export/import and deletion with re-authentication for sensitive changes.\",\n \"reason\": \"First-party owner management is outside the recipient interoperability surface, as the same paragraph says, so a recipient-facing suite cannot reach it. The rights it serves are evidenced under A16.5.\"\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"imperative\",\n \"text\": \"Sign the complete receipt excluding `proof` using the A5.4 method and protected `typ:autonym-receipt+jws`; its signed time is `at`.\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"lowercase\",\n \"text\": \"Owners should be able to export signed checkpoints.\",\n \"checks\": [\"LOG-02\", \"PORT-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Receipts MUST stay verifiable after the signing key changes.\",\n \"checks\": [\"LOG-02\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A key ID is the RFC 7638 thumbprint of its public key (A5.4), so one key ID cannot name two keys, and a provider MUST NOT reuse a key ID.\",\n \"checks\": [\"KEY-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A retired signing key MUST NOT sign anything at or after its retirement.\",\n \"checks\": [\"KEY-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\", \"MUST NOT\"],\n \"text\": \"Its public key MUST stay in the provider's key set, with `exp` giving the time of its retirement (A5.4), for as long as any receipt or log event it signed is retained, and a published `exp` MUST NOT be removed or changed.\",\n \"checks\": [\"KEY-01\", \"LOG-02\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Log retention and compaction MUST keep everything an old receipt needs to verify independently: the receipt, the hash-chain events it links to, any checkpoint it is anchored to and the public key that signed it.\",\n \"checks\": [\"LOG-02\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"imperative\",\n \"text\": \"Retry after 1 minute, 5 minutes, 30 minutes, 2 hours, 12 hours and then daily until acknowledgement or 30 days.\",\n \"checks\": [\"PURGE-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"imperative\",\n \"text\": \"Do not drop a notice merely because the triggering grant expired.\",\n \"checks\": [\"PURGE-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"imperative\",\n \"text\": \"Validate client/instruction binding.\",\n \"checks\": [\"PURGE-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A provider MUST NOT present an acknowledgement, to the person or anywhere else, as proof of erasure or as evidence that no copy remains (PURGE-01).\",\n \"checks\": [\"PURGE-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"imperative\",\n \"text\": \"Do not expose it to other recipients.\",\n \"checks\": [\"PURGE-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"imperative\",\n \"text\": \"Owner-only wrappers bind every historical grant, receipt, log event, proposal and policy to its partition ID; validate those IDs against the partition list.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"imperative\",\n \"text\": \"Preserve canonical IDs, temporal intervals, overlay targets, semantic kinds, provenance, evidence references and original origin.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"imperative\",\n \"text\": \"Evidence references may be unavailable at the new host; report that explicitly, never treat missing evidence as verified.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"imperative\",\n \"text\": \"Sign the JCS export excluding `proof` by the A5.4 method with the originating provider's ES256 key and protected `typ:autonym-export+jws`; its signed time is `exported_at`.\",\n \"checks\": [\"PORT-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"imperative\",\n \"text\": \"Do not follow arbitrary key URLs from the file.\",\n \"checks\": [\"PORT-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"imperative\",\n \"text\": \"Never export private keys, access/refresh tokens, passkeys, client secrets or executable credentials.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"declarative\",\n \"text\": \"The importer validates size, schema, signatures, vocabulary, IDs, versions, temporal constraints, dependency cycles, relationships and each partition's A4.1 entry limit before changing the destination.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"imperative\",\n \"text\": \"Reject duplicate IDs/versions with differing content.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"An old token MUST fail at the new provider.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.2\",\n \"kind\": \"imperative\",\n \"text\": \"Use compact JWE with `alg:dir`, `enc:A256GCM`, `typ:autonym-export+jwe` and `cty:application/autonym-export+json`.\",\n \"checks\": [\"ENCRYPT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.2\",\n \"kind\": \"imperative\",\n \"text\": \"Use a new random 96-bit GCM IV and 128-bit authentication tag as required by JWE.\",\n \"checks\": [\"ENCRYPT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.2\",\n \"kind\": \"imperative\",\n \"text\": \"Derive a 32-byte key with Argon2id RFC 9106, version 19, memory 65,536 KiB, three iterations, four lanes and a fresh random 16-byte salt.\",\n \"checks\": [\"ENCRYPT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.2\",\n \"kind\": \"imperative\",\n \"text\": \"Reject unsupported/missing KDF fields, salt size, algorithms, duplicate JSON members and excess encrypted size before allocating Argon2 memory.\",\n \"checks\": [\"ENCRYPT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.2\",\n \"kind\": \"imperative\",\n \"text\": \"Limit concurrent derivations.\",\n \"checks\": [\"ENCRYPT-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.2\",\n \"kind\": \"imperative\",\n \"text\": \"Verify GCM before parsing or exposing plaintext, then verify export signatures and semantics.\",\n \"checks\": [\"ENCRYPT-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.2\",\n \"kind\": \"imperative\",\n \"text\": \"Use maintained Argon2/JWE libraries; do not implement these primitives in application code.\",\n \"reason\": \"Implementation practice: which library produced a correct result is not observable through the protocol, so no suite can test it. ENCRYPT-01 tests the outcomes.\"\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.2\",\n \"kind\": \"imperative\",\n \"text\": \"Record the authenticated client as source; reject a body-supplied source client or ingestion time.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.2\",\n \"kind\": \"lowercase\",\n \"text\": \"Occurrence time can describe past activity but must not exceed ingestion by more than five minutes; it does not backdate authority.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.2\",\n \"kind\": \"imperative\",\n \"text\": \"Hash the canonical submitted payload with SHA-256 for comparison.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.2\",\n \"kind\": \"imperative\",\n \"text\": \"Accept and acknowledge transactionally, after rechecking current grant activity and limits.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.2\",\n \"kind\": \"imperative\",\n \"text\": \"Retain deduplication identities and payload digests for the stream lifetime plus 30 days.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.3\",\n \"kind\": \"lowercase\",\n \"text\": \"The full predecessor chain is bounded to 100 and cannot branch silently: a correction must reference the current head or fail `proposal_decided`.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.3\",\n \"kind\": \"imperative\",\n \"text\": \"It cannot delete the person's independently confirmed declaration; instead flag the changed evidence for the person's review.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.3\",\n \"kind\": \"imperative\",\n \"text\": \"Preserve it even after acceptance.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.3\",\n \"kind\": \"imperative\",\n \"text\": \"Rejected suggestions must not repeatedly resurface: suppress identical `(client,domain,key,canonical value digest)` proposals for 90 days unless the person explicitly reopens the suggestion or supplies a new declaration.\",\n \"checks\": [\"CONTRIB-02\"]\n },\n {\n \"file\": \"core/a14-contributions.md\",\n \"section\": \"A14.5\",\n \"kind\": \"imperative\",\n \"text\": \"Distinguish user-supplied preferences, activity, observations and inference.\",\n \"checks\": [\"CONTRIB-02\", \"INFER-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15\",\n \"kind\": \"imperative\",\n \"text\": \"Treat record contents and contributor text as untrusted data.\",\n \"reason\": \"Whether text is handled as data inside a recipient's model or a provider's templates is not observable through the protocol, so no suite can test it; it is an implementation and threat-model obligation.\"\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.1\",\n \"kind\": \"imperative\",\n \"text\": \"Enforce issuer, exact audience, client binding, expiry, the DPoP proof, grant revision, domain/key/level constraints, purpose, temporal validity and limits.\",\n \"checks\": [\"CORE-01\", \"TRANSPORT-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.1\",\n \"kind\": \"imperative\",\n \"text\": \"Recheck inside the transaction.\",\n \"checks\": [\"CORE-01\", \"LOG-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.1\",\n \"kind\": \"imperative\",\n \"text\": \"Deny missing, unknown or incompatible state.\",\n \"checks\": [\"CORE-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.1\",\n \"kind\": \"imperative\",\n \"text\": \"Use client-bound handles and entry aliases.\",\n \"checks\": [\"PAIR-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.1\",\n \"kind\": \"keyword\",\n \"keywords\": [\"SHOULD\"],\n \"text\": \"Providers SHOULD refuse a wildcard L0 grant to a client already holding L2 or higher in any domain, and explain its actual grant selection to the person.\",\n \"checks\": [\"WILDCARD-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.2\",\n \"kind\": \"lowercase\",\n \"text\": \"Reserved future host-binding formats must define their own signed object before use.\",\n \"reason\": \"Addressed to future specifications of reserved formats, not to a version 1 implementation; there is no version 1 behaviour to test.\"\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"imperative\",\n \"text\": \"Use maintained cryptographic libraries and secure platform primitives.\",\n \"reason\": \"Implementation practice: which library produced a correct result is not observable through the protocol, so no suite can test it. SIGN-01 and ENCRYPT-01 test the outcomes.\"\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"lowercase\",\n \"text\": \"Private keys and encrypted record contents must be isolated from operational support access.\",\n \"reason\": \"Isolation from operational support access is a property of the deployment, not of any protocol exchange. Organisational: covered by implementation review and the security assessment, not by a conformance suite.\"\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"imperative\",\n \"text\": \"Rate-limit by client, grant and unauthenticated origin.\",\n \"checks\": [\"TRANSPORT-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"imperative\",\n \"text\": \"Bound nested JSON, body size, dependency depth, exports, cryptographic work and retries.\",\n \"checks\": [\"TRANSPORT-01\", \"TEMP-03\", \"PORT-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"imperative\",\n \"text\": \"Fetch client-supplied URLs only through SSRF-safe retrieval, checking resolved addresses and redirects and blocking private/link-local destinations unless an explicitly isolated local mode is configured.\",\n \"checks\": [\"FETCH-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"imperative\",\n \"text\": \"Keep values, renderings, utterances, evidence, uploads, credentials and tokens out of operational logs, traces, metrics, emails and job payloads.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"imperative\",\n \"text\": \"Protect first-party changes with authenticated sessions, CSRF controls, fresh re-authentication for sensitive actions and visible audit history.\",\n \"reason\": \"First-party session controls sit outside the recipient interoperability surface (A1.2, A8), so a conformance suite cannot reach them. Organisational: covered by implementation review and the security assessment.\"\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"imperative\",\n \"text\": \"Never expose a route that decrypts arbitrary records for operators.\",\n \"reason\": \"Operator interfaces are outside the protocol surface, so a conformance suite cannot exercise them. Organisational: covered by implementation review and the security assessment.\"\n },\n {\n \"file\": \"core/a15-security.md\",\n \"section\": \"A15.3\",\n \"kind\": \"lowercase\",\n \"text\": \"A plausible-looking “duress record” is not a security guarantee and must not be claimed from this draft.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.1\",\n \"kind\": \"lowercase\",\n \"text\": \"UK applicability must be evaluated separately using current legislation and ICO consent guidance; it is not assumed identical to EU rules.\",\n \"reason\": \"In A16.1, which the text marks informative; the deployment requirement it points to is A16.2, checked by PRIVACY-01.\"\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Before collecting, storing, accepting a contribution, deriving or disclosing personal data, each deploying provider and recipient MUST document the applicable jurisdictions, its actual legal roles, purposes, data categories and lawful conditions for those operations.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The assessment MUST consider the people served, establishment, targeting, sector and actual processing, rather than relying solely on nationality, IP address or hosting location.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Where a required condition is absent or unresolved, the affected operation MUST remain disabled.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The assessment MUST distinguish independent, joint and processor relationships where applicable, including account administration, security logs, hosting and recipient use.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Required notices, agreements and evidence of the selected lawful conditions MUST be in place before the relevant processing.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Where consent is relied on, the implementation MUST retain proportionate evidence of the actual notice and version, language, purposes, parties, categories, affirmative action, time and withdrawal route.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"It MUST satisfy any applicable explicit, separate, written or representative-consent formality and permit refusal and withdrawal without prohibited detriment.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Withdrawal MUST be as easy as giving consent where the law requires it.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Grant acceptance MUST NOT waive statutory rights or authorise a purpose that the protocol prohibits.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Required indirect-collection notices MUST be handled at the legally required time.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.2\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\", \"MUST NOT\"],\n \"text\": \"Compliance records MUST remain protected and MUST NOT expand discovery or disclose additional personal data to recipients.\",\n \"checks\": [\"PRIVACY-01\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The provider and recipient MUST assess legal sensitivity for the actual data, source, inference and combination in each applicable jurisdiction.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Implementations MUST NOT relabel data, lower its disclosure level or describe it as a preference to evade a legal restriction.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Collection, storage and disclosure MUST be limited to the purpose and necessity permitted by applicable law.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Operations governed by a grant MUST also remain within that grant’s purpose and authority.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Where processing requires a special condition, that condition MUST be established before the affected data is accepted or used.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Consent MUST NOT be treated as overriding a statutory prohibition or strict necessity requirement.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Unsupported categories and uses MUST remain disabled for the affected deployment.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Model training, advertising, enrichment and other further uses MUST NOT be inferred from permission to read, contribute or host a record.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.3\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Any further use MUST satisfy its own applicable legal conditions and the protocol's purpose and authority limits; fresh consent cannot override a protocol prohibition.\",\n \"checks\": [\"PRIVACY-02\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Before an international flow begins, the deploying parties MUST document its source, destination, parties, purposes and data categories, including hosting, backups, remote access, subprocessors and onward disclosure.\",\n \"checks\": [\"PRIVACY-03\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"They MUST establish any required transfer mechanism, assessment, contract, notice, separate permission, filing, representation or localisation arrangement for that flow.\",\n \"checks\": [\"PRIVACY-03\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The assessment MUST record which flows an instrument covers, applicable conditions and a review point.\",\n \"checks\": [\"PRIVACY-03\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"A material change of destination, recipient, access arrangement or legal protection MUST trigger reassessment before the changed flow proceeds.\",\n \"checks\": [\"PRIVACY-03\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.4\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"A flow whose required safeguards are no longer satisfied MUST be suspended without silently selecting a different destination.\",\n \"checks\": [\"PRIVACY-03\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Each deploying party MUST provide an accessible route for applicable access, correction, deletion, restriction, objection and portability requests, authorised representatives, complaints and appeals.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Identity verification MUST be proportionate.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"It MUST NOT require a new account where applicable law prohibits doing so.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The party MUST track the applicable deadline, any permitted extension, outcome, reasons and challenge route.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A protocol export or read log alone MUST NOT be represented as a complete statutory response.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Correction MUST stop superseded information from being presented as current and communicate corrections or restrictions to recipients where required.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Disputed or restricted data MUST be prevented from entering uses that the restriction prohibits.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Retention rules MUST cover entries, history, contributions, receipts, logs, caches, exports and backups.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Grant expiry and revocation MUST NOT be treated as deletion.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Append-only audit design MUST NOT imply indefinite personal-data retention.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Implementations MUST use bounded history and proportionate evidence, with a tested deletion or effective cryptographic-erasure process where appropriate.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Restoring a backup MUST reapply deletions and restrictions before restored data becomes available for processing.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Revocation, consent withdrawal, restriction and erasure MUST be handled as distinct actions with their actual effects explained.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"A recipient's purge acknowledgement MUST be described as its assertion, not proof that every copy has disappeared.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Missing acknowledgements and incomplete deletion MUST have a tracked follow-up process.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Any retained data under a legal exception or hold MUST have a specific documented ground, restricted access and use, a review or end condition, and any legally required explanation and challenge route.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.5\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Such retention MUST NOT be reported as erasure or become an implicit new grant.\",\n \"checks\": [\"PRIVACY-04\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Before enabling that optional capability, the deploying parties MUST assess whether the arrangement constitutes regulated sale, sharing, targeted advertising or another restricted use, including non-monetary consideration.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The capability MUST remain disabled wherever a required condition cannot be met.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Implementations MUST honour applicable objections, opt-outs and recognised preference signals, including signals received after a grant was issued, before the next affected disclosure or use.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A grant MUST NOT silently override a valid opt-out.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Any legally permitted later opt-in MUST be handled through the required informed process.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Version 1 defines no universal transport for these signals; an implementation without a reliable way to receive and enforce applicable choices MUST keep the affected advertising use disabled.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"A deployment directed to children, or otherwise within applicable child-protection duties, MUST establish the required age, capacity, representative authority and child-specific safeguards through a separately specified and verified process before enabling affected processing.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Until that process exists, the deployment MUST restrict its supported audience and affected functions accordingly, using proportionate measures.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.6\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"It MUST NOT claim that a generic checkbox establishes parental authority.\",\n \"checks\": [\"PRIVACY-05\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Each deploying party MUST establish the impact assessments, security measures, contracts, records, registrations, permits, licences, prior authorisations, officers and representatives required for its actual activity.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Where an approval is required before processing or a transfer, the party MUST establish that it has been granted and covers the intended activity, rather than treating an application or personal consent as approval.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"It MUST track conditions, expiry and renewal, and stop the affected operation when required permission is absent or expires.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"It MUST maintain and exercise an incident process with jurisdiction-specific triggers, reporting routes and deadlines.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\", \"MUST NOT\"],\n \"text\": \"Unauthorised disclosures, including misuse by an authorised recipient, MUST be assessed; incident handling MUST NOT assume that every law uses the same threshold or a 72-hour deadline.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"A recipient using data for a decision subject to explanation, objection, review or human-intervention rights MUST provide the applicable process and information.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Parties MUST assess any activity-specific regime, including data intermediation, registered consent-management services and sector health or financial rules, before claiming that status.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.7\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A technical provider, consent screen or registry entry MUST NOT be described as a legally registered or certified service without the required legal conditions, registration and any structural safeguards.\",\n \"checks\": [\"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.8\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"A deployment claiming conformance MUST hold evidence for PRIVACY-01 to PRIVACY-06 identifying the tested build, jurisdictions, supported uses and categories, assessment date, responsible reviewer, restrictions, operational procedures and observed results.\",\n \"checks\": [\n \"PRIVACY-01\",\n \"PRIVACY-02\",\n \"PRIVACY-03\",\n \"PRIVACY-04\",\n \"PRIVACY-05\",\n \"PRIVACY-06\"\n ]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.8\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Evidence MUST include representative exercises of the relevant consent, rights, transfer, retention, opt-out and incident processes.\",\n \"checks\": [\n \"PRIVACY-01\",\n \"PRIVACY-02\",\n \"PRIVACY-03\",\n \"PRIVACY-04\",\n \"PRIVACY-05\",\n \"PRIVACY-06\"\n ]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.8\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The deployment MUST reassess material changes in law, purpose, audience, data or flows.\",\n \"checks\": [\n \"PRIVACY-01\",\n \"PRIVACY-02\",\n \"PRIVACY-03\",\n \"PRIVACY-04\",\n \"PRIVACY-05\",\n \"PRIVACY-06\"\n ]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.8\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Public claims MUST state their scope and limitations without publishing personal data, privileged advice or confidential security details.\",\n \"checks\": [\"CLAIM-01\", \"PRIVACY-06\"]\n },\n {\n \"file\": \"core/a16-privacy-mapping.md\",\n \"section\": \"A16.8\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A checklist, pending test or published contract MUST NOT be presented as an operating safeguard.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.2\",\n \"kind\": \"imperative\",\n \"text\": \"Use capability-claim.json: role, wire/document version, capabilities, exact domain/key categories, directions, limitations, evidence URLs/timestamps and `assurance:self-declared`.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.2\",\n \"kind\": \"lowercase\",\n \"text\": \"Directions must match actual behaviour and the declared capabilities.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.2\",\n \"kind\": \"lowercase\",\n \"text\": \"Full runtime checks in the manifest remain pending and must pass before a conforming implementation is claimed.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.2\",\n \"kind\": \"lowercase\",\n \"text\": \"Failure reports must identify check ID, expected behaviour and observed behaviour without exposing personal values.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.6\",\n \"kind\": \"lowercase\",\n \"text\": \"A provider must not turn self-declaration into a verified/certified badge or trusted client class.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.6\",\n \"kind\": \"lowercase\",\n \"text\": \"An implementation offering a separate experimental emergency card must clearly distinguish it from v1 conformance.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.6\",\n \"kind\": \"lowercase\",\n \"text\": \"Offline scans cannot reliably be logged or remotely revoked, and the person must be told before creating one.\",\n \"reason\": \"Applies only to an experimental emergency card, which is outside version 1 conformance (A17.6), so no version 1 suite exercises it.\"\n },\n {\n \"file\": \"core/a17-conformance-and-change.md\",\n \"section\": \"A17.6\",\n \"kind\": \"imperative\",\n \"text\": \"Never label an offline disclosure as a logged Autonym read or make an emergency-care reliability claim from this protocol.\",\n \"checks\": [\"CLAIM-01\"]\n },\n {\n \"file\": \"core/identifiers.md\",\n \"section\": \"identifiers\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The generated schema accepts any supported type; callers MUST use `idSchemaFor(prefix)` at a boundary that expects one particular type.\",\n \"reason\": \"Binds callers of the reference library, which this implementation note says adds no requirement for other implementations. Enforced by review of the reference code; a conformance suite cannot observe which validator a caller used.\"\n },\n {\n \"file\": \"core/identifiers.md\",\n \"section\": \"identifiers\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The wire representation MUST use the exact lower-case prefix and underscore followed by 26 upper-case Crockford Base32 characters.\",\n \"checks\": [\"ID-01\"]\n },\n {\n \"file\": \"core/identifiers.md\",\n \"section\": \"identifiers\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"The first ULID character MUST be 0-7; the remaining alphabet excludes I, L, O and U.\",\n \"checks\": [\"ID-01\"]\n },\n {\n \"file\": \"core/identifiers.md\",\n \"section\": \"identifiers\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A service supplies its Clock reading as whole milliseconds, with any finer digits dropped rather than rounded (`epochMilliseconds(clock.now())`); the helper MUST NOT use ambient time, Math.random or a custom PRNG.\",\n \"checks\": [\"ID-02\", \"ID-05\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"Scopes from a token MUST NOT replace the stored grant as authority (A6.2; read-path verification remains pending).\",\n \"reason\": \"Restates the A6.2 rule that the stored grant, not token scope, is authoritative, which CORE-01 checks; the scope parser this page describes cannot test authority.\"\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Complete sets MUST pass the semantic checks below.\",\n \"checks\": [\"SCOPE-03\", \"SCOPE-04\", \"SCOPE-05\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Both MUST reject unknown tokens, trailing content, invalid case and malformed boundaries with `invalid_scope`.\",\n \"checks\": [\"SCOPE-02\", \"SCOPE-06\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Exactly one purpose token MUST occur before deduplication.\",\n \"checks\": [\"SCOPE-03\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"`*` MUST appear only on L0 read scopes.\",\n \"checks\": [\"SCOPE-04\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Read duplicates for the same exact domain and the same declared-only mode MUST collapse to their highest level at the first occurrence's position.\",\n \"checks\": [\"SCOPE-05\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"Mixed unrestricted and `:declared` reads for the same domain MUST be rejected in this implementation.\",\n \"checks\": [\"SCOPE-05\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\", \"MUST NOT\"],\n \"text\": \"The parser MUST preserve that distinction and MUST NOT add read, proposal or persistence capabilities from a purpose alone.\",\n \"checks\": [\"SCOPE-10\"]\n },\n {\n \"file\": \"core/scopes.md\",\n \"section\": \"scopes\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"A combined advertising and personalisation set MUST be rejected by the one-purpose rule; separate consent requires separate grants.\",\n \"checks\": [\"SCOPE-10\", \"SCOPE-03\"]\n },\n {\n \"file\": \"vocabulary/README.md\",\n \"section\": \"vocabulary\",\n \"kind\": \"lowercase\",\n \"text\": \"Import must report unsupported values before committing.\",\n \"checks\": [\"PORT-01\"]\n },\n {\n \"file\": \"vocabulary/README.md\",\n \"section\": \"vocabulary\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST NOT\"],\n \"text\": \"A provider MUST NOT widen an existing grant merely because its vocabulary catalogue gains keys.\",\n \"checks\": [\"VOCAB-1.1-01\", \"VOCAB-1.1-03\"]\n },\n {\n \"file\": \"vocabulary/README.md\",\n \"section\": \"vocabulary\",\n \"kind\": \"keyword\",\n \"keywords\": [\"MUST\"],\n \"text\": \"It MUST retain the vocabulary version approved for that grant and the version supported by the recipient, and expose only their supported, authorised intersection.\",\n \"checks\": [\"VOCAB-1.1-03\", \"VOCAB-1.1-07\", \"VOCAB-1.1-09\"]\n },\n {\n \"file\": \"vocabulary/README.md\",\n \"section\": \"vocabulary\",\n \"kind\": \"lowercase\",\n \"text\": \"Grant approval and recipient support for 1.1 must both be established before returning a new key.\",\n \"checks\": [\"VOCAB-1.1-03\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.3\",\n \"kind\": \"declarative\",\n \"text\": \"The signature binds provider (the issuer URL discovery publishes, A3.3), protected-resource audience, client, handle, grant ID/revision, purpose, read ID, issue time and absolute `valid_until`.\",\n \"checks\": [\"SIGN-01\", \"CORE-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"The protected header has exactly three members: `alg:ES256`, `kid` and `typ`, which is `autonym-disclosure+jws` for a disclosure and the value the signing section names for any other object.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Receipts (A9), purge acknowledgements (A10) and exports (A11) are signed the same way.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Each signed object has one signed time: `issued_at` for a disclosure, `at` for a receipt or purge acknowledgement, `exported_at` for an export, and `iat` for the purge instruction token (A10).\",\n \"checks\": [\"SIGN-01\", \"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A `kid` is the RFC 7638 JWK thumbprint of the public key: SHA-256 over its required members `crv`, `kty`, `x` and `y`, in canonical unpadded base64url: 43 characters, the last of which carries two unused bits that are zero.\",\n \"checks\": [\"KEY-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A key ID therefore names exactly one key and cannot be reused for a different key.\",\n \"checks\": [\"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A provider publishes its verification keys at the discovery `jwks_uri` as an RFC 7517 JWK set following key-set.json.\",\n \"checks\": [\"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Each key has `kty:EC`, `crv:P-256`, `x` and `y` (each 32 bytes in canonical unpadded base64url, so one key has one key ID), `kid`, `alg:ES256` and `use:sig`, and no private member.\",\n \"checks\": [\"KEY-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A retired key also has `exp`, the JWK parameter registered by OpenID Federation 1.0 section 8.7.2: a whole number of seconds since 1970-01-01T00:00:00Z, the first instant at which the key signs nothing.\",\n \"checks\": [\"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"It stays in the set, with the same `exp`, so that what it signed earlier still verifies (A9).\",\n \"checks\": [\"KEY-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"No other key lifetime member is used: a key that carries `nbf`, `iat` or `revoked` is not used to verify anything.\",\n \"checks\": [\"KEY-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"The keys a recipient registers to sign purge acknowledgements follow the same rules.\",\n \"checks\": [\"KEY-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Every instant a provider writes into an object it signs or hashes has one spelling: UTC with `Z`, seconds always present, and fractional seconds only when they are not zero, without trailing zeros, for example `2026-10-02T19:00:00Z` or `2026-10-02T19:00:00.25Z`.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Precision is never reduced.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Instants compare by the time they denote; a verifier does not reject an instant for its spelling.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A verifier bounds the size and nesting of what it parses (A15.3), and may refuse a member named `__proto__`, which no object here defines and which common JSON libraries handle inconsistently.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Once an export verifies against the configured key set of the provider it came from, its `public_keys` are the trusted key set, and its `origin_host` the trusted issuer, for the receipts it carries (A11), which is how a receipt signed before a key rotation verifies from the export alone (A9).\",\n \"checks\": [\"SIGN-01\", \"LOG-02\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A carried receipt that names another provider is verified only against that provider's own configured key set, or reported as unverified history.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A trusted issuer is never taken from the object being verified.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"Unencoded-payload mode is not used.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A signature is not an identifier: ECDSA admits more than one valid signature over the same bytes, so signed objects are compared without `proof`.\",\n \"reason\": \"Says why signed objects are compared without `proof`. A suite sees the rule only where an implementation compares signed objects, as when an import meets a receipt it already holds (A11.1, PORT-01); A5 makes no comparison of its own to test.\"\n },\n {\n \"file\": \"core/a05-disclosure.md\",\n \"section\": \"A5.4\",\n \"kind\": \"declarative\",\n \"text\": \"A valid signature alone does not establish current grant authority.\",\n \"checks\": [\"CORE-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"It records the provider, grant, client, purpose, trusted time, surface, canonical request, internal entry/version/level references and response hash.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`provider` is the provider's HTTPS issuer URL as discovery publishes it (A3.3), the same value as the signed disclosure's `provider`; it is part of the signed bytes, and a verifier binds the receipt to that provider's key set through it (A5.4).\",\n \"checks\": [\"SIGN-01\", \"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"The canonical request, the receipt's `request`, is the validated context request with its A5.2 defaults written out.\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`max_level` (L3 when omitted), `declared_only` (false when omitted) and `min_confidence` (0 when omitted) are always present.\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`domains`, and `keys` when the request has them, are in ascending order without repeats.\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`keys` and `since` are present only when the request has them, and `since` uses the canonical instant spelling (A5.4).\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"Requests that differ only in list order, repeated names or omitted defaults therefore have the same canonical request, and its JCS form is what the receipt's `hash` and signature cover.\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"Writing the canonical form is the provider's duty; a verifier checks the signature over the request the receipt carries and does not reject it for its order or spelling.\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"A verifier rejects an object whose signed time is at or after its key's retirement (A5.4, KEY-01).\",\n \"checks\": [\"KEY-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`response_hash` is `sha256:` plus lower-case hexadecimal SHA-256 of the exact JCS UTF-8 envelope without `proof`, the same bytes signed in A5.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"The receipt's `hash` covers its JCS form excluding `hash` and `proof`, including `prev_hash`.\",\n \"checks\": [\"LOG-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"A receipt signed before a key rotation therefore verifies afterwards from the provider's published keys and the owner's export alone (LOG-02).\",\n \"checks\": [\"LOG-02\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"Retirement is not a response to key compromise: whoever holds a retired private key can still produce an object dated before its retirement.\",\n \"reason\": \"Informative consequence of KEY-01: it says what retirement does not protect against, so there is nothing to test.\"\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`grant_created`: `subject_id` is the new grant's ID, `actor_client_id` the client it is issued to and `details.decision` `approved`.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`grant_revoked`: `subject_id` and `details.ids` name the grant.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"When the person revokes it, `actor_client_id` is null and the decision is `completed`.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"When its client revokes it through the revocation endpoint, with the proof of possession A6.5 asks of a public client, the actor is that client and the decision is `completed`.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"When the provider revokes it because its client used an authorisation code or a spent refresh token a second time (A6.3), the actor is that client and the decision is `failed`.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"When the operator deregisters the client (A6.8), the actor is null, the decision is `disabled` and an `operator_action` is appended in the same transaction.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`grant_expired`: `subject_id` and `details.ids` name the grant, and the actor and the decision are null.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`read_not_modified`: `subject_id` names the grant, `actor_client_id` the reading client and the decision is `unchanged`.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"`operator_action`: `subject_id` is the record partition's ID, the actor is null, and `details.ids` says what the action concerned.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"A verification of the partition's log names the event IDs it reports, with the decision `completed` when the log verified, `failed` when it found a divergence and null when verification could not run.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"An action on a client names the client's grants in the partition that were active when the action began, with the decision `disabled` for a suspension or a deregistration, `enabled` for a resumption and `completed` for a change of class; the `grant_revoked` events a deregistration appends in the same transaction tell it apart from a suspension.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a09-receipts-and-log.md\",\n \"section\": \"A9\",\n \"kind\": \"declarative\",\n \"text\": \"One event names at most 32 IDs (log-event.json), so an action on a client with more grants in the partition appends further `operator_action` events with the same decision, in the same transaction, until every grant is named.\",\n \"checks\": [\"LOG-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"declarative\",\n \"text\": \"The payload follows purge-instruction.json, signed as compact JWT with ES256, protected `typ:autonym-purge+jwt` and, as `kid`, the A5.4 key ID of a key in the provider's trusted key set.\",\n \"checks\": [\"PURGE-01\", \"SIGN-01\", \"KEY-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"declarative\",\n \"text\": \"Its signed time is `iat`, so a recipient rejects a token whose `iat` is at or after that key's `exp` (A5.4).\",\n \"checks\": [\"KEY-01\", \"SIGN-01\", \"PURGE-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"declarative\",\n \"text\": \"Where the recipient has a registered key, it signs the acknowledgement by the A5.4 method: a detached JWS over the UTF-8 RFC 8785 canonical JSON of the complete acknowledgement without `proof`, with protected `alg:ES256`, `typ:autonym-purge-ack+jws` and the registered key's A5.4 key ID as `kid`, carried in `proof`.\",\n \"checks\": [\"PURGE-01\", \"SIGN-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"declarative\",\n \"text\": \"Its signed time is `at`.\",\n \"checks\": [\"SIGN-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"declarative\",\n \"text\": \"The provider verifies it as A5.4 describes, against that recipient's registered keys only.\",\n \"checks\": [\"SIGN-01\", \"PURGE-01\"]\n },\n {\n \"file\": \"core/a10-revocation-and-purge.md\",\n \"section\": \"A10\",\n \"kind\": \"declarative\",\n \"text\": \"Without a registered key, `proof` is null and the provider records the authenticated but unsigned assurance explicitly.\",\n \"checks\": [\"PURGE-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"declarative\",\n \"text\": \"Exported public keys preserve verifiability of historical artefacts, keeping any `exp` (A5.4); they do not become trusted active signing keys at the destination.\",\n \"checks\": [\"PORT-01\", \"SIGN-01\", \"LOG-02\", \"KEY-01\"]\n },\n {\n \"file\": \"core/a11-portability.md\",\n \"section\": \"A11.1\",\n \"kind\": \"declarative\",\n \"text\": \"Once the export verifies, its `public_keys` and `origin_host` are the trusted key set and issuer for the receipts it carries, and a carried receipt naming another provider is verified against that provider's own key set or reported as unverified history (A5.4).\",\n \"checks\": [\"PORT-01\", \"SIGN-01\", \"LOG-02\"]\n },\n {\n \"file\": \"bindings/B4-rest.md\",\n \"section\": \"B4.2\",\n \"kind\": \"declarative\",\n \"text\": \"An ETag is a quoted opaque HMAC under a dedicated provider key of JCS containing the client, grant ID/revision, the A9 canonical request, sorted selected alias/version/level triples, temporal selection epoch and the previous envelope deadline.\",\n \"checks\": [\"TEMP-03\", \"TRANSPORT-01\"]\n }\n ]\n}\n", "conformance/vectors/README.md": "# Test vectors\n\n**Status:** informative. Document version `1.0-draft-1`. Every file in this folder except this page is generated by the reference implementation, and its build fails if any differs from what the code produces. Do not edit them by hand.\n\nThese vectors let an implementation check, offline and without an Autonym account, that it canonicalises, signs and verifies the A5.4 signed objects exactly as the specification requires: disclosures (A5.3), receipts (A9), purge instructions and acknowledgements (A10).\n\n**The keys are synthetic and published with their private parts.** They were generated for these vectors and the [media worked example](../../examples/media/README.md) only, belong to no provider or recipient, and must never be trusted anywhere else. Anyone can sign anything with them, so a signature they verify proves nothing outside these tests.\n\n## Files\n\n| File | What it proves | Checks |\n| ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------- |\n| [`keys.json`](keys.json) | Two provider keys, one retired with `exp`, and one recipient key, each with its private part. `key_sets` gives their public parts as the provider's and the recipient's key sets, the form [key-set.json](../../schemas/key-set.json) defines; the retired key stays in the set with its `exp`. Each `kid` is the RFC 7638 thumbprint | KEY-01 |\n| [`jcs.json`](jcs.json) | RFC 8785 canonical JSON: member names sorted by their 16-bit code units, characters outside ASCII, escapes, integers and the number form, each with the exact canonical text, its UTF-8 in hexadecimal and its SHA-256; and inputs strict parsing refuses, including numbers beyond what binary64 holds | SIGN-01 |\n| [`disclosure.json`](disclosure.json) | Signed disclosures: one signed by the active provider key, one signed by the later-retired key before its `exp`, and the edge of the 60-second clock allowance | SIGN-01, KEY-01 |\n| [`receipt.json`](receipt.json) | A receipt hash chain across a key rotation, each receipt with its `provider`, the canonical request derived from the request as received, the hash of the disclosure it records and its hash input. Both verify a year later from the provider's published key set alone | SIGN-01, LOG-01, LOG-02, KEY-01 |\n| [`purge.json`](purge.json) | The purge instruction token, a compact JWT signed by the provider, and the recipient's signed acknowledgement over its canonical JSON | SIGN-01, PURGE-01 |\n| [`negative.json`](negative.json) | Signed objects a verifier must reject, each breaking one A5.4 rule: tampering, duplicate members, numbers and strings that are not I-JSON, `alg:none` and HS256, unknown and ambiguous key IDs, `crit` and other header members, wrong `typ`, unusable keys, retired keys, expiry, time bounds, issuer binding and receipt hashes | SIGN-01, KEY-01, LOG-01, LOG-02, PURGE-01 |\n\n## Using a vector\n\nA detached-signature vector gives `typ`, the exact received `text` (the object with its `proof`), and `verify`: the key set (a name from `key_sets` in `keys.json`, or an inline key set when the vector needs one that [key-set.json](../../schemas/key-set.json) refuses), the trusted issuer and the verifier's clock reading `now`. Verify `text` as A5.4 describes and compare the outcome with `expected`: either `valid: true` with the `kid` and the signed time, or `valid: false` with a `reason`.\n\nA positive vector also shows each step: the object without `proof` (`unsigned`), its canonical text (`jcs`) and that text's SHA-256, the `protected_header` and the detached `jws`. A receipt vector adds its hash input and chain link, its request as received with its canonical form, and the disclosure whose hash it records.\n\nThe purge instruction token is stored as its three parts in the RFC 7515 flattened JSON form; a recipient receives `protected.payload.signature`. Verify it at its `iat` with the provider's key set: the header has exactly `alg`, `kid` and `typ:autonym-purge+jwt`, and the payload is `claims`.\n\nThe reasons in `negative.json` and `jcs.json` are labels for the rule each vector breaks. An implementation need not use them; it must reject every negative vector.\n\n| Reason | A5.4 rule |\n| -------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |\n| `duplicate_member`, `not_i_json`, `malformed_json` | Parse strictly before canonicalisation: repeated member names, in the object or its protected header; text that is not I-JSON; text that is not JSON |\n| `malformed_proof` | The `proof` member and the detached JWS: unpadded base64url in its one canonical spelling |\n| `critical_header`, `header` | No protected header member other than `alg`, `kid` and `typ`; `crit` named separately |\n| `algorithm` | Only ES256 |\n| `type` | `typ` compared exactly |\n| `header_mismatch` | Proof metadata agrees with the protected header |\n| `unknown_key`, `key_id` | Exactly one trusted key has the header's `kid`, and the `kid` is its key's thumbprint |\n| `key` | The matching key follows key-set.json: no private member, no `key_ops`, no lifetime member other than `exp`, canonical spellings |\n| `signature` | The ES256 signature over the canonical bytes; RFC 7518 section 3.4 makes it exactly 64 bytes |\n| `retired` | The signed time is before the key's `exp` |\n| `issuer` | The object's `provider` is the trusted issuer |\n| `hash` | A receipt's `hash` is the A9 hash of its content |\n| `time_bounds`, `not_yet_valid`, `expired` | A disclosure's deadline, issue time and expiry |\n\nA verifier may also refuse a member named `__proto__`; no vector depends on whether it does.\n\n## What is not covered\n\nThe vectors cover canonical JSON and the signed objects listed above. They do not cover the signed export (A11.1), whose receipts are represented here only by the carried receipt in `negative.json`, the optional encrypted export (A11.2), purge-token rejections, or anything a provider must do at run time, such as checking current grant authority.\n\n## Stability\n\nThe files change only deliberately. Regenerating them reproduces the same bytes: the keys are kept, and because ES256 signatures are randomised, each signature is kept while it still verifies over its object, so only a change to a signed object signs it afresh. The reference implementation's tests pin each file's SHA-256, so a vector changes only by a deliberate edit. An implementation identifies the bytes it tested against by their digests in the edition [manifest](../../manifest.json), and any change to a vector is recorded in the change history.\n\nThe reference implementation verifies every vector with its own verifier and, independently, with Python's `jwcrypto` and `rfc8785` packages, reading only these files.\n", "conformance/vectors/disclosure.json": "{\n \"description\": \"Signed disclosures (A5.3, A5.4). Verify text against the named key set from keys.json, the trusted issuer and the clock reading in verify; the result must be expected.\",\n \"vectors\": [\n {\n \"id\": \"disclosure-retired-key-before-exp\",\n \"description\": \"An L2 disclosure signed by the provider key that was later retired, before its exp. It verifies with the key set that still publishes that key with its exp. It carries a value outside ASCII and a number that is not an integer.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-21T09:01:00Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"signed_at\": \"2026-09-21T09:00:00Z\"\n },\n \"unsigned\": {\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"handle\": \"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\",\n \"grant_id\": \"gr_01JVECT0RS00000000000000G1\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JVECT0RS00000000000000R1\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-09-21T09:00:00Z\",\n \"valid_until\": \"2026-09-21T09:05:00Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": \"2026-09-28T09:00:00Z\",\n \"entries\": [\n {\n \"id\": \"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"level\": \"L2\",\n \"value_type\": \"enum\",\n \"value\": \"brief\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 2,\n \"domain\": \"home\",\n \"key\": \"temperature_preference\",\n \"level\": \"L2\",\n \"value_type\": \"number\",\n \"value\": 20.5,\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"identity\",\n \"key\": \"display_name\",\n \"level\": \"L2\",\n \"value_type\": \"structured\",\n \"value\": {\n \"first\": \"Zoë\"\n },\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ]\n },\n \"jcs\": \"{\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"autonym_version\\\":\\\"1.0\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"entries\\\":[{\\\"context_kind\\\":\\\"preference\\\",\\\"domain\\\":\\\"agent\\\",\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":\\\"brief\\\",\\\"value_type\\\":\\\"enum\\\",\\\"version\\\":1},{\\\"context_kind\\\":\\\"preference\\\",\\\"domain\\\":\\\"home\\\",\\\"id\\\":\\\"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"temperature_preference\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":20.5,\\\"value_type\\\":\\\"number\\\",\\\"version\\\":2},{\\\"context_kind\\\":\\\"fact\\\",\\\"domain\\\":\\\"identity\\\",\\\"id\\\":\\\"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"display_name\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":{\\\"first\\\":\\\"Zoë\\\"},\\\"value_type\\\":\\\"structured\\\",\\\"version\\\":1}],\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"issued_at\\\":\\\"2026-09-21T09:00:00Z\\\",\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R1\\\",\\\"ttl_seconds\\\":300,\\\"valid_until\\\":\\\"2026-09-21T09:05:00Z\\\"}\",\n \"jcs_sha256\": \"4c547ec781b79e6bbd28fa184dfa25513cf192fb813070cf64e23fab9d379b3b\",\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"typ\": \"autonym-disclosure+jws\"\n },\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..rxl8bx3hckfIyzIJ4daIgDCmmQXjz1F386H4-zPN_ii_FqYV3plrpA6O4QU9eXINRHw3GcB5O7BxhWKdwktzdw\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R1\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-21T09:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-21T09:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"brief\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"home\\\",\\\"key\\\":\\\"temperature_preference\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"number\\\",\\\"value\\\":20.5,\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"identity\\\",\\\"key\\\":\\\"display_name\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"structured\\\",\\\"value\\\":{\\\"first\\\":\\\"Zoë\\\"},\\\"context_kind\\\":\\\"fact\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..rxl8bx3hckfIyzIJ4daIgDCmmQXjz1F386H4-zPN_ii_FqYV3plrpA6O4QU9eXINRHw3GcB5O7BxhWKdwktzdw\\\"}}\"\n },\n {\n \"id\": \"disclosure-retired-key-just-before-exp\",\n \"description\": \"A disclosure signed by the later-retired key a millisecond before its exp. It verifies: signed times are compared exactly, so a verifier that rounds them up to the second would wrongly refuse it.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-21T12:00:59.999Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"signed_at\": \"2026-09-21T11:59:59.999Z\"\n },\n \"unsigned\": {\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"handle\": \"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\",\n \"grant_id\": \"gr_01JVECT0RS00000000000000G1\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JVECT0RS00000000000000R5\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-09-21T11:59:59.999Z\",\n \"valid_until\": \"2026-09-21T12:04:59.999Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": \"2026-09-28T09:00:00Z\",\n \"entries\": [\n {\n \"id\": \"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"level\": \"L2\",\n \"value_type\": \"enum\",\n \"value\": \"brief\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 2,\n \"domain\": \"home\",\n \"key\": \"temperature_preference\",\n \"level\": \"L2\",\n \"value_type\": \"number\",\n \"value\": 20.5,\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"identity\",\n \"key\": \"display_name\",\n \"level\": \"L2\",\n \"value_type\": \"structured\",\n \"value\": {\n \"first\": \"Zoë\"\n },\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ]\n },\n \"jcs\": \"{\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"autonym_version\\\":\\\"1.0\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"entries\\\":[{\\\"context_kind\\\":\\\"preference\\\",\\\"domain\\\":\\\"agent\\\",\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":\\\"brief\\\",\\\"value_type\\\":\\\"enum\\\",\\\"version\\\":1},{\\\"context_kind\\\":\\\"preference\\\",\\\"domain\\\":\\\"home\\\",\\\"id\\\":\\\"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"temperature_preference\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":20.5,\\\"value_type\\\":\\\"number\\\",\\\"version\\\":2},{\\\"context_kind\\\":\\\"fact\\\",\\\"domain\\\":\\\"identity\\\",\\\"id\\\":\\\"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"display_name\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":{\\\"first\\\":\\\"Zoë\\\"},\\\"value_type\\\":\\\"structured\\\",\\\"version\\\":1}],\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"issued_at\\\":\\\"2026-09-21T11:59:59.999Z\\\",\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R5\\\",\\\"ttl_seconds\\\":300,\\\"valid_until\\\":\\\"2026-09-21T12:04:59.999Z\\\"}\",\n \"jcs_sha256\": \"2ccdf51b9dae60563482eca935bb54783921854a86ec5aa94c1cf5806016b7f0\",\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"typ\": \"autonym-disclosure+jws\"\n },\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..aVR_SrC6Omw-X2jp1EHZD8K-YYqQC_ab8H0A_75NdTJu_AvbvAn7EuP1fHSlHAkQvjCFRvqilLu_47ooHJBPow\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R5\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-21T11:59:59.999Z\\\",\\\"valid_until\\\":\\\"2026-09-21T12:04:59.999Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"brief\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"home\\\",\\\"key\\\":\\\"temperature_preference\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"number\\\",\\\"value\\\":20.5,\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"identity\\\",\\\"key\\\":\\\"display_name\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"structured\\\",\\\"value\\\":{\\\"first\\\":\\\"Zoë\\\"},\\\"context_kind\\\":\\\"fact\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..aVR_SrC6Omw-X2jp1EHZD8K-YYqQC_ab8H0A_75NdTJu_AvbvAn7EuP1fHSlHAkQvjCFRvqilLu_47ooHJBPow\\\"}}\"\n },\n {\n \"id\": \"disclosure-active-key\",\n \"description\": \"A disclosure signed by the active provider key, verified one minute after it was issued.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"signed_at\": \"2026-09-22T10:00:00Z\"\n },\n \"unsigned\": {\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"handle\": \"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\",\n \"grant_id\": \"gr_01JVECT0RS00000000000000G1\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JVECT0RS00000000000000R2\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-09-22T10:00:00Z\",\n \"valid_until\": \"2026-09-22T10:05:00Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": \"2026-09-28T09:00:00Z\",\n \"entries\": [\n {\n \"id\": \"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 2,\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"level\": \"L2\",\n \"value_type\": \"enum\",\n \"value\": \"detailed\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ]\n },\n \"jcs\": \"{\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"autonym_version\\\":\\\"1.0\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"entries\\\":[{\\\"context_kind\\\":\\\"preference\\\",\\\"domain\\\":\\\"agent\\\",\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":\\\"detailed\\\",\\\"value_type\\\":\\\"enum\\\",\\\"version\\\":2}],\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"ttl_seconds\\\":300,\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\"}\",\n \"jcs_sha256\": \"e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\",\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"typ\": \"autonym-disclosure+jws\"\n },\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"disclosure-clock-allowance\",\n \"description\": \"The same disclosure verified by a clock 60 seconds behind its issued_at: within the allowance A5.4 gives the verifier's clock.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T09:59:00Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"signed_at\": \"2026-09-22T10:00:00Z\"\n },\n \"unsigned\": {\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"handle\": \"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\",\n \"grant_id\": \"gr_01JVECT0RS00000000000000G1\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JVECT0RS00000000000000R2\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-09-22T10:00:00Z\",\n \"valid_until\": \"2026-09-22T10:05:00Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": \"2026-09-28T09:00:00Z\",\n \"entries\": [\n {\n \"id\": \"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 2,\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"level\": \"L2\",\n \"value_type\": \"enum\",\n \"value\": \"detailed\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ]\n },\n \"jcs\": \"{\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"autonym_version\\\":\\\"1.0\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"entries\\\":[{\\\"context_kind\\\":\\\"preference\\\",\\\"domain\\\":\\\"agent\\\",\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"provenance\\\":{\\\"confirmed\\\":true,\\\"kind\\\":\\\"declared\\\"},\\\"safety_critical\\\":false,\\\"stale\\\":false,\\\"value\\\":\\\"detailed\\\",\\\"value_type\\\":\\\"enum\\\",\\\"version\\\":2}],\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"ttl_seconds\\\":300,\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\"}\",\n \"jcs_sha256\": \"e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\",\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"typ\": \"autonym-disclosure+jws\"\n },\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n }\n ]\n}\n", "conformance/vectors/jcs.json": "{\n \"description\": \"RFC 8785 canonical JSON as A5.4 uses it: each accepted input with its exact canonical text, that text as UTF-8 in hexadecimal and its SHA-256; each refused input with the strict-parsing rule it breaks.\",\n \"vectors\": [\n {\n \"id\": \"member-order\",\n \"description\": \"Members are sorted at every depth; array order is kept.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"b\\\":true,\\\"a\\\":[3,1,2],\\\"c\\\":{\\\"z\\\":null,\\\"y\\\":\\\"y\\\"}}\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"{\\\"a\\\":[3,1,2],\\\"b\\\":true,\\\"c\\\":{\\\"y\\\":\\\"y\\\",\\\"z\\\":null}}\",\n \"canonical_utf8_hex\": \"7b2261223a5b332c312c325d2c2262223a747275652c2263223a7b2279223a2279222c227a223a6e756c6c7d7d\",\n \"sha256\": \"64e775f68caa6efb960ac2b0a24a3fb0b31496b60c8502242ddf54aa3e493780\"\n }\n },\n {\n \"id\": \"member-order-utf16\",\n \"description\": \"Member names sort by their UTF-16 code units, not by code points: U+1F600 (a surrogate pair starting D83D) sorts before U+FB33. The empty name sorts first. Characters outside ASCII are written as UTF-8, not escaped.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"\\\\u20ac\\\":1,\\\"\\\\ud83d\\\\ude00\\\":2,\\\"\\\\ufb33\\\":3,\\\"\\\\u0080\\\":4,\\\"a\\\":5,\\\"A\\\":6,\\\"1\\\":7,\\\"\\\":8}\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"{\\\"\\\":8,\\\"1\\\":7,\\\"A\\\":6,\\\"a\\\":5,\\\"€\\\":4,\\\"€\\\":1,\\\"😀\\\":2,\\\"דּ\\\":3}\",\n \"canonical_utf8_hex\": \"7b22223a382c2231223a372c2241223a362c2261223a352c22c280223a342c22e282ac223a312c22f09f9880223a322c22efacb3223a337d\",\n \"sha256\": \"8c6f18170a76d7a7c03e275b89ae8dba7f7b5d522c708a1191dfef50b70a9f74\"\n }\n },\n {\n \"id\": \"unicode-unescaped\",\n \"description\": \"Escaped characters outside ASCII are written as UTF-8 in the canonical form.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"text\\\":\\\"Zo\\\\u00eb \\\\u4e2d\\\\u6587 \\\\ud83d\\\\ude00\\\"}\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"{\\\"text\\\":\\\"Zoë 中文 😀\\\"}\",\n \"canonical_utf8_hex\": \"7b2274657874223a225a6fc3ab20e4b8ade6968720f09f9880227d\",\n \"sha256\": \"f5179a395a1f560afd67f419c311618fd2c416ddcf8953ae718b03628fccfc20\"\n }\n },\n {\n \"id\": \"no-normalisation\",\n \"description\": \"Strings are not Unicode-normalised: a precomposed and a decomposed letter stay different.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"text\\\":\\\"\\\\u00e9\\\",\\\"decomposed\\\":\\\"e\\\\u0301\\\"}\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"{\\\"decomposed\\\":\\\"é\\\",\\\"text\\\":\\\"é\\\"}\",\n \"canonical_utf8_hex\": \"7b226465636f6d706f736564223a2265cc81222c2274657874223a22c3a9227d\",\n \"sha256\": \"a88ffebf5ca0841eb1f4466f9be2fcb5293379cbd7b1b028527363384d20f77d\"\n }\n },\n {\n \"id\": \"escapes\",\n \"description\": \"Control characters are escaped, with the short forms for backspace, tab, line feed, form feed and carriage return and lower-case hexadecimal otherwise; quotation mark and reverse solidus are escaped; solidus, DEL, U+2028 and U+2029 are not.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"s\\\":\\\"\\\\u0000\\\\u0007\\\\b\\\\t\\\\n\\\\u000B\\\\f\\\\r\\\\u001F\\\\\\\"\\\\\\\\\\\\/\\\\u007f\\\\u2028\\\\u2029\\\"}\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"{\\\"s\\\":\\\"\\\\u0000\\\\u0007\\\\b\\\\t\\\\n\\\\u000b\\\\f\\\\r\\\\u001f\\\\\\\"\\\\\\\\/

\\\"}\",\n \"canonical_utf8_hex\": \"7b2273223a225c75303030305c75303030375c625c745c6e5c75303030625c665c725c75303031665c225c5c2f7fe280a8e280a9227d\",\n \"sha256\": \"6a84b9249016110118198ef8437d853c4be9567f072aea3f2b52d2591d4f64ba\"\n }\n },\n {\n \"id\": \"whitespace\",\n \"description\": \"Insignificant whitespace is removed.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \" {\\n \\\"a\\\" : [ 1 , 2 ] ,\\t\\\"b\\\" : { }\\r\\n} \",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"{\\\"a\\\":[1,2],\\\"b\\\":{}}\",\n \"canonical_utf8_hex\": \"7b2261223a5b312c325d2c2262223a7b7d7d\",\n \"sha256\": \"8c547cce7ccb1b89359479c0b71a0a4b62acfc54a2b2780fd34aaeb75f9e44b7\"\n }\n },\n {\n \"id\": \"literals-and-empty-values\",\n \"description\": \"Literals, empty strings, arrays and objects.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"t\\\":true,\\\"f\\\":false,\\\"n\\\":null,\\\"e\\\":\\\"\\\",\\\"a\\\":[],\\\"o\\\":{}}\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"{\\\"a\\\":[],\\\"e\\\":\\\"\\\",\\\"f\\\":false,\\\"n\\\":null,\\\"o\\\":{},\\\"t\\\":true}\",\n \"canonical_utf8_hex\": \"7b2261223a5b5d2c2265223a22222c2266223a66616c73652c226e223a6e756c6c2c226f223a7b7d2c2274223a747275657d\",\n \"sha256\": \"09d0cf4652ab55492534f86f3cf0d353178b28aa1e0629d16fe83b3e647b98f8\"\n }\n },\n {\n \"id\": \"nested-order\",\n \"description\": \"Objects inside arrays are sorted too.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[{\\\"b\\\":{\\\"d\\\":1,\\\"c\\\":2},\\\"a\\\":[{\\\"f\\\":1,\\\"e\\\":2}]}]\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"[{\\\"a\\\":[{\\\"e\\\":2,\\\"f\\\":1}],\\\"b\\\":{\\\"c\\\":2,\\\"d\\\":1}}]\",\n \"canonical_utf8_hex\": \"5b7b2261223a5b7b2265223a322c2266223a317d5d2c2262223a7b2263223a322c2264223a317d7d5d\",\n \"sha256\": \"03944f82dc3110b938774cc91cdbcb3ca030241d105fb528f0c83519b37ebd05\"\n }\n },\n {\n \"id\": \"integers\",\n \"description\": \"Integers, including negative zero and integers written with a fraction or an exponent, take their shortest form.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[0,-0,1,-1,42,9007199254740991,-9007199254740991,100.0,1e2,1E+2,1.0e2,-0.0]\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"[0,0,1,-1,42,9007199254740991,-9007199254740991,100,100,100,100,0]\",\n \"canonical_utf8_hex\": \"5b302c302c312c2d312c34322c393030373139393235343734303939312c2d393030373139393235343734303939312c3130302c3130302c3130302c3130302c305d\",\n \"sha256\": \"7aca4296cac523b861e8459e2552f0190b0082e3d8c587dae36d28123f63937c\"\n }\n },\n {\n \"id\": \"integer-two-to-the-fifty-third\",\n \"description\": \"Binary64 holds 2^53 exactly, so the A5.4 number rule accepts it, although I-JSON advises against integers this large.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[9007199254740992]\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"[9007199254740992]\",\n \"canonical_utf8_hex\": \"5b393030373139393235343734303939325d\",\n \"sha256\": \"5dc10964d69741c9924433db7b0e8fe5b0ac6fac6a5dd6d142b8c4e05e2162c3\"\n }\n },\n {\n \"id\": \"numbers\",\n \"description\": \"Numbers that are not integers take the ECMAScript shortest round-trip form RFC 8785 requires: exponents from 1e21 upwards and below 1e-6, plain decimals between.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[0.1,1e23,1.5e-7,0.000001,1e-7,1e21,1e20,123456789012345680000,2.5e-3,5e-324,1.7976931348623157e308,-1.5,333333333.3333333,0.30000000000000004]\",\n \"expected\": {\n \"valid\": true,\n \"canonical\": \"[0.1,1e+23,1.5e-7,0.000001,1e-7,1e+21,100000000000000000000,123456789012345680000,0.0025,5e-324,1.7976931348623157e+308,-1.5,333333333.3333333,0.30000000000000004]\",\n \"canonical_utf8_hex\": \"5b302e312c31652b32332c312e35652d372c302e3030303030312c31652d372c31652b32312c3130303030303030303030303030303030303030302c3132333435363738393031323334353638303030302c302e303032352c35652d3332342c312e37393736393331333438363233313537652b3330382c2d312e352c3333333333333333332e333333333333332c302e33303030303030303030303030303030345d\",\n \"sha256\": \"941ede9187fe511f2c5580dab9344191786214abb30572f4f0b83c72d5be5967\"\n }\n },\n {\n \"id\": \"duplicate-member-equal-values\",\n \"description\": \"A repeated member name is refused, even with equal values.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"a\\\":1,\\\"a\\\":1}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"duplicate_member\"\n }\n },\n {\n \"id\": \"duplicate-member-after-escape\",\n \"description\": \"Member names are compared after escapes are decoded: \\\"\\\\u0061\\\" is \\\"a\\\".\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"a\\\":1,\\\"\\\\u0061\\\":2}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"duplicate_member\"\n }\n },\n {\n \"id\": \"duplicate-member-nested\",\n \"description\": \"A repeated member is refused at any depth.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"x\\\":[{\\\"b\\\":1,\\\"b\\\":2}]}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"duplicate_member\"\n }\n },\n {\n \"id\": \"lone-high-surrogate\",\n \"description\": \"A lone surrogate in a string is not I-JSON.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"s\\\":\\\"\\\\ud800\\\"}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"lone-low-surrogate-in-name\",\n \"description\": \"A lone surrogate in a member name is not I-JSON.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"\\\\udc00\\\":1}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"noncharacter-ffff\",\n \"description\": \"A noncharacter is not I-JSON.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"s\\\":\\\"\\\\uffff\\\"}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"noncharacter-fdd0\",\n \"description\": \"U+FDD0 to U+FDEF are noncharacters too.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"s\\\":\\\"\\\\ufdd0\\\"}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"number-magnitude\",\n \"description\": \"A number beyond the magnitude of binary64 is refused, not read as infinity.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[1E400]\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"number-underflow\",\n \"description\": \"A number too small for binary64 is refused, not read as zero.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[1e-400]\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"number-precision\",\n \"description\": \"A number with more precision than binary64 provides is refused (the RFC 7493 example).\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[3.141592653589793238462643383279]\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"number-excess-digits\",\n \"description\": \"The decimal written must equal the shortest decimal of the double it parses to: 0.10000000000000001 parses to the double 0.1, so it is refused while 0.1 is accepted.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[0.10000000000000001]\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"integer-beyond-two-to-the-fifty-third\",\n \"description\": \"2^53 + 1 parses to 2^53, so its written value is lost and it is refused.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[9007199254740993]\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n }\n },\n {\n \"id\": \"unescaped-control-character\",\n \"description\": \"RFC 8259 requires control characters in strings to be escaped; a raw U+0001 is refused.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"{\\\"s\\\":\\\"a\\u0001b\\\"}\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"malformed_json\"\n }\n },\n {\n \"id\": \"nan-literal\",\n \"description\": \"NaN and Infinity are not JSON.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"input\": \"[NaN]\",\n \"expected\": {\n \"valid\": false,\n \"reason\": \"malformed_json\"\n }\n }\n ]\n}\n", "conformance/vectors/keys.json": "{\n \"notice\": \"SYNTHETIC TEST KEYS. Generated for the published test vectors and the media worked example, and published here with their private parts on purpose so that anyone can reproduce and check every signature. They belong to no provider or recipient. Never trust them, or anything they sign, anywhere else.\",\n \"keys\": [\n {\n \"name\": \"provider-retired\",\n \"role\": \"provider\",\n \"retired_at\": \"2026-09-21T12:00:00Z\",\n \"public_jwk\": {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"Ize4MWHkaLS-hqYv-sVj5NRzDtwMqUC0obK-gOf-uhU\",\n \"y\": \"_eMEQnvbXzOAHUyq-NiaIYhx_NeH9pcXnHfjTOCxXiQ\",\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"alg\": \"ES256\",\n \"use\": \"sig\",\n \"exp\": 1789992000\n },\n \"private_jwk\": {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"Ize4MWHkaLS-hqYv-sVj5NRzDtwMqUC0obK-gOf-uhU\",\n \"y\": \"_eMEQnvbXzOAHUyq-NiaIYhx_NeH9pcXnHfjTOCxXiQ\",\n \"d\": \"mK_555Uh5lALDp4NM-vw6C-7S3OhZP08vqWRmYi56WI\",\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n },\n {\n \"name\": \"provider-active\",\n \"role\": \"provider\",\n \"retired_at\": null,\n \"public_jwk\": {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n },\n \"private_jwk\": {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"d\": \"qpX9N5yRp-dqqkKR3RkWsG5eFh9qatFAZaN-811a5zc\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n },\n {\n \"name\": \"recipient\",\n \"role\": \"recipient\",\n \"retired_at\": null,\n \"public_jwk\": {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"zyzkconzj74PhFRVsL4GAcyKP8zppEXAMzmAkDS0Eoo\",\n \"y\": \"mfP5i9QsgpZo90QvWjwG0Sdx1iWstk1qz6x5HVLkH2Q\",\n \"kid\": \"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n },\n \"private_jwk\": {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"zyzkconzj74PhFRVsL4GAcyKP8zppEXAMzmAkDS0Eoo\",\n \"y\": \"mfP5i9QsgpZo90QvWjwG0Sdx1iWstk1qz6x5HVLkH2Q\",\n \"d\": \"36vcyK7JqAS_dSSZzhyvoLjl-W_Mx_SbVbRb-OTknbU\",\n \"kid\": \"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n }\n ],\n \"key_sets\": {\n \"provider\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"Ize4MWHkaLS-hqYv-sVj5NRzDtwMqUC0obK-gOf-uhU\",\n \"y\": \"_eMEQnvbXzOAHUyq-NiaIYhx_NeH9pcXnHfjTOCxXiQ\",\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"alg\": \"ES256\",\n \"use\": \"sig\",\n \"exp\": 1789992000\n },\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n ]\n },\n \"recipient\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"zyzkconzj74PhFRVsL4GAcyKP8zppEXAMzmAkDS0Eoo\",\n \"y\": \"mfP5i9QsgpZo90QvWjwG0Sdx1iWstk1qz6x5HVLkH2Q\",\n \"kid\": \"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n ]\n }\n },\n \"issuers\": {\n \"provider\": \"https://autonym.example\",\n \"recipient\": \"https://recipient.example/client\"\n }\n}\n", "conformance/vectors/negative.json": "{\n \"description\": \"Signed objects a verifier must reject (A5.4). Each is built to break the rule named in rule. Where breaking it necessarily breaks another as well, such as an algorithm other than ES256 disagreeing with the proof's alg, the description says so, and expected.reason names the rule A5.4 lists first. A key_set given inline replaces the named key set from keys.json.\",\n \"vectors\": [\n {\n \"id\": \"tampered-payload\",\n \"description\": \"disclosure-active-key with one entry value changed after signing.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"signature\"\n },\n \"rule\": \"Verify the signature over the canonical form of the parsed object without proof (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"balanced\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"duplicate-member\",\n \"description\": \"disclosure-active-key with a second purpose member placed first. A parser that keeps the last member sees the signed value and the signature verifies, while one that keeps the first reads advertising.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"duplicate_member\"\n },\n \"rule\": \"Parse strictly before canonicalisation: reject duplicate members, compared after escapes are decoded, and anything that is not I-JSON (A5.4).\",\n \"text\": \"{\\\"purpose\\\":\\\"advertising\\\",\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"duplicate-member-escaped-name\",\n \"description\": \"As duplicate-member, with the repeated name written with an escape.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"duplicate_member\"\n },\n \"rule\": \"Parse strictly before canonicalisation: reject duplicate members, compared after escapes are decoded, and anything that is not I-JSON (A5.4).\",\n \"text\": \"{\\\"purp\\\\u006fse\\\":\\\"advertising\\\",\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"duplicate-member-last\",\n \"description\": \"disclosure-active-key with a second purpose member placed last. A parser that keeps the first member sees the signed value and the signature verifies, while one that keeps the last reads advertising.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"duplicate_member\"\n },\n \"rule\": \"Parse strictly before canonicalisation: reject duplicate members, compared after escapes are decoded, and anything that is not I-JSON (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"},\\\"purpose\\\":\\\"advertising\\\"}\"\n },\n {\n \"id\": \"number-beyond-binary64\",\n \"description\": \"disclosure-active-key with grant_revision written as 1.0000000000000000001, which parses to the signed value 1 but carries precision binary64 does not.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n },\n \"rule\": \"Parse strictly before canonicalisation: reject duplicate members, compared after escapes are decoded, and anything that is not I-JSON (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1.0000000000000000001,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"lone-surrogate\",\n \"description\": \"disclosure-active-key with a lone surrogate added to an entry value, signed over the bytes a canonicaliser that writes it as the escape JSON.stringify writes would produce, so only the I-JSON check refuses it.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n },\n \"rule\": \"Parse strictly before canonicalisation: reject duplicate members, compared after escapes are decoded, and anything that is not I-JSON (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\\udc00\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..LN_IhHTuQnR9NPdusQdM9JHzLm8rAVaYwixj0RlbbFEU1Vs7ct1z-Fyo37MrGKogLuYT9WVmbmMMd9xkxEj1Cg\\\"}}\"\n },\n {\n \"id\": \"noncharacter\",\n \"description\": \"disclosure-active-key with the noncharacter U+FFFF added to an entry value and signed over its canonical bytes, so only the I-JSON check refuses it.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_i_json\"\n },\n \"rule\": \"Parse strictly before canonicalisation: reject duplicate members, compared after escapes are decoded, and anything that is not I-JSON (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\\uffff\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..JMlitnTNHlkHglOMa8YYzkCSmRkWm9hKihfTJ1dezBiTJEwnGTUjFO2durdik390795XleMV-CdpkzBLhWfHzw\\\"}}\"\n },\n {\n \"id\": \"alg-none\",\n \"description\": \"disclosure-active-key with a protected header naming alg none and the real signature bytes. Its proof still names ES256 and the signature was made over another header; A5.4 refuses the algorithm first.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"algorithm\"\n },\n \"rule\": \"Reject alg:none and every algorithm other than ES256 (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJub25lIiwia2lkIjoibVlPMUJwWGFMNTc5VnRxcmc3RmRmdkp0OXktdUJyTWFVRTZfQ1ctREhXYyIsInR5cCI6ImF1dG9ueW0tZGlzY2xvc3VyZStqd3MifQ..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"alg-hs256-public-key\",\n \"description\": \"A genuine HS256 signature over disclosure-active-key whose secret is the active provider key's RFC 7638 member text: the algorithm confusion a verifier that lets the header choose the algorithm would accept. Its proof also names ES256, a disagreement A5.4 reaches after refusing the algorithm.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"algorithm\"\n },\n \"rule\": \"Reject alg:none and every algorithm other than ES256 (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJIUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..5_uaAtKDkshX8KX2QXtTKVlYorpFEMnfAKWVy75noac\\\"}}\"\n },\n {\n \"id\": \"alg-hs256-public-key-pem\",\n \"description\": \"A genuine HS256 signature over disclosure-active-key whose secret is the active provider key's SPKI public key in PEM: the algorithm confusion a verifier that lets the header choose the algorithm would accept. Its proof also names ES256, a disagreement A5.4 reaches after refusing the algorithm.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"algorithm\"\n },\n \"rule\": \"Reject alg:none and every algorithm other than ES256 (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJIUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..NwJZs-ilxRz0goWKk_wUSRD2BViKfcwiR5S8aapoC2c\\\"}}\"\n },\n {\n \"id\": \"alg-hs256-public-jwk\",\n \"description\": \"A genuine HS256 signature over disclosure-active-key whose secret is the active provider key's published JWK as JSON: the algorithm confusion a verifier that lets the header choose the algorithm would accept. Its proof also names ES256, a disagreement A5.4 reaches after refusing the algorithm.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"algorithm\"\n },\n \"rule\": \"Reject alg:none and every algorithm other than ES256 (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJIUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..HsRyKHZDs6N0dNyCL7GnNB5IiNGdaaRyRONGr5BrVAo\\\"}}\"\n },\n {\n \"id\": \"unknown-kid\",\n \"description\": \"disclosure-active-key signed by the recipient's key, whose key ID is not in the provider's key set.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"unknown_key\"\n },\n \"rule\": \"Reject a key ID that is not in the trusted set, appears in it more than once, or is not the thumbprint of its key (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Inc3dDM1Z0RlN0xjcDBEWEU0TnJnS2FyNmR1TGdzSkNydm1ZeUx1VmpwSWMiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..F_p7Ty5K8kRU6xvkghEMM8uIc2Nh3Ni47elQvbbdXhNxLCva0ufC4kViI1XVKk93NqsTM4iqsi8bCRVhGkb_xw\\\"}}\"\n },\n {\n \"id\": \"ambiguous-kid\",\n \"description\": \"disclosure-active-key verified with a key set that lists its key twice.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n },\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"unknown_key\"\n },\n \"rule\": \"Reject a key ID that is not in the trusted set, appears in it more than once, or is not the thumbprint of its key (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"unknown-crit\",\n \"description\": \"disclosure-active-key signed under a header with crit naming an extension member.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"critical_header\"\n },\n \"rule\": \"Reject any protected header member other than alg, kid and typ, including crit, jwk, jku, x5u and b64, and any duplicate header member (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImNyaXQiOlsiYXV0b255bV9leHRlbnNpb24iXSwiYXV0b255bV9leHRlbnNpb24iOnRydWUsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..Bd2l7Vgq7rGgcUVvNL8Po7EfF3E53_TO-m0dR3J_lu-hR6Icfd3d7rDa3K2zGVlR54YA9UhJAwTDNXNFT496KA\\\"}}\"\n },\n {\n \"id\": \"header-supplied-key\",\n \"description\": \"disclosure-active-key signed by the recipient's key, with that key embedded in the header as jwk and the active key's ID as kid: a verifier that used the header's key would accept it. It also fails the signature under the trusted key, which A5.4 reaches only after refusing the header.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"header\"\n },\n \"rule\": \"Reject any protected header member other than alg, kid and typ, including crit, jwk, jku, x5u and b64, and any duplicate header member (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImp3ayI6eyJrdHkiOiJFQyIsImNydiI6IlAtMjU2IiwieCI6Inp5emtjb256ajc0UGhGUlZzTDRHQWN5S1A4enBwRVhBTXptQWtEUzBFb28iLCJ5IjoibWZQNWk5UXNncFpvOTBRdldqd0cwU2R4MWlXc3RrMXF6Nng1SFZMa0gyUSJ9LCJraWQiOiJtWU8xQnBYYUw1NzlWdHFyZzdGZGZ2SnQ5eS11QnJNYVVFNl9DVy1ESFdjIiwidHlwIjoiYXV0b255bS1kaXNjbG9zdXJlK2p3cyJ9..FTzxH_Pr-6yhc4ZwDkrInsRSIhXB3xscneQ3x8-QKWiQgjdaFvzm-CJgfiy6_AjbrrTPpi8yv3APlj7CyQt7KQ\\\"}}\"\n },\n {\n \"id\": \"header-extra-member-x5u\",\n \"description\": \"disclosure-active-key signed by the active key under a header that also names x5u. The extra member is the only rule it breaks.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"header\"\n },\n \"rule\": \"Reject any protected header member other than alg, kid and typ, including crit, jwk, jku, x5u and b64, and any duplicate header member (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIiwieDV1IjoiaHR0cHM6Ly9hdHRhY2tlci5leGFtcGxlL2NlcnRpZmljYXRlLnBlbSJ9..e6nAzTitfF_Gnv3LQO5XGA0T8tacRV-lidLnaSul_gmDHODMT7RM50XPIjofmKSQ8g9LtlqW7gO3WWBAoZRQBQ\\\"}}\"\n },\n {\n \"id\": \"header-extra-member-b64\",\n \"description\": \"disclosure-active-key signed by the active key under a header that also has b64 true, without crit. RFC 7797 would read the payload as ordinary base64url, but A5.4 refuses the member.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"header\"\n },\n \"rule\": \"Reject any protected header member other than alg, kid and typ, including crit, jwk, jku, x5u and b64, and any duplicate header member (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImI2NCI6dHJ1ZSwia2lkIjoibVlPMUJwWGFMNTc5VnRxcmc3RmRmdkp0OXktdUJyTWFVRTZfQ1ctREhXYyIsInR5cCI6ImF1dG9ueW0tZGlzY2xvc3VyZStqd3MifQ..dBz1U4fBIBYKqp2qLRmB4ZDKDir7XKBJ6m3hkLM6aQiZjn5-I_MZuBlU8PfFzwL38PqsZ0u3YT1IqdIGjVi3GQ\\\"}}\"\n },\n {\n \"id\": \"header-non-canonical-base64url\",\n \"description\": \"disclosure-active-key with its protected header's last character changed so its unused bits are set: the same header bytes in a second spelling, which a verifier that re-encodes the decoded header would accept.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"malformed_proof\"\n },\n \"rule\": \"Each part of the detached JWS is unpadded base64url in no other spelling of the same bytes (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn1..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"duplicate-header-member\",\n \"description\": \"disclosure-active-key signed under a protected header that repeats alg.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"duplicate_member\"\n },\n \"rule\": \"Reject any protected header member other than alg, kid and typ, including crit, jwk, jku, x5u and b64, and any duplicate header member (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImFsZyI6IkVTMjU2Iiwia2lkIjoibVlPMUJwWGFMNTc5VnRxcmc3RmRmdkp0OXktdUJyTWFVRTZfQ1ctREhXYyIsInR5cCI6ImF1dG9ueW0tZGlzY2xvc3VyZStqd3MifQ..mqyi12IMRu_uHrj62843pTRsUtTyx3yOIXzBJFOMZT9VVZUFUIOEIHIpsYSsS8wmvNOFveG_6lOR5n0GqDGRVw\\\"}}\"\n },\n {\n \"id\": \"typ-other-object\",\n \"description\": \"disclosure-active-key signed with the receipt typ, so a signature made for one type cannot be replayed as another.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"type\"\n },\n \"rule\": \"Reject a typ that differs from the expected value, compared exactly (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..piDpajmYLQf7OPNEBOoMAt3mRwkV2PHUnBAwiAohHLPDqOU2aQNxEud-JDsYzJV5JC9gB59e2-0d1tmLlDSfOw\\\"}}\"\n },\n {\n \"id\": \"typ-media-type-prefix\",\n \"description\": \"disclosure-active-key signed with typ application/autonym-disclosure+jws. Some libraries treat the prefix as equivalent; A5.4 compares exactly.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"type\"\n },\n \"rule\": \"Reject a typ that differs from the expected value, compared exactly (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhcHBsaWNhdGlvbi9hdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..kDZstQyGyT-tkJY8y5vE6TYaVzLnGwM-TvONZdw9mbYCoHEAgg_8tEW4PEZpFdM-IFDeRyOedkJpzBduwhdQoA\\\"}}\"\n },\n {\n \"id\": \"proof-kid-disagrees\",\n \"description\": \"disclosure-active-key with proof.kid naming the retired key while the protected header names the active one.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"header_mismatch\"\n },\n \"rule\": \"Reject proof metadata whose alg or kid disagrees with the protected header (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"kid-not-thumbprint\",\n \"description\": \"disclosure-active-key signed by the active key under the recipient key's ID, verified with a key set that lists the active key under that ID.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"key_id\"\n },\n \"rule\": \"Reject a key ID that is not in the trusted set, appears in it more than once, or is not the thumbprint of its key (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Inc3dDM1Z0RlN0xjcDBEWEU0TnJnS2FyNmR1TGdzSkNydm1ZeUx1VmpwSWMiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..ugAYCliUWyBPDIRNg4o4i848nHA5z1W3HDjDWwNxEw0WNqHZXh5C-Bbn5Zk1oWJChnB4su6vMlHZuoNzRBo4BA\\\"}}\"\n },\n {\n \"id\": \"non-canonical-key-coordinate\",\n \"description\": \"The active key with x spelled with its last character's unused bits set: the same key bytes under a second key ID. Signed by the active key under that ID.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedV\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"7BCNbydUdGYREipRH_zZorv7AFETIWYa6KtlvY1h9Xg\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"key\"\n },\n \"rule\": \"Reject a matching key that does not follow key-set.json, such as one with a private member, key_ops or a lifetime member other than exp (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"7BCNbydUdGYREipRH_zZorv7AFETIWYa6KtlvY1h9Xg\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjdCQ05ieWRVZEdZUkVpcFJIX3pab3J2N0FGRVRJV1lhNkt0bHZZMWg5WGciLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..AKjf3SNa5Dzj7-2brLcqd2RKSI3V4MeB1bk7mRjxPC_raWafDmVjkW2N_QkL2OtYjmlM5ejBuCd87ge6JN806g\\\"}}\"\n },\n {\n \"id\": \"key-with-nbf\",\n \"description\": \"disclosure-active-key verified with its key carrying nbf, a lifetime member A5.4 does not use.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\",\n \"nbf\": 1788220800\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"key\"\n },\n \"rule\": \"Reject a matching key that does not follow key-set.json, such as one with a private member, key_ops or a lifetime member other than exp (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"key-with-revoked\",\n \"description\": \"disclosure-active-key verified with its key carrying revoked: a key with that member is not used to verify anything.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\",\n \"revoked\": {\n \"revoked_at\": 1790121600,\n \"reason\": \"keyCompromise\"\n }\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"key\"\n },\n \"rule\": \"Reject a matching key that does not follow key-set.json, such as one with a private member, key_ops or a lifetime member other than exp (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"key-with-key-ops\",\n \"description\": \"disclosure-active-key verified with its key carrying key_ops.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\",\n \"key_ops\": [\n \"verify\"\n ]\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"key\"\n },\n \"rule\": \"Reject a matching key that does not follow key-set.json, such as one with a private member, key_ops or a lifetime member other than exp (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"key-with-iat\",\n \"description\": \"disclosure-active-key verified with its key carrying iat, a lifetime member A5.4 does not use.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\",\n \"iat\": 1788220800\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"key\"\n },\n \"rule\": \"Reject a matching key that does not follow key-set.json, such as one with a private member, key_ops or a lifetime member other than exp (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"key-with-private-member\",\n \"description\": \"disclosure-active-key verified with its key carrying a d member. The value is a placeholder, not a private key: a verifier refuses any private member without using it.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"RnfKbTJ_SkRMoNnp_L_mcoWCZzfexCOej0E5Z_peedU\",\n \"y\": \"ywxQtuG3Nw4R-MyAF8fl2yULAhT_2I_mHSIMaaUnRFU\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"alg\": \"ES256\",\n \"use\": \"sig\",\n \"d\": \"AA\"\n }\n ]\n },\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"key\"\n },\n \"rule\": \"Reject a matching key that does not follow key-set.json, such as one with a private member, key_ops or a lifetime member other than exp (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"signature-non-canonical-base64url\",\n \"description\": \"disclosure-active-key with the signature's last character changed so its unused bits are set: the same signature bytes in a second spelling.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"malformed_proof\"\n },\n \"rule\": \"Each part of the detached JWS is unpadded base64url in no other spelling of the same bytes (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROB\\\"}}\"\n },\n {\n \"id\": \"signature-padded-integers\",\n \"description\": \"disclosure-active-key with each of the signature's two integers given a leading zero byte: 66 bytes that denote the same r and s. An ES256 signature is exactly 64 bytes (RFC 7518 section 3.4).\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"signature\"\n },\n \"rule\": \"Verify the signature over the canonical form of the parsed object without proof (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..ACiTvLIIOkzlyfOIFStJJTqk_oMOCeXJGPSYI1naQBvnABNvNAub7bZcF4wBfVUgROIw3wAulGfBv1-CgyntPNE4\\\"}}\"\n },\n {\n \"id\": \"retired-key-at-exp\",\n \"description\": \"A disclosure signed by the retired provider key with issued_at equal to the key's exp.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-21T12:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"retired\"\n },\n \"rule\": \"Reject a signed object whose signed time is at or after the instant the matching key's exp denotes (A5.4, A9).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R3\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-21T12:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-21T12:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"brief\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"home\\\",\\\"key\\\":\\\"temperature_preference\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"number\\\",\\\"value\\\":20.5,\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"identity\\\",\\\"key\\\":\\\"display_name\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"structured\\\",\\\"value\\\":{\\\"first\\\":\\\"Zoë\\\"},\\\"context_kind\\\":\\\"fact\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..Mu_7UH3uOeymG1sO4UY93-gFPCRGSz3F9WPZ1rpypqv8PesUJFvOWWdWukdlyRi6BQqa99A9DlhFsutH7o0HJQ\\\"}}\"\n },\n {\n \"id\": \"retired-key-after-exp\",\n \"description\": \"A disclosure signed by the retired provider key half a second after its exp. With disclosure-retired-key-just-before-exp it shows that signed times are compared exactly.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-21T12:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"retired\"\n },\n \"rule\": \"Reject a signed object whose signed time is at or after the instant the matching key's exp denotes (A5.4, A9).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R4\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-21T12:00:00.5Z\\\",\\\"valid_until\\\":\\\"2026-09-21T12:05:00.5Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"brief\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectorhometemperatureaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"home\\\",\\\"key\\\":\\\"temperature_preference\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"number\\\",\\\"value\\\":20.5,\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false},{\\\"id\\\":\\\"rent_vectoridentitydisplaynameaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":1,\\\"domain\\\":\\\"identity\\\",\\\"key\\\":\\\"display_name\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"structured\\\",\\\"value\\\":{\\\"first\\\":\\\"Zoë\\\"},\\\"context_kind\\\":\\\"fact\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..3nM0Whkk2Qgk7FLTjunl_gmm6s74-VhBechFR6YSTxK92DXZAb17hrTluUdIv2Utr0dgw94dl14eF2g6qaRO9g\\\"}}\"\n },\n {\n \"id\": \"receipt-retired-key-at-exp\",\n \"description\": \"A receipt signed by the retired provider key with at equal to the key's exp, verified a year later.\",\n \"checks\": [\n \"SIGN-01\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-receipt+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2027-09-22T00:00:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"retired\"\n },\n \"rule\": \"Reject a signed object whose signed time is at or after the instant the matching key's exp denotes (A5.4, A9).\",\n \"text\": \"{\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E3\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R3\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"at\\\":\\\"2026-09-21T12:00:00Z\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"surface\\\":\\\"rest\\\",\\\"request\\\":{\\\"domains\\\":[\\\"agent\\\",\\\"home\\\",\\\"identity\\\"],\\\"max_level\\\":\\\"L2\\\",\\\"declared_only\\\":false,\\\"min_confidence\\\":0},\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"version\\\":1,\\\"level\\\":\\\"L2\\\"},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN2\\\",\\\"version\\\":2,\\\"level\\\":\\\"L2\\\"},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN3\\\",\\\"version\\\":1,\\\"level\\\":\\\"L2\\\"}],\\\"response_hash\\\":\\\"sha256:e63651758b2c575a18d555d836a4a8015a05442833a6061e8dfff2dae6f5df98\\\",\\\"prev_hash\\\":null,\\\"hash\\\":\\\"sha256:24e0f6a6f059bc1ece3fb0ec10fedc9bf033b69596e196d44ce0b628c4eb83fb\\\",\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..Rb2KjIIoSFyfYHK5GNcZ6DGe-vDeUg_bDVAGwRVrH5vjxqHXGL6EEimThxH-ZPxgbe9_0nE6_WakNBA9DH5tzw\\\"}}\"\n },\n {\n \"id\": \"expired\",\n \"description\": \"disclosure-active-key verified at exactly its valid_until.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:05:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"expired\"\n },\n \"rule\": \"Reject a disclosure whose valid_until is not after issued_at, is more than five minutes after it, or disagrees with ttl_seconds; one whose issued_at is more than 60 seconds after the verifier's trusted current time; and one whose valid_until is not after the verifier's trusted current time (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"not-yet-valid\",\n \"description\": \"disclosure-active-key verified by a clock 60.001 seconds behind its issued_at.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T09:58:59.999Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"not_yet_valid\"\n },\n \"rule\": \"Reject a disclosure whose valid_until is not after issued_at, is more than five minutes after it, or disagrees with ttl_seconds; one whose issued_at is more than 60 seconds after the verifier's trusted current time; and one whose valid_until is not after the verifier's trusted current time (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..KJO8sgg6TOXJ84gVK0klOqT-gw4J5ckY9JgjWdpAG-cTbzQLm-22XBeMAX1VIETiMN8ALpRnwb9fgoMp7TzROA\\\"}}\"\n },\n {\n \"id\": \"valid-until-beyond-five-minutes\",\n \"description\": \"A disclosure whose valid_until is 301 seconds after issued_at, signed by the active key. disclosure.json caps ttl_seconds at 300, so a deadline beyond five minutes also disagrees with ttl_seconds; both are the same A5.4 rule.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"time_bounds\"\n },\n \"rule\": \"Reject a disclosure whose valid_until is not after issued_at, is more than five minutes after it, or disagrees with ttl_seconds; one whose issued_at is more than 60 seconds after the verifier's trusted current time; and one whose valid_until is not after the verifier's trusted current time (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:01Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..Q8it2U6Vg7iAvS7p2SVgYs_azzd40MS0hPR3P4kw5HtMMQGwL4nMAzheUYzAOWDt4FkzoB5JIhjRlyNYNZRY-g\\\"}}\"\n },\n {\n \"id\": \"ttl-disagrees\",\n \"description\": \"A disclosure whose ttl_seconds is 299 while valid_until is 300 seconds after issued_at.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"time_bounds\"\n },\n \"rule\": \"Reject a disclosure whose valid_until is not after issued_at, is more than five minutes after it, or disagrees with ttl_seconds; one whose issued_at is more than 60 seconds after the verifier's trusted current time; and one whose valid_until is not after the verifier's trusted current time (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":299,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..Qz4SQE2bjGw46nmS7KTwJzJkDgmCalvXwy-r3W4_OIZ1nYqI066n9AxBW6iCa3KhdIJ8VegMozySxVRD5viIYw\\\"}}\"\n },\n {\n \"id\": \"valid-until-not-after-issued\",\n \"description\": \"A disclosure whose valid_until equals its issued_at, with ttl_seconds 0, signed by the active key.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"time_bounds\"\n },\n \"rule\": \"Reject a disclosure whose valid_until is not after issued_at, is more than five minutes after it, or disagrees with ttl_seconds; one whose issued_at is more than 60 seconds after the verifier's trusted current time; and one whose valid_until is not after the verifier's trusted current time (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"ttl_seconds\\\":0,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..7hxfGZL9ZkIcuT-WPQBNaOyXVvDvrnf8pUfOEmOi94uk4MFUS4YkozjdJoPtTEdih4hKUzg0SE1WjBH1jBxhIA\\\"}}\"\n },\n {\n \"id\": \"wrong-provider\",\n \"description\": \"A disclosure naming another provider, signed by this provider's active key and verified for this provider.\",\n \"checks\": [\n \"SIGN-01\"\n ],\n \"typ\": \"autonym-disclosure+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-22T10:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"issuer\"\n },\n \"rule\": \"Reject a disclosure or receipt whose provider is not the trusted issuer, compared as exact strings (A5.4).\",\n \"text\": \"{\\\"autonym_version\\\":\\\"1.0\\\",\\\"provider\\\":\\\"https://other-provider.example\\\",\\\"audience\\\":\\\"https://autonym.example/v1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"handle\\\":\\\"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"grant_revision\\\":1,\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"issued_at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"valid_until\\\":\\\"2026-09-22T10:05:00Z\\\",\\\"ttl_seconds\\\":300,\\\"persist_until\\\":\\\"2026-09-28T09:00:00Z\\\",\\\"entries\\\":[{\\\"id\\\":\\\"rent_vectoragentverbosityaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\\\",\\\"version\\\":2,\\\"domain\\\":\\\"agent\\\",\\\"key\\\":\\\"verbosity\\\",\\\"level\\\":\\\"L2\\\",\\\"value_type\\\":\\\"enum\\\",\\\"value\\\":\\\"detailed\\\",\\\"context_kind\\\":\\\"preference\\\",\\\"safety_critical\\\":false,\\\"provenance\\\":{\\\"kind\\\":\\\"declared\\\",\\\"confirmed\\\":true},\\\"stale\\\":false}],\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..GO6sPPq6tjSGwlDbgSWpyeFMjxutJc9aUNXcYH6C_jZ7xAnrxwkAOBGk08rTI-Bzvih3bioztv9c_4VoGKv55A\\\"}}\"\n },\n {\n \"id\": \"receipt-carried-other-provider\",\n \"description\": \"A receipt carried in this provider's verified export, naming another provider, signed with a key the export publishes. The export's origin_host is the trusted issuer for the receipts it carries, so the receipt is not verified as this provider's; it is verified against the other provider's own key set or reported as unverified history.\",\n \"checks\": [\n \"SIGN-01\",\n \"LOG-02\"\n ],\n \"typ\": \"autonym-receipt+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2027-09-22T00:00:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"issuer\"\n },\n \"rule\": \"Reject a disclosure or receipt whose provider is not the trusted issuer, compared as exact strings (A5.4).\",\n \"text\": \"{\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E2\\\",\\\"provider\\\":\\\"https://other-provider.example\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"surface\\\":\\\"mcp_tool\\\",\\\"request\\\":{\\\"domains\\\":[\\\"agent\\\"],\\\"max_level\\\":\\\"L3\\\",\\\"keys\\\":[\\\"verbosity\\\"],\\\"declared_only\\\":false,\\\"min_confidence\\\":0.5,\\\"since\\\":\\\"2026-09-21T09:00:00Z\\\"},\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"version\\\":2,\\\"level\\\":\\\"L2\\\"}],\\\"response_hash\\\":\\\"sha256:e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\\\",\\\"prev_hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"hash\\\":\\\"sha256:b4d933a58dc7f84eebb1b9a70d3290f65e077eba04c0c0611638582455401895\\\",\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..es2i3rh5Fh_H-VKSY3bxceEfBg1p_BZRtYflbGUi7_KKNLr2_OAlNsiXJXsZyD5NX9u8FD94iPZNn128pcQPJQ\\\"}}\"\n },\n {\n \"id\": \"receipt-hash-mismatch\",\n \"description\": \"receipt-after-rotation with hash replaced by the previous receipt's hash, signed by the active key.\",\n \"checks\": [\n \"SIGN-01\",\n \"LOG-01\"\n ],\n \"typ\": \"autonym-receipt+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2027-09-22T00:00:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"hash\"\n },\n \"rule\": \"Reject a receipt whose hash is not the A9 hash of its own content (A5.4).\",\n \"text\": \"{\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E2\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"surface\\\":\\\"mcp_tool\\\",\\\"request\\\":{\\\"domains\\\":[\\\"agent\\\"],\\\"max_level\\\":\\\"L3\\\",\\\"keys\\\":[\\\"verbosity\\\"],\\\"declared_only\\\":false,\\\"min_confidence\\\":0.5,\\\"since\\\":\\\"2026-09-21T09:00:00Z\\\"},\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"version\\\":2,\\\"level\\\":\\\"L2\\\"}],\\\"response_hash\\\":\\\"sha256:e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\\\",\\\"prev_hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..rr8EH-FflTya8fpeBGADKgUPAz2vYmC8tUPBXNLSPvmJmlyi9jleMnocoRcnGWtNq_UjyLXoaWsxpb_txsfm6A\\\"}}\"\n },\n {\n \"id\": \"acknowledgement-provider-key\",\n \"description\": \"purge-acknowledgement verified against the provider's key set. An acknowledgement is verified against that recipient's registered keys only.\",\n \"checks\": [\n \"SIGN-01\",\n \"PURGE-01\"\n ],\n \"typ\": \"autonym-purge-ack+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://recipient.example/client\",\n \"now\": \"2026-09-23T15:01:00Z\"\n },\n \"expected\": {\n \"valid\": false,\n \"reason\": \"unknown_key\"\n },\n \"rule\": \"Reject a key ID that is not in the trusted set, appears in it more than once, or is not the thumbprint of its key (A5.4).\",\n \"text\": \"{\\\"instruction_id\\\":\\\"pi_01JVECT0RS00000000000000P1\\\",\\\"attestation\\\":\\\"purged\\\",\\\"at\\\":\\\"2026-09-23T15:00:00Z\\\",\\\"note\\\":\\\"Deleted the copy received under this grant.\\\",\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Inc3dDM1Z0RlN0xjcDBEWEU0TnJnS2FyNmR1TGdzSkNydm1ZeUx1VmpwSWMiLCJ0eXAiOiJhdXRvbnltLXB1cmdlLWFjaytqd3MifQ..ryMwdBH4V3e1zTuXZy5vkZRQl8d393gV8XnO0f7FAN_le71IWtv8qn0XAXgWamfPougyEOdfS6B3WNzgUvrV_g\\\"}}\"\n }\n ]\n}\n", "conformance/vectors/purge.json": "{\n \"description\": \"A purge instruction token and its acknowledgement (A10). The token is a compact JWT signed by the provider; it is stored here in the RFC 7515 flattened JSON form, and a recipient receives protected.payload.signature. The acknowledgement is a detached JWS signed by the recipient.\",\n \"instruction\": {\n \"id\": \"purge-instruction\",\n \"description\": \"The purge instruction for the ended grant, a compact JWT signed by the active provider key with protected typ autonym-purge+jwt. Its signed time is iat. Verify it at its iat with the provider key set: the header has exactly alg, kid and typ, and the payload is the claims.\",\n \"checks\": [\n \"SIGN-01\",\n \"PURGE-01\"\n ],\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2026-09-23T09:00:00Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"signed_at\": \"2026-09-23T09:00:00Z\"\n },\n \"claims\": {\n \"iss\": \"https://autonym.example\",\n \"sub\": \"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\",\n \"aud\": \"https://recipient.example/client\",\n \"jti\": \"pi_01JVECT0RS00000000000000P1\",\n \"iat\": 1790154000,\n \"exp\": 1792746000,\n \"autonym_grant_id\": \"gr_01JVECT0RS00000000000000G1\",\n \"reason\": \"grant_ended\",\n \"scope\": \"all\",\n \"deadline\": \"2026-09-30T09:00:00Z\"\n },\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"typ\": \"autonym-purge+jwt\"\n },\n \"token\": {\n \"protected\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXB1cmdlK2p3dCJ9\",\n \"payload\": \"eyJpc3MiOiJodHRwczovL2F1dG9ueW0uZXhhbXBsZSIsInN1YiI6ImF1dG9ueW06eDZ5bjRrbWxicGNvYmIza3VqcDJ4Nnd6bW90Y2J5ZmhAYXV0b255bS5leGFtcGxlIiwiYXVkIjoiaHR0cHM6Ly9yZWNpcGllbnQuZXhhbXBsZS9jbGllbnQiLCJqdGkiOiJwaV8wMUpWRUNUMFJTMDAwMDAwMDAwMDAwMDBQMSIsImlhdCI6MTc5MDE1NDAwMCwiZXhwIjoxNzkyNzQ2MDAwLCJhdXRvbnltX2dyYW50X2lkIjoiZ3JfMDFKVkVDVDBSUzAwMDAwMDAwMDAwMDAwRzEiLCJyZWFzb24iOiJncmFudF9lbmRlZCIsInNjb3BlIjoiYWxsIiwiZGVhZGxpbmUiOiIyMDI2LTA5LTMwVDA5OjAwOjAwWiJ9\",\n \"signature\": \"D1JEW5SWou9z0XKhmGp-Us8EB9QHl9-I-PA0aGnOi6hl3mVl-7H2_tWrfVA31b4oVvQHEbrcy9EHvfeBWEoIqQ\"\n }\n },\n \"acknowledgement\": {\n \"id\": \"purge-acknowledgement\",\n \"description\": \"The recipient's acknowledgement, signed by its registered key over the JCS bytes of the acknowledgement without proof (A10). It attests that the recipient purged; it does not prove that every copy has gone.\",\n \"checks\": [\n \"SIGN-01\",\n \"PURGE-01\"\n ],\n \"typ\": \"autonym-purge-ack+jws\",\n \"verify\": {\n \"key_set\": \"recipient\",\n \"trusted_issuer\": \"https://recipient.example/client\",\n \"now\": \"2026-09-23T15:01:00Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\",\n \"signed_at\": \"2026-09-23T15:00:00Z\"\n },\n \"unsigned\": {\n \"instruction_id\": \"pi_01JVECT0RS00000000000000P1\",\n \"attestation\": \"purged\",\n \"at\": \"2026-09-23T15:00:00Z\",\n \"note\": \"Deleted the copy received under this grant.\"\n },\n \"jcs\": \"{\\\"at\\\":\\\"2026-09-23T15:00:00Z\\\",\\\"attestation\\\":\\\"purged\\\",\\\"instruction_id\\\":\\\"pi_01JVECT0RS00000000000000P1\\\",\\\"note\\\":\\\"Deleted the copy received under this grant.\\\"}\",\n \"jcs_sha256\": \"82dfc816cc92fb9bcad365016d067a42a7a2e30d1aa0bf18ff983530210cccdb\",\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\",\n \"typ\": \"autonym-purge-ack+jws\"\n },\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Inc3dDM1Z0RlN0xjcDBEWEU0TnJnS2FyNmR1TGdzSkNydm1ZeUx1VmpwSWMiLCJ0eXAiOiJhdXRvbnltLXB1cmdlLWFjaytqd3MifQ..ryMwdBH4V3e1zTuXZy5vkZRQl8d393gV8XnO0f7FAN_le71IWtv8qn0XAXgWamfPougyEOdfS6B3WNzgUvrV_g\",\n \"text\": \"{\\\"instruction_id\\\":\\\"pi_01JVECT0RS00000000000000P1\\\",\\\"attestation\\\":\\\"purged\\\",\\\"at\\\":\\\"2026-09-23T15:00:00Z\\\",\\\"note\\\":\\\"Deleted the copy received under this grant.\\\",\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Inc3dDM1Z0RlN0xjcDBEWEU0TnJnS2FyNmR1TGdzSkNydm1ZeUx1VmpwSWMiLCJ0eXAiOiJhdXRvbnltLXB1cmdlLWFjaytqd3MifQ..ryMwdBH4V3e1zTuXZy5vkZRQl8d393gV8XnO0f7FAN_le71IWtv8qn0XAXgWamfPougyEOdfS6B3WNzgUvrV_g\\\"}}\"\n }\n}\n", "conformance/vectors/receipt.json": "{\n \"description\": \"A receipt chain across a key rotation (A9): the first receipt is signed by the provider key that was later retired, before its exp, the second by the active key, and both verify a year later from the provider's published key set alone. Each receipt carries its provider, its canonical request and the hash of the disclosure it records.\",\n \"vectors\": [\n {\n \"id\": \"receipt-before-rotation\",\n \"description\": \"The first receipt of the chain, signed by the provider key that was later retired, before its exp. Its request was received with repeated and unordered domains and without the defaults.\",\n \"checks\": [\n \"SIGN-01\",\n \"LOG-01\",\n \"LOG-02\",\n \"KEY-01\"\n ],\n \"typ\": \"autonym-receipt+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2027-09-22T00:00:00Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"signed_at\": \"2026-09-21T09:00:00Z\"\n },\n \"unsigned\": {\n \"event_id\": \"evt_01JVECT0RS00000000000000E1\",\n \"provider\": \"https://autonym.example\",\n \"read_id\": \"rd_01JVECT0RS00000000000000R1\",\n \"grant_id\": \"gr_01JVECT0RS00000000000000G1\",\n \"client_id\": \"https://recipient.example/client\",\n \"at\": \"2026-09-21T09:00:00Z\",\n \"purpose\": \"recommendation\",\n \"surface\": \"rest\",\n \"request\": {\n \"domains\": [\n \"agent\",\n \"home\",\n \"identity\"\n ],\n \"max_level\": \"L2\",\n \"declared_only\": false,\n \"min_confidence\": 0\n },\n \"returned\": [\n {\n \"entry_id\": \"ent_01JVECT0RS0000000000000EN1\",\n \"version\": 1,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JVECT0RS0000000000000EN2\",\n \"version\": 2,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JVECT0RS0000000000000EN3\",\n \"version\": 1,\n \"level\": \"L2\"\n }\n ],\n \"response_hash\": \"sha256:4c547ec781b79e6bbd28fa184dfa25513cf192fb813070cf64e23fab9d379b3b\",\n \"prev_hash\": null,\n \"hash\": \"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\"\n },\n \"jcs\": \"{\\\"at\\\":\\\"2026-09-21T09:00:00Z\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E1\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"prev_hash\\\":null,\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R1\\\",\\\"request\\\":{\\\"declared_only\\\":false,\\\"domains\\\":[\\\"agent\\\",\\\"home\\\",\\\"identity\\\"],\\\"max_level\\\":\\\"L2\\\",\\\"min_confidence\\\":0},\\\"response_hash\\\":\\\"sha256:4c547ec781b79e6bbd28fa184dfa25513cf192fb813070cf64e23fab9d379b3b\\\",\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":1},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN2\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":2},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN3\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":1}],\\\"surface\\\":\\\"rest\\\"}\",\n \"jcs_sha256\": \"79d20385088600728a8afa82f7f7bccaadace878687787733231bc62556fb99c\",\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\",\n \"typ\": \"autonym-receipt+jws\"\n },\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..sM89QN9EHC5qfKTEr576V1INQyN9mS_3sHErqDnEsYPlQwvssNlCmDpAdYydqij9iW6VVEEi1aLPG4rps4Rw4w\",\n \"text\": \"{\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E1\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R1\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"at\\\":\\\"2026-09-21T09:00:00Z\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"surface\\\":\\\"rest\\\",\\\"request\\\":{\\\"domains\\\":[\\\"agent\\\",\\\"home\\\",\\\"identity\\\"],\\\"max_level\\\":\\\"L2\\\",\\\"declared_only\\\":false,\\\"min_confidence\\\":0},\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"version\\\":1,\\\"level\\\":\\\"L2\\\"},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN2\\\",\\\"version\\\":2,\\\"level\\\":\\\"L2\\\"},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN3\\\",\\\"version\\\":1,\\\"level\\\":\\\"L2\\\"}],\\\"response_hash\\\":\\\"sha256:4c547ec781b79e6bbd28fa184dfa25513cf192fb813070cf64e23fab9d379b3b\\\",\\\"prev_hash\\\":null,\\\"hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"3QA66uHrbG9BnCQj8_OfGgzottqgZBfdvL1q14XiT9w\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6IjNRQTY2dUhyYkc5Qm5DUWo4X09mR2d6b3R0cWdaQmZkdkwxcTE0WGlUOXciLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..sM89QN9EHC5qfKTEr576V1INQyN9mS_3sHErqDnEsYPlQwvssNlCmDpAdYydqij9iW6VVEEi1aLPG4rps4Rw4w\\\"}}\",\n \"chain\": {\n \"previous\": null,\n \"prev_hash\": null,\n \"hash_input_jcs\": \"{\\\"at\\\":\\\"2026-09-21T09:00:00Z\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E1\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"prev_hash\\\":null,\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R1\\\",\\\"request\\\":{\\\"declared_only\\\":false,\\\"domains\\\":[\\\"agent\\\",\\\"home\\\",\\\"identity\\\"],\\\"max_level\\\":\\\"L2\\\",\\\"min_confidence\\\":0},\\\"response_hash\\\":\\\"sha256:4c547ec781b79e6bbd28fa184dfa25513cf192fb813070cf64e23fab9d379b3b\\\",\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":1},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN2\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":2},{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN3\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":1}],\\\"surface\\\":\\\"rest\\\"}\",\n \"hash\": \"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\"\n },\n \"request\": {\n \"as_received\": {\n \"domains\": [\n \"identity\",\n \"home\",\n \"agent\",\n \"home\"\n ],\n \"max_level\": \"L2\"\n },\n \"canonical\": {\n \"domains\": [\n \"agent\",\n \"home\",\n \"identity\"\n ],\n \"max_level\": \"L2\",\n \"declared_only\": false,\n \"min_confidence\": 0\n }\n },\n \"response\": {\n \"disclosure\": \"disclosure-retired-key-before-exp\",\n \"response_hash\": \"sha256:4c547ec781b79e6bbd28fa184dfa25513cf192fb813070cf64e23fab9d379b3b\"\n }\n },\n {\n \"id\": \"receipt-after-rotation\",\n \"description\": \"The second receipt, signed by the active key and chained to the first. Its request was received with since in a non-canonical spelling.\",\n \"checks\": [\n \"SIGN-01\",\n \"LOG-01\",\n \"LOG-02\"\n ],\n \"typ\": \"autonym-receipt+jws\",\n \"verify\": {\n \"key_set\": \"provider\",\n \"trusted_issuer\": \"https://autonym.example\",\n \"now\": \"2027-09-22T00:00:00Z\"\n },\n \"expected\": {\n \"valid\": true,\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"signed_at\": \"2026-09-22T10:00:00Z\"\n },\n \"unsigned\": {\n \"event_id\": \"evt_01JVECT0RS00000000000000E2\",\n \"provider\": \"https://autonym.example\",\n \"read_id\": \"rd_01JVECT0RS00000000000000R2\",\n \"grant_id\": \"gr_01JVECT0RS00000000000000G1\",\n \"client_id\": \"https://recipient.example/client\",\n \"at\": \"2026-09-22T10:00:00Z\",\n \"purpose\": \"recommendation\",\n \"surface\": \"mcp_tool\",\n \"request\": {\n \"domains\": [\n \"agent\"\n ],\n \"max_level\": \"L3\",\n \"keys\": [\n \"verbosity\"\n ],\n \"declared_only\": false,\n \"min_confidence\": 0.5,\n \"since\": \"2026-09-21T09:00:00Z\"\n },\n \"returned\": [\n {\n \"entry_id\": \"ent_01JVECT0RS0000000000000EN1\",\n \"version\": 2,\n \"level\": \"L2\"\n }\n ],\n \"response_hash\": \"sha256:e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\",\n \"prev_hash\": \"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\",\n \"hash\": \"sha256:5646c4fd4a23891b4fa26dd32b0d27154ffaa4b85be3459c1d79613f153b35d8\"\n },\n \"jcs\": \"{\\\"at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E2\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"hash\\\":\\\"sha256:5646c4fd4a23891b4fa26dd32b0d27154ffaa4b85be3459c1d79613f153b35d8\\\",\\\"prev_hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"request\\\":{\\\"declared_only\\\":false,\\\"domains\\\":[\\\"agent\\\"],\\\"keys\\\":[\\\"verbosity\\\"],\\\"max_level\\\":\\\"L3\\\",\\\"min_confidence\\\":0.5,\\\"since\\\":\\\"2026-09-21T09:00:00Z\\\"},\\\"response_hash\\\":\\\"sha256:e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\\\",\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":2}],\\\"surface\\\":\\\"mcp_tool\\\"}\",\n \"jcs_sha256\": \"c18b741094df62f13b2a6879d053882c41731422b1b6fe39b972bdef652b2c65\",\n \"protected_header\": {\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"typ\": \"autonym-receipt+jws\"\n },\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..5yey6i9F598dzuveUdZ1O84AkzhWCza3ibVAtzf5xAxW3YsoE32nDQJLvhYP5X9aDGeH2fgKTCiUFfrDIH11kQ\",\n \"text\": \"{\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E2\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"surface\\\":\\\"mcp_tool\\\",\\\"request\\\":{\\\"domains\\\":[\\\"agent\\\"],\\\"max_level\\\":\\\"L3\\\",\\\"keys\\\":[\\\"verbosity\\\"],\\\"declared_only\\\":false,\\\"min_confidence\\\":0.5,\\\"since\\\":\\\"2026-09-21T09:00:00Z\\\"},\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"version\\\":2,\\\"level\\\":\\\"L2\\\"}],\\\"response_hash\\\":\\\"sha256:e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\\\",\\\"prev_hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"hash\\\":\\\"sha256:5646c4fd4a23891b4fa26dd32b0d27154ffaa4b85be3459c1d79613f153b35d8\\\",\\\"proof\\\":{\\\"type\\\":\\\"jws\\\",\\\"alg\\\":\\\"ES256\\\",\\\"kid\\\":\\\"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\\\",\\\"jws\\\":\\\"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..5yey6i9F598dzuveUdZ1O84AkzhWCza3ibVAtzf5xAxW3YsoE32nDQJLvhYP5X9aDGeH2fgKTCiUFfrDIH11kQ\\\"}}\",\n \"chain\": {\n \"previous\": \"receipt-before-rotation\",\n \"prev_hash\": \"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\",\n \"hash_input_jcs\": \"{\\\"at\\\":\\\"2026-09-22T10:00:00Z\\\",\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"event_id\\\":\\\"evt_01JVECT0RS00000000000000E2\\\",\\\"grant_id\\\":\\\"gr_01JVECT0RS00000000000000G1\\\",\\\"prev_hash\\\":\\\"sha256:72d9604e1c1b21f557450448c06c8abf1b6646026dcdd83ef37b490c5ff56325\\\",\\\"provider\\\":\\\"https://autonym.example\\\",\\\"purpose\\\":\\\"recommendation\\\",\\\"read_id\\\":\\\"rd_01JVECT0RS00000000000000R2\\\",\\\"request\\\":{\\\"declared_only\\\":false,\\\"domains\\\":[\\\"agent\\\"],\\\"keys\\\":[\\\"verbosity\\\"],\\\"max_level\\\":\\\"L3\\\",\\\"min_confidence\\\":0.5,\\\"since\\\":\\\"2026-09-21T09:00:00Z\\\"},\\\"response_hash\\\":\\\"sha256:e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\\\",\\\"returned\\\":[{\\\"entry_id\\\":\\\"ent_01JVECT0RS0000000000000EN1\\\",\\\"level\\\":\\\"L2\\\",\\\"version\\\":2}],\\\"surface\\\":\\\"mcp_tool\\\"}\",\n \"hash\": \"sha256:5646c4fd4a23891b4fa26dd32b0d27154ffaa4b85be3459c1d79613f153b35d8\"\n },\n \"request\": {\n \"as_received\": {\n \"domains\": [\n \"agent\"\n ],\n \"keys\": [\n \"verbosity\"\n ],\n \"min_confidence\": 0.5,\n \"since\": \"2026-09-21T09:00:00.000Z\"\n },\n \"canonical\": {\n \"domains\": [\n \"agent\"\n ],\n \"max_level\": \"L3\",\n \"keys\": [\n \"verbosity\"\n ],\n \"declared_only\": false,\n \"min_confidence\": 0.5,\n \"since\": \"2026-09-21T09:00:00Z\"\n }\n },\n \"response\": {\n \"disclosure\": \"disclosure-active-key\",\n \"response_hash\": \"sha256:e8e97850dd88e69aed71137cce47beced665e53e793694fb984874032368bf79\"\n }\n }\n ]\n}\n", "core/a01-scope-and-layering.md": "# A1. Scope, status and layering\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nAutonym specifies a person-controlled context record, explicit recipient grants, progressive disclosure, accountable reads and portable records. It is provider-independent: a compatible recipient implements this protocol rather than an integration unique to one host.\n\nThis is document **1.0-draft-1**, specifying proposed wire version **1.0**. It is a complete publication of the current draft scope, open to interoperability review. It is not a ratified standard, a released server, a certification or a promise that an integration exists. The [implementation and conformance status](../conformance/README.md) distinguishes executable contract checks from missing service behaviour.\n\nRFC 2119 and RFC 8174 capitalised MUST, MUST NOT, SHOULD and MAY identify requirements. Requirements apply to the capabilities an implementation claims, with the shared security requirements applying to every capability. Every normative section maps to the stable checks in [the conformance manifest](../conformance/profiles.json). Pending runtime checks mean unverified implementation, not permission to ignore a requirement.\n\n## A1.1 Normative material\n\nThe normative publication consists of the core chapters A1 to A11 and A14 to A17 in `core/`, the normative bindings in `bindings/`, the core vocabulary, JSON Schemas, OpenAPI, MCP tool definitions and conformance requirements. A12, A13 and continuous connectors are informative placeholders in `core/reserved/` for capabilities reserved for 2.0; they carry no requirements, and the version 1 rules A12 and A13 used to state now live in A2.1, A6.8 and A17.6. The consent, temporary-context and reciprocity requirements first published as A18 are folded into A4, A6, A14 and A17. Prose defines cross-object and stateful invariants which JSON Schema cannot express. An implementation MUST satisfy both. Synthetic examples are informative; their illustrative signature bytes are not cryptographic test vectors.\n\nUnknown fields at a defined wire boundary MUST be rejected. Keys absent from the released core vocabulary MUST be rejected unless a separately versioned future extension is negotiated; there is no permissive arbitrary-JSON entry lane.\n\n## A1.2 Layers and release boundary\n\n- The record model and vocabulary describe what is stored and the approved renderings.\n- The compiler intersects the current stored grant, request, vocabulary and temporal selection.\n- OAuth, DPoP and discovery establish recipient authority and protected-resource audiences.\n- REST and MCP carry the same objects and use the same counted read transaction.\n- Receipts, revocation, purge and portability describe the lifecycle after disclosure.\n\nVocabulary 1.1 contains 30 keys across all 17 proposed domains, retaining the original 27 keys from vocabulary 1.0. This intentionally bounds the first interoperable release. Keys outside this vocabulary require a later specification. Version 1 defines Core, Write, Portable and Delegated provider capabilities and Read, Contribute and Reciprocal recipient capabilities.\n\nCredential presentations, recipient registries, guardian/duress operation and emergency cards are reserved extensions outside v1 conformance. Their chapters state the boundary and safety requirements for future work. Implementations MUST NOT advertise those reserved capabilities as conforming v1 features. Person-facing management UI and private management API routing are implementation choices; portable entries and owner-visible rights remain normative. The public recipient API is fully described in A8 and B4.\n\n## A1.3 Existing standards\n\nAutonym uses OAuth metadata and token formats, PKCE, DPoP, JSON Schema, JSON Web Signatures, JSON Canonicalization Scheme, Problem Details and MCP. It does not invent replacement cryptography or claim clinical, legal or identity certification from use of those standards. Links to primary specifications appear with the relevant contracts.\n\nThe grant model is defined here and in A6, independently of any one authorisation protocol. Open Personal Context Core stays meaningful without PDPP: [B1](../bindings/B1-pdpp.md) is the normative 1.0 grant binding, not a dependency of the model. A provider that does not offer B1 still implements every core requirement, and a change to PDPP changes B1, not the core.\n\nChecks: all applicable [conformance requirements](../conformance/profiles.json), particularly CLAIM-01 and WIRE-01.\n", "core/a02-actors-and-trust.md": "# A2. Actors and trust model\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nThe provider is an OAuth protected resource and normally its own authorisation server; an implementation may split these while preserving issuer and audience boundaries. The person chooses the provider and controls consent from an authenticated first-party session.\n\nClients are registered as `assistant`, `assistant_unverified`, `service`, `connector` or `self`. Registration evidence, not the client's own assertion, determines the class. A client is `assistant` when the operator's assistant allowlist names the host of its Client ID Metadata Document or, for a client registered without one, names exactly every redirect URI it registers. A client that registers or publishes a loopback redirect URI is never `assistant`, by either path and whatever the allowlist names, because any program on the person's device can receive a redirect there, so the client's identity cannot be assured (RFC 8252 section 8.6). A redirect URI is a loopback URI when its host, as a URL parser reads it, is `localhost`, a name ending in `.localhost` or a loopback address, whatever its scheme. Any other public client, one that does not authenticate to the token endpoint, is `assistant_unverified`; a confidential client that authenticates with a key it registered (A6.1) is `service`. Only the operator assigns `connector`, and only the provider's own first-party clients are `self`. No class uses Bearer tokens: every access token is bound to the client's DPoP key (A6.3). Version 1 has no certified registry tiers.\n\nA client's class limits the grants it may hold (A6.2), and a request beyond them fails OAuth `invalid_scope`:\n\n| Class | Grant kinds | Capability scopes | Longest grant |\n| ---------------------- | --------------------- | ------------------------------------ | ----------------- |\n| `assistant` | Read and contribution | `autonym:propose`, `autonym:confirm` | No limit by class |\n| `assistant_unverified` | Read and contribution | `autonym:propose` | 30 days |\n| `service` | Read and contribution | `autonym:propose`, `autonym:confirm` | 72 hours |\n| `connector` | Contribution only | `autonym:propose` | No limit by class |\n| `self` | None | None | None |\n\nAn `assistant_unverified`, `connector` or `self` client never holds `autonym:persist` or `autonym:delegate`; whether an `assistant` or `service` client may hold either is the provider's policy for that client. A `self` client holds no grant: the person's first-party capabilities (A6.2) are not issued through the grant flow. The `assistant` class the allowlist gives and the operator's own classification are the only trust signals a class carries. Every client that is not `assistant` and that the operator has not classified appears at consent with a warning that it is unverified, whatever its class.\n\nThe provider is trusted to store/encrypt correctly, enforce grants and preserve audit evidence. The protocol does not cryptographically prevent a malicious provider from reading information it processes. Operators must have no routine decrypt-arbitrary-records interface. Device compromise, recipient copies and off-platform misuse remain outside what a grant can prevent.\n\nThe principal threats are token theft, widened/stale authority, overspent counters, unsafe inference, hidden identifier leakage, contributor replay, expired temporary context, malicious record text, compromised URL fetches and misleading portability claims. Controls are specified in A3 to A17 and the bindings. Pairwise handles reduce direct linkage; L0 is not a promise of anonymity. Purge evidence is not proof of deletion. Duress and guardian controls require future designs and cannot be claimed as v1 protection.\n\n## A2.1 Recipient registries and trust evidence\n\nA registry can provide evidence about a recipient, but cannot grant access to a person's record. The provider's stored grant remains authoritative. Names, logos, registration metadata and client assertions are not certification. Registry unavailability cannot silently increase permission. If a future grant depends on active trust evidence, unverifiable, expired or suspended evidence fails closed. No recipient registry may expose another recipient relationship or the person's destination provider.\n\nChecks: CORE-01, PAIR-01, CLAIM-01, OAUTH-01, CONSENT-01 and the cross-cutting controls in A15.\n", "core/a03-identifiers-and-resolution.md": "# A3. Identifiers, handles and resolution\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n## A3.1 Owner and recipient identifiers\n\nInternal record, partition and entry identifiers use the prefix and ULID grammar in [identifiers](identifiers.md). They are owner-management and export identifiers. The legacy wire term `profile_id` means a partition of the person's record; it is not a commercial dossier.\n\nRecipients MUST NOT receive a record DID, canonical entry ID, owner identifier, another client's handle or another client's grant identifier through ordinary reads. Version 1 portability uses the signed export and preserves canonical entry IDs. Person-held record keys and public DID host bindings are reserved for a separately specified extension, not a dependency of Core or Portable.\n\n## A3.2 Pairwise handles and entry aliases\n\nSyntax: `autonym:@`. Newly issued pairwise locals are exactly 32 lower-case RFC 4648 base32 characters, without padding. The authority is the configured lower-case ASCII DNS hostname, with no port, user information, path or trailing dot. An IP address is never an authority, and neither is a name whose last label is all digits or `0x` followed by hexadecimal digits, since URL parsers read such a name as an IPv4 address. The handle pattern in the published schemas checks only the syntax of the authority's labels, so it also accepts such names. A valid shape example is `autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example`.\n\nEach record partition has a dedicated random 256-bit handle key. Generate the local part as the first 32 characters of lower-case, unpadded RFC 4648 base32 of HMAC-SHA256 over UTF-8 RFC 8785 canonical JSON:\n\n```json\n{\n \"purpose\": \"autonym.handle.v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"rotation\": \"00000000-0000-4000-8000-000000000001\"\n}\n```\n\n`client_id` is the exact registered identifier, not a normalised URL or display name. `rotation` is a newly generated lowercase UUIDv4 per recipient rotation. Check uniqueness before committing issuance. A collision requires a fresh rotation and retry. HMAC keys are never shared with recipients or exported to a new provider.\n\nRecipient entry references use `rent_` followed by all 52 base32 characters of HMAC-SHA256 under the same dedicated key, over JCS of `{purpose:\"autonym.entry.v1\", client_id, rotation, entry_id}`. The different `purpose` separates the two uses. Rotation atomically changes handles and aliases, invalidates old grants/tokens and starts required purge processing. Never expose canonical IDs through provenance, dependencies, errors, ETags or diagnostic counts.\n\nThe older 12-to-32-character parser grammar remains accepted for reading historical owner material. New wire objects use the exact 32-character contract. Public handles are optional: 3 to 30 ASCII characters, lower-case letters and digits with single internal hyphens. No leading, trailing or consecutive hyphens. Claiming one requires re-authentication, rate limits, a reserved-name list, one public name per partition, a 30-day change cooldown and a 12-month release quarantine. A public name provides a provider address for consent; it MUST NOT yield record contents, a DID or evidence that the person exists to unauthenticated enumeration. Token subjects remain pairwise.\n\nPairwise identifiers prevent identifier-based cross-recipient joins; they do not make context anonymous or prevent correlation using facts already disclosed.\n\n## A3.3 Discovery\n\n`GET /.well-known/autonym` returns [the discovery schema](../schemas/discovery.json): protocol version, configured issuer and authorisation server, the trusted JWKS URI of the provider's A5.4 key set, enabled REST/MCP endpoints and an honest role-specific capability declaration. Disabled surfaces are `null`. No person's identifier or record information appears in discovery. The schema example in [protocol examples](../examples/protocol.json) illustrates capability claims, not a deployed service.\n\nOAuth protected-resource metadata is separate and follows A6. Clients resolve the host from a user-supplied handle or configured provider, validate HTTPS and metadata origin, and never trust request forwarding headers as the provider's identity. Every fetch of an untrusted client/provider URL must use SSRF-safe retrieval with DNS/address checks, size/time limits and revalidation at each allowed redirect.\n\n## A3.4 Migration\n\nMigration transfers an owner-approved export into a new provider. Canonical owner IDs can be preserved, but the new provider creates fresh pairwise keys, handles, aliases and authority. Imported grants are history only. The person reauthorises each recipient against the new audience.\n\nThe old provider MUST NOT redirect authenticated API or token requests to a different origin, forward credentials, or reveal the destination to contributors. Destination notifications are separately approved per recipient. An optional public-handle web redirect requires separate explicit approval and carries no credential or personal data. Purge instructions and acknowledgements continue at the old provider until settled; the new provider cannot acknowledge deletion of the old provider's disclosures.\n\nChecks: PAIR-01, CORE-01, PORT-01, HANDLE-01, MIGRATE-01, FETCH-01. Fixed synthetic [framing vectors](../examples/identity-framing.json) give canonical bytes, HMAC digest, base32 and final identifiers. Independent cryptographic interoperability remains a runtime release gate.\n", "core/a04-data-model.md": "# A4. Data model\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n## A4.1 Entries and vocabulary\n\nThe exact stored/exported entry is defined by [entry.json](../schemas/entry.json), with complete synthetic examples in [protocol.json](../examples/protocol.json). Fields include an internal ID and immutable version, partition, domain/key, typed value, semantic kind, provenance, temporal interval, optional overlay, approved rendering, status and origin. Safety and sensitivity come from the trusted vocabulary, never contributor-supplied flags.\n\n`context_kind` is `fact`, `preference` or `state`, independent of provenance. Facts describe a declared or evidenced condition. Preferences express choices. States describe bounded current circumstances. `value_type` must match the key definition, and `value` must pass that key's closed schema. The larger type-name enum reserves future types; it does not admit unregistered keys. [The vocabulary](../vocabulary/core.json) specifies types, cardinality, levels, renderers, flags, labels, explanations and per-level examples for every v1 key.\n\nA change creates a new immutable version. Older versions remain history under owner retention policy. `active`, `superseded` and `archived` are stored value statuses; expiry is computed from time, not a status that depends on a worker. Deletion creates a separate non-content [tombstone](../schemas/tombstone.json) with ID/version/partition/domain/key and deletion time; it carries no value or evidence. A tombstone's version is one more than the last version of the entry it deletes, so no ID and version name both a version and a tombstone, and an earlier version keeps the status it was written with. Record erasure additionally follows owner retention and applicable obligations; retaining a tombstone does not permit retaining the deleted value indefinitely. A partition holds at most 10,000 entries that have not been deleted, which bounds what one read compiles; a write that would add another fails with `entry_limit_reached` and changes nothing. No agent operation adds an entry: a contribution is acknowledged as a proposal whatever the partition holds (A14), so only the person's own operations, such as accepting a proposal in the first-party app or an import, meet the limit.\n\n## A4.2 Provenance\n\n`declared` means the person entered or explicitly confirmed the exact statement; it requires `confirmed_at`. `observed` covers sourced observations/inferences, requires source identity, occurrence and ingestion times, confidence, and a finite validity end no later than 90 days after ingestion. `derived` names every input ID, version and actual field/level used. `attested` is reserved for future credential verification and MUST be withheld from v1 recipient disclosure unless the person separately confirms a declared entry.\n\nSource identity is evidence of origin, not truth. Review of a contribution does not automatically relabel it as declared. Preserve source event identity and evidence after confirmation; never disclose that evidence merely because the confirmed preference is shareable.\n\nSpecial-category and safety-critical keys MUST NOT be observed or inferred. `inferable:false` is absolute; a domain toggle cannot override it. Imported sensitive suggestions remain protected proposals until exact confirmation in the first-party app. Confidence is not consent.\n\n## A4.3 Temporal intervals\n\nWire instants are UTC RFC 3339 instants with `Z`. Instants compare by the time they denote, at full fractional precision, not by their bytes: `2026-09-21T00:00:19.9999Z` and `2026-09-21T00:00:19.999900000Z` are the same instant. Date-only entry is a UI convenience: the UI resolves the selected timezone and daylight-saving ambiguity before storing an instant. A month means the selected local calendar interval, not an assumed number of seconds. Version 1 has no recurrence rule.\n\nUse one provider `Clock` instant for the entire read transaction. Eligibility is `valid_from <= now < valid_until`. Null start means no lower bound; null end means no upper bound. Reject equal or reversed finite bounds. A `state` and every overlay require a finite end. Future entries do not appear early. Manual archive/disablement takes effect on the next read. Entry validity and grant validity are checked independently.\n\nStaleness is informational: `confirmed_at` older than 365 days, or 90 days for safety-critical keys, sets `stale:true`. Never infer that a stale allergy has ceased. An expired temporary fact is omitted; any independently eligible standing safety fact remains.\n\n## A4.4 Baselines and temporary overlays\n\nAn overlay is a separate preference entry with `overlay:{target_entry_id,enabled,selected}`. The target must be an active baseline in the same partition/domain/key. Version 1 allows overlays only for single-cardinality, non-sensitive, non-safety preferences. The person explicitly enables it; enabling it is separate from making it permanent. Overlay creation or expiry MUST NOT supersede or alter the baseline.\n\nOverlays apply only to the baseline that is eligible and selected for its key at that instant; the overlays of any other baseline are neither disclosed nor considered. Selection counts only the eligible enabled overlays for that baseline: a selection on an overlay that is not eligible under A4.3, or not enabled, neither wins nor counts against another overlay. Among the eligible enabled overlays, one explicitly selected overlay wins. If none of them is selected and exactly one is eligible, that one applies. If several are eligible without one selection, or several of them are marked selected, apply none and use the eligible baseline until the person resolves the conflict. A choice atomically clears competing selections for that target. Do not resolve these conflicts using insertion order or confidence. The overlay is chosen from the record before the grant and request are applied, so a winning overlay that the grant or request withholds is omitted, and the baseline it replaces is never disclosed in its place.\n\nFasting and holiday context are additive, time-bounded states. Reduced walking after injury is a temporary safety-related fact, not permission to replace a standing requirement. A month without alcohol can temporarily replace a standing drink preference. These choices do not automatically reveal why, where or with whom.\n\nFor ordinary baseline conflicts, the person's declared value takes priority over observed/derived candidates. Multiple incompatible declarations require the person's choice before replacing the current selected baseline. Imports do not silently choose one. Many-cardinality keys retain individually eligible entries. All safety-critical keys are many-cardinality so several allergies, alerts or needs coexist; replacing one cannot remove another.\n\n## A4.5 Derivations\n\nAt disclosure, recursively validate every dependency's current version, validity, purpose, grant rights and actual fields/level used. Domain permission alone is insufficient: permission for an L1 summary does not authorise deriving from hidden L3 identifiers. Reject cycles, depth above 16, more than 256 dependency references, absent inputs and stale versions. The limit counts every reference traversed from the disclosed entry, along every path and without de-duplication: an input reached by several paths, or named more than once, counts each time it is reached, and so do its own references. Recompute or withhold on any change or expiry. Never disclose dependency identifiers or raw source history through a preference read. In v1, dependency field references are `value` for the whole stored value or `value.` for one named own member of a structured value. Nested paths, array indexes, wildcards, metadata and unknown members are unsupported and MUST be withheld. The required level must support the actual referenced field: a category or approved text override does not authorise its raw source value; a first-name rendering authorises `value.first`, not `value.full` or the whole name. Dependencies are checked under the same grant purpose and the request's level, declaration and confidence restrictions. The request's output domains and keys need not name an input, but the stored grant must permit it.\n\nA separately confirmed declared preference can be shared independently of raw history. That is an explicit confirmation decision; accepting a stream or trusting a contributor does not perform it.\n\n## A4.6 Temporary context\n\nThe precise representation is A4's semantic kind, UTC interval and optional baseline-targeting overlay. A temporary overlay requires a finite end and explicit activation. A fasting period or holiday is a bounded additive state; a month without alcohol is a drink-preference overlay. Grant expiry and entry expiry are independent.\n\nThe provider captures one trusted instant per transaction. Start is inclusive and end exclusive. Future context is withheld until its start; expired or disabled context stops on the next read without waiting for a cleanup job. The person's timezone is resolved when turning dates into instants. Version 1 deliberately omits recurrence; the person confirms each new interval.\n\nAn overlay never rewrites the standing preference. When it ends, the eligible baseline returns. It cannot weaken a safety fact. A single eligible enabled overlay applies without a selection. Conflicting overlays require the person's choice; while several eligible overlays compete without exactly one of them selected, use the baseline (A4.4). Turning a temporary preference into a lasting one is a separate explicit action.\n\nDependencies, derived values and caches cannot preserve an expired temporary state. Disclosure validity includes the next relevant time boundary; a bodyless conditional response cannot renew it. Permanent history, deletion and a recipient's previously received copy are separate lifecycle questions.\n\nChecks: DISC-01, TEMP-01 to TEMP-03, CONTRIB-01 to CONTRIB-03, INFER-01, WIRE-01, PORT-01.\n", "core/a05-disclosure.md": "# A5. Disclosure and the compiler\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n## A5.1 Levels\n\n| Level | Maximum permitted detail |\n| ----- | --------------------------------------------------------------------------------- |\n| L0 | The key's closed `l0_category` code only; no value |\n| L1 | Identifier-free values, including non-identifying structure and broad age bands |\n| L2 | L1 plus first names and only the additional structure the key explicitly supports |\n| L3 | The full permitted value |\n\nNames, exact dates of birth, detailed addresses, phone/email, account/loyalty numbers, employer and institution names MUST NOT appear at L1. Free text at L1 or L2 requires the person's identifier-safe approved rendering; omit it if absent. Automatic redaction is not approval. Structure by itself does not imply a higher level: safe roles and age bands may be structured at L1. L0 is reduced detail, not anonymity or ambient permission.\n\n## A5.2 One compiler and transaction\n\nThe [context request](../schemas/context-request.json) has one optional `max_level`, default L3, applied independently to each requested domain. Omitted `declared_only` is false, `min_confidence` is zero. The request cannot widen the stored grant. Explicitly ungranted domains fail with `domain_not_granted`, without revealing whether they contain entries. Keys are the intersection of request, grant and vocabulary; unknown or ungranted keys do not reveal existence.\n\nFor each requested domain, select the highest vocabulary-supported level at or below both ceilings. If none exists, omit the entry. Effective `declared_only` is grant OR request; minimum confidence is the maximum of both. A declared-only read includes only exactly confirmed declared entries in v1. Restrict provenance evidence separately. For this filter, an exactly confirmed declaration has effective confidence 1; other eligible provenance uses its recorded confidence, with null treated as zero. This is a filtering convention, not proof that a statement is true.\n\nWithin one transaction: authenticate the client, validate token audience/sender proof, lock and recheck the grant and counters, capture trusted time, select eligible baselines/overlays, enforce dependencies, render, create and sign the envelope, append its receipt, increment the counter, commit, then return. A revoked, expired or exhausted grant fails `grant_revoked`, `grant_expired` or `grant_exhausted`. Signing failure, receipt failure or commit failure returns `internal_error` and no disclosure. Concurrent reads cannot overspend a limit. All surfaces call this same transaction.\n\nSafety-critical entries sort first, then declared, observed and derived; ties sort by domain, key and recipient alias. No recipient envelope carries hidden-entry counts, omission reasons, internal IDs or full evidence. A domain list exposes only granted keys that could currently be disclosed, and has no counts.\n\n`since` is a UTC change filter, not permission to reuse indefinitely. It includes entries whose selected value or temporal eligibility changed since the instant, including baseline restoration. Always include currently eligible safety-critical entries even when older. Implementations MAY conservatively include otherwise eligible entries when their selection group or dependency group changed; they MUST NOT omit restored eligibility because the baseline's stored value was unchanged. Deletion and explicit selection changes that are no longer represented in current entries require trusted change evidence from storage. A client must obtain a full fresh read after a previous envelope expires; a partial response does not renew missing entries.\n\n## A5.3 Signed disclosure\n\n[disclosure.json](../schemas/disclosure.json) is the exact response. Entries are a flat array with domain/key and client-bound `rent_` identifiers. The signature binds provider (the issuer URL discovery publishes, A3.3), protected-resource audience, client, handle, grant ID/revision, purpose, read ID, issue time and absolute `valid_until`. Example bytes in [protocol.json](../examples/protocol.json) are synthetic and intentionally not a verifiable signature.\n\n`valid_until` is the earliest of grant expiry, any disclosed entry/dependency expiry, the next eligible overlay/selection time boundary affecting the result, and five minutes after issue. `ttl_seconds` is the nonnegative whole-second interval to that deadline, rounded down. Even an empty response expires at the next relevant selection boundary. Use `Cache-Control:no-store`; recipients may retain transient context only until this deadline unless a separate persistence right exists.\n\nPersistence authorises retention, not continued use of an expired temporary fact as current context. A recipient must stop treating an entry as current at the signed deadline and refresh through a new authorised read. `persist_until` is null without explicit permission and never exceeds grant expiry. No onward-sharing right exists in v1.\n\n## A5.4 Signature representation\n\nSign UTF-8 [RFC 8785 canonical JSON](https://www.rfc-editor.org/rfc/rfc8785) of the complete object without `proof`. Use ordinary base64url payload mode with [RFC 7515 Appendix F detached compact JWS](https://www.rfc-editor.org/rfc/rfc7515#appendix-F): `protected..signature`, each part in unpadded base64url and in no other spelling of the same bytes. The protected header has exactly three members: `alg:ES256`, `kid` and `typ`, which is `autonym-disclosure+jws` for a disclosure and the value the signing section names for any other object. Unencoded-payload mode is not used. Receipts (A9), purge acknowledgements (A10) and exports (A11) are signed the same way. Each signed object has one signed time: `issued_at` for a disclosure, `at` for a receipt or purge acknowledgement, `exported_at` for an export, and `iat` for the purge instruction token (A10). A signature is not an identifier: ECDSA admits more than one valid signature over the same bytes, so signed objects are compared without `proof`.\n\n**Key IDs.** A `kid` is the [RFC 7638](https://www.rfc-editor.org/rfc/rfc7638) JWK thumbprint of the public key: SHA-256 over its required members `crv`, `kty`, `x` and `y`, in canonical unpadded base64url: 43 characters, the last of which carries two unused bits that are zero. A key ID therefore names exactly one key and cannot be reused for a different key.\n\n**Key sets.** A provider publishes its verification keys at the discovery `jwks_uri` as an [RFC 7517](https://www.rfc-editor.org/rfc/rfc7517) JWK set following [key-set.json](../schemas/key-set.json). Each key has `kty:EC`, `crv:P-256`, `x` and `y` (each 32 bytes in canonical unpadded base64url, so one key has one key ID), `kid`, `alg:ES256` and `use:sig`, and no private member. A provider's signing key belongs to that provider alone and MUST NOT appear in another provider's key set, so that a valid signature identifies one provider whatever the signed object names (KEY-01). A retired key also has `exp`, the JWK parameter registered by [OpenID Federation 1.0 section 8.7.2](https://openid.net/specs/openid-federation-1_0.html#section-8.7.2): a whole number of seconds since 1970-01-01T00:00:00Z, the first instant at which the key signs nothing. It stays in the set, with the same `exp`, so that what it signed earlier still verifies (A9). No other key lifetime member is used: a key that carries `nbf`, `iat` or `revoked` is not used to verify anything. The keys a recipient registers to sign purge acknowledgements follow the same rules.\n\n**Canonical instants.** Every instant a provider writes into an object it signs or hashes has one spelling: UTC with `Z`, seconds always present, and fractional seconds only when they are not zero, without trailing zeros, for example `2026-10-02T19:00:00Z` or `2026-10-02T19:00:00.25Z`. Precision is never reduced. Equal instants therefore give equal bytes, and a deadline's spelling reveals nothing beyond the instant itself. Instants compare by the time they denote; a verifier does not reject an instant for its spelling.\n\n**Verification.** Parse the received text strictly before canonicalisation: reject duplicate members, with names compared after escapes are decoded, and anything that is not [I-JSON](https://www.rfc-editor.org/rfc/rfc7493), including a lone surrogate or noncharacter and a number written with more magnitude or precision than an IEEE 754 binary64 value provides: one whose decimal value differs from that of the shortest decimal identifying the binary64 value it parses to, such as `1E400` or `3.141592653589793238462643383279`, while `0.1` and `1e23` are accepted. A verifier bounds the size and nesting of what it parses (A15.3), and may refuse a member named `__proto__`, which no object here defines and which common JSON libraries handle inconsistently. Verify the signature over the canonical form of the parsed object without `proof`. Accept only ES256 and a key from the trusted, configured key set of the issuer: the configured provider for a disclosure, receipt, export or purge instruction, and the recipient's registered keys for an acknowledgement. Once an export verifies against the configured key set of the provider it came from, its `public_keys` are the trusted key set, and its `origin_host` the trusted issuer, for the receipts it carries (A11), which is how a receipt signed before a key rotation verifies from the export alone (A9). A carried receipt that names another provider is verified only against that provider's own configured key set, or reported as unverified history. A trusted issuer is never taken from the object being verified. Select the one key whose `kid` equals the protected header's, never a key or key URL that the object or its header supplies, and recompute its thumbprint. Reject:\n\n- any protected header member other than `alg`, `kid` and `typ`, including `crit`, `jwk`, `jku`, `x5u` and `b64`, and any duplicate header member;\n- `alg:none` and every algorithm other than ES256;\n- a `typ` that differs from the expected value, compared exactly;\n- proof metadata whose `alg` or `kid` disagrees with the protected header;\n- a key ID that is not in the trusted set, appears in it more than once, or is not the thumbprint of its key;\n- a matching key that does not follow [key-set.json](../schemas/key-set.json), such as one with a private member, `key_ops` or a lifetime member other than `exp`;\n- a signed object whose signed time is at or after the instant the matching key's `exp` denotes (A9, KEY-01);\n- a disclosure or receipt whose `provider`, or an export whose `origin_host`, is not the trusted issuer, compared as exact strings;\n- a receipt whose `hash` is not the A9 hash of its own content;\n- a disclosure whose `valid_until` is not after `issued_at`, is more than five minutes after it, or disagrees with `ttl_seconds`; one whose `issued_at` is more than 60 seconds after the verifier's trusted current time, the most the two clocks may differ; and one whose `valid_until` is not after the verifier's trusted current time.\n\nCheck every other signed binding as well, such as the client, audience, handle and grant of a disclosure. A valid signature alone does not establish current grant authority.\n\nSD-JWT credential presentations are reserved for a later version and cannot be claimed by Core implementations.\n\nChecks: DISC-01, SIGN-01, KEY-01, CORE-01, LOG-01, LOG-02, TEMP-02, TEMP-03, CONTRIB-03.\n", "core/a06-authorisation.md": "# A6. Authorisation\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nThis chapter states the authorisation requirements against the abstract grant model, independently of any one authorisation protocol. Open Personal Context Core stays meaningful without PDPP: [B1](../bindings/B1-pdpp.md) is the normative 1.0 grant binding, not a dependency of the model. B1 maps these requirements onto PDPP Core; where B1 and this chapter differ, this chapter wins.\n\n## A6.1 Discovery and registration\n\nProviders MUST serve a path-specific [RFC 9728](https://www.rfc-editor.org/rfc/rfc9728) metadata document for each protected resource they serve, at the location RFC 9728 section 3 derives from its resource identifier, such as `/.well-known/oauth-protected-resource/mcp` and `/.well-known/oauth-protected-resource/v1`, and authorisation-server metadata under RFC 8414. There is no document at `/.well-known/oauth-protected-resource` itself: its `resource` would be the origin, which is not an audience. Each document names the issuer in `authorization_servers`, sets `dpop_bound_access_tokens_required` to true and lists `ES256` in `dpop_signing_alg_values_supported`. Metadata names the configured issuer, never an untrusted Host or forwarding header. Authorisation responses include the RFC 9207 `iss` parameter.\n\n`/mcp`, `/v1` and the resource of each binding a provider offers, such as the PDPP resource of B1.2, are distinct audiences. An unauthenticated response includes a `WWW-Authenticate` challenge pointing to the requested resource's metadata. Client ID Metadata Documents are the primary registration mechanism for unknown clients; static registration supports first-party clients and RFC 7591 dynamic registration remains available to any client for compatibility. Metadata fetching requires exact client-ID matching, redirect checks and SSRF-safe retrieval. A client cannot self-assign a trusted class or certification.\n\nRegistration metadata, sent to the registration endpoint or published as a Client ID Metadata Document, has the members of [client-metadata.json](../schemas/client-metadata.json) or [client-metadata-document.json](../schemas/client-metadata-document.json): RFC 7591 members and `autonym_purge_uri`, the HTTPS URL to which purge instructions are delivered (A10). A client's keys are given inline in `jwks` under the A5.4 key-set rules: ES256 public keys whose key IDs are their RFC 7638 thumbprints, used for `private_key_jwt` client authentication and purge acknowledgements. The token endpoint authentication method is `none` for a public client or `private_key_jwt` for a confidential one; no client secret is issued or accepted. `private_key_jwt` needs `jwks`; `client_credentials` is only for a client that authenticates with `private_key_jwt`; `refresh_token` comes only with `authorization_code`, which goes with the `code` response type and at least one redirect URI; and redirect URIs, grant types and key IDs are each unique. A client that uses the A6.4 token exchange lists `urn:ietf:params:oauth:grant-type:token-exchange` in `grant_types`, and one that redeems a grant offer lists `urn:autonym:params:oauth:grant-type:grant-offer`; a grant type the provider does not offer is refused. A client that lists the grant offer grant type authenticates with `private_key_jwt`, as one that lists `client_credentials` does, because only its registered key shows that it is the client a grant offer names (A6.4); a public client may still use the token exchange as a delegate. A redirect URI is an HTTPS URL, or an `http` URL at `127.0.0.1`, `[::1]` or `localhost`, without a fragment, and a port in any URL is between 1 and 65535. A Client Identifier URL has no `.` or `..` path segment, written plainly or percent-encoded, and its host is a name whose last label is neither all digits nor `0x` followed by hexadecimal digits, which URL parsers read as an IPv4 address. `client_name`, `contacts`, `software_id` and `software_version` carry only characters of the Basic Multilingual Plane, and no control character, bidirectional formatting character, line or paragraph separator, interlinear annotation character or default-ignorable character, one that renders as nothing, such as a zero-width space, a soft hyphen, a Hangul filler or a variation selector. Characters outside the Basic Multilingual Plane are refused because they include the tag characters, which can carry hidden text, and a regular expression that reads text in 16-bit code units, as JavaScript's does, cannot tell those from the rest. `jwks_uri`, `sector_identifier_uri`, `application_type`, a software statement, a registry attestation and any member the schema does not list are refused, so a registration is never accepted with members silently dropped; whether a client may use the loopback-port exception is decided from its redirect URIs (A6.3). The registration endpoint answers RFC 7591 `invalid_redirect_uri` or `invalid_client_metadata` for metadata it refuses, and answers 429 `rate_limited` in the RFC 7591 error form to a source that registers too often.\n\n## A6.2 Scopes and separate grants\n\n[scopes.json](../scopes.json) and [scope grammar](scopes.md) define the existing `autonym:` syntax, ten purpose categories and exactly one purpose. A purpose alone gives no read, contribution, persistence or delegation right. Any accepted `:declared` modifier makes the entire stored grant declared-only, including wildcard combinations; use separate grants for different declaration restrictions. Explicit domain ceilings take precedence over wildcard L0. Scope parsing is syntactic; the issuance policy additionally rejects a mixed read/contribution grant.\n\nEach capability scope has one meaning at issuance ([scope grammar](scopes.md)): `autonym:propose` requests a contribution grant, and `autonym:confirm` sets its `allow_confirmation`; `autonym:persist` permits a read grant's `persist_until`, and `autonym:delegate` sets its `allow_delegation`. `autonym:confirm:safety`, `autonym:write:declared`, `autonym:log:read` and `autonym:manage` belong to the person's own first-party clients and are never issued to a recipient. `openid` and `offline_access` are not Open Personal Context scopes, so a request naming either is refused like any other unknown scope. A request that mixes read and contribution, asks for a capability of the other grant kind or asks for one its client's class cannot hold (A2) fails OAuth `invalid_scope`; a contribution detail that does not follow its schema, or repeats a domain or a key, fails RFC 9396 `invalid_authorization_details`.\n\nA contribution grant is requested with `autonym:propose`, exactly one purpose scope and one RFC 9396 `authorization_details` entry of type `urn:autonym:authorization-details:contribute` ([contribution-detail.json](../schemas/contribution-detail.json)), which names the domain and key allowlist, `max_events` and `allow_confirmation`. `allow_confirmation` is true exactly when `autonym:confirm` is requested; a detail that says otherwise fails RFC 9396 `invalid_authorization_details`, so the class limits on `autonym:confirm` (A2) also bound the detail. The provider generates its `stream_id` at issuance. A contribution grant is never a PDPP grant (B1.1).\n\nThe [grant schema](../schemas/grant.json) is a discriminated `read` or `contribute` object. A read grant names domain ceilings and explicit keys, declared-only/confidence restrictions, maximum reads, retention and delegation choice. A contribution grant names an explicit domain/key allowlist, event count and confirmation permission. They have distinct IDs, approval, tokens and revocation. Neither implies the other. An operation that the authenticated grant's kind or permissions do not allow fails `capability_not_granted`. Contributor tokens can inspect only their current grant and their own submission status.\n\nThe stored grant is authoritative for restrictions, status, expiry, counters and revision. Token scope and copied claims are advisory. Every read, including L0 and a conditional request, rechecks it. A revision changes whenever authority changes. `expires_at` must be after issuance; read/event counts cannot exceed their maximum. Persistence cannot exceed grant expiry. A wildcard is allowed only as a read domain at L0, never for contribution or advertising; wildcard permission is expanded against the current core vocabulary and remains subject to grant review. Every grant has exactly one audience, the resource it was requested for, and its tokens are valid only there. A grant is continuous when it can serve more than one action: a read grant whose `max_reads` is above 1, or a contribution grant whose `max_events` is above 1.\n\n## A6.3 Consent and tokens\n\nUse authorisation code with PKCE S256 only; reject plain/downgrade. Require exact registered redirect-URI matching, with only the RFC 8252 loopback-port exception, which applies only to a client whose registered redirect URIs are all `http` loopback URIs: a redirect to one of them may name any port. A client that registers any other redirect URI gets exact matching for every one. Codes are single-use and bound to client, redirect, resource, session and verifier. Use session-bound state, unframeable consent pages and rotating refresh tokens with replay detection. Refresh tokens are issued only for a continuous grant (A6.2), rotate on every use and never outlive the grant. A second use of an authorisation code or of a spent refresh token revokes the grant it belongs to, and that request fails OAuth `invalid_grant`. Consent shows the named recipient, purpose category and plain-language explanation, read or contribution permission, selected keys/levels, expiry, limits, retention and trust evidence. Each choice is independently revocable. Purpose changes require new consent. Refusing advertising cannot revoke an unrelated non-advertising grant. Recipient-side consent flags cannot substitute for the provider's decision.\n\nAccess tokens follow RFC 9068, with the claims of [access-token-claims.json](../schemas/access-token-claims.json): a JWT of `typ` `at+jwt`, signed with ES256 under the authorisation server's token keys, which are never A5.4 signing keys. Example claim fragment:\n\n```json\n{\n \"iss\": \"https://autonym.example\",\n \"aud\": \"https://autonym.example/v1\",\n \"iat\": 1789948800,\n \"exp\": 1789952400\n}\n```\n\nThese timestamps represent 21 September 2026 00:00 to 01:00 UTC. Full tokens also carry `sub`, the pairwise handle (A3.2); `client_id`; `jti`; `cnf.jkt`, the thumbprint of the client's DPoP key; `autonym_grant_id`; and `autonym_purpose`, the grant's purpose category. A token for a grant requested with scopes carries their canonical `scope`, and one for a grant requested with an authorisation detail carries `authorization_details`. `aud` names exactly one resource, the grant's. Access tokens last at most one hour and never beyond grant expiry. Refresh tokens cannot extend a grant. Check issuer, audience, signature, expiry and server-side grant on every authorised action.\n\nEvery access token, for every client class and every resource, is bound to the client's DPoP key under [RFC 9449](https://www.rfc-editor.org/rfc/rfc9449): no Bearer token is issued or accepted. A token request without a valid proof, or a pushed authorisation request with an invalid one, fails RFC 9449 `invalid_dpop_proof`, and one whose proof carries a stale nonce fails `use_dpop_nonce`, with a fresh nonce. A proof is accepted only once, and only within 60 seconds of its `iat`. At a resource, a bound token is sent as `Authorization: DPoP` with a proof that binds the method, the URL and the access token, signed by the key whose RFC 7638 thumbprint is the token's `cnf.jkt`; a proof signed by any other key fails `dpop_invalid`. Never accept a bound token as Bearer. A request to a resource without a proof fails `dpop_required`; an invalid, stale or replayed proof fails `dpop_invalid`. An `assistant_unverified` grant lasts at most 30 days and cannot persist, delegate or confirm. No third party receives `autonym:confirm:safety` or arbitrary declared-write authority.\n\nOAuth endpoints answer in their own error form. The authorisation endpoint and the pushed authorisation request endpoint (RFC 9126) return `invalid_request`, `invalid_client`, `unauthorized_client`, `access_denied`, `unsupported_response_type`, `invalid_scope`, `invalid_target`, `invalid_request_uri`, `invalid_authorization_details` or `server_error`. A request with `prompt=none` that needs the person returns `login_required`, `consent_required` or `interaction_required`. The token endpoint returns `invalid_request`, `invalid_client`, `invalid_grant`, `unauthorized_client`, `unsupported_grant_type`, `invalid_scope`, `invalid_target` or `server_error`. At a resource, a token whose signature, issuer, audience, type, lifetime or claims fail verification fails RFC 6750 `invalid_token` with status 401 and the A6.1 challenge. A verified token whose grant has ended, or whose client is suspended, fails that registered code instead (A5.2, A6.8).\n\n## A6.4 Standing rules and delegation\n\nDelegated is an optional provider capability. A standing rule is a person-approved exact match on client IDs or registry-independent approved classes, allowed purpose categories, domain/key/level limits, maximum duration, read count, declared-only/confidence and persistence. Unknown matching fields fail closed. The provider records the rule version, creates a real child grant and notifies the person. Version 1 standing rules cannot issue advertising or contribution grants automatically.\n\nA read grant may delegate only if its stored `allow_delegation` is true. The child can only narrow purpose, domains, keys, ceilings, confidence, expiry, retention and read limits. The child consumes a reserved portion of its parent's remaining read budget; no child can multiply authority. Revoke/expire the parent and all descendants become unusable. Depth is at most one; children cannot delegate again.\n\nAt the token endpoint, [RFC 8693 token exchange](https://www.rfc-editor.org/rfc/rfc8693) requires `grant_type=urn:ietf:params:oauth:grant-type:token-exchange`, `subject_token`, `subject_token_type=urn:ietf:params:oauth:token-type:access_token`, `requested_token_type=urn:autonym:params:oauth:token-type:grant-offer`, `scope`, `resource`, `autonym_recipient`, `autonym_purpose_text`, `autonym_expires_in` and `autonym_max_reads`. Authenticate the delegate and recheck its current grant. The request's DPoP proof is signed by the key whose thumbprint is the `subject_token`'s `cnf.jkt`, or the request fails OAuth `invalid_grant`. `autonym_recipient` names a client registered with the grant offer grant type, which therefore authenticates with `private_key_jwt` (A6.1); naming any other client fails, as a missing parameter does. Missing or widening parameters fail; no default broadening is permitted.\n\nThe response is `{access_token:,issued_token_type:\"urn:autonym:params:oauth:token-type:grant-offer\",token_type:\"N_A\",expires_in:300}`. The opaque offer contains at least 256 random bits, is stored hashed, expires after five minutes or parent expiry, and is not a resource token. The recipient redeems it through the RFC 6749 extension grant `grant_type=urn:autonym:params:oauth:grant-type:grant-offer`, `grant_code` and exact `resource`, authenticated as the target client with `private_key_jwt` and presenting its own DPoP key. Holding the offer is never enough to redeem it. Bind offer to target, audience and proposed child restrictions. Check parent, budget and one-use state again atomically at redemption. Invalid, used or expired offers return OAuth `invalid_grant`. The resulting access token has `act.client_id` naming the delegate. This exchange contract is an Autonym choice, not a claim that RFC 8693 defines grant offers.\n\n## A6.5 Revocation\n\n`POST /oauth/revoke` follows RFC 7009 for refresh tokens, and revoking a refresh token revokes the grant it belongs to. A public client's refresh token is bound to its DPoP key (RFC 9449 section 5), so revoking one needs proof of possession, as using one does: a public client's revocation request carries a DPoP proof of that request, checked as at the token endpoint (A6.3), and without a valid one it fails RFC 9449 `invalid_dpop_proof`, or fails `use_dpop_nonce` with a fresh nonce when its nonce is stale, and revokes nothing. A refresh token bound to a key other than the proof's is not revoked, and the request is answered as RFC 7009 answers an invalid token, so the answer does not tell the holder of a stolen refresh token whether it is live. A confidential client's revocation request is authenticated with `private_key_jwt` (A6.1). An access token is not revoked on its own: the endpoint answers RFC 7009 `unsupported_token_type` for one, and it ends with its grant, because every authorised action checks the stored grant (A6.3). The owner's grant-revocation action atomically invalidates all associated authority and descendants, records the event and enqueues required purge instructions. Revocation takes effect on the next attempted action, including retries and cached/conditional reads. No background token-expiry job is the enforcement boundary.\n\nChecks: CORE-01, CONSENT-01, OAUTH-01, FETCH-01, SCOPE-01 to SCOPE-09, DISC-01, ADS-01, DELEGATE-01, TRANSPORT-01, PURGE-01.\n\n## A6.6 Client lifecycle credentials\n\nPurge polling/acknowledgement continues after record grants end. A registered confidential recipient uses OAuth client credentials with private-key authentication and DPoP to request only `scope=autonym:lifecycle:purge` and resource `/v1`. This is a client lifecycle token, not a record grant: its JWT ([lifecycle-token-claims.json](../schemas/lifecycle-token-claims.json)) has `autonym_token_kind:lifecycle`, `sub` and `client_id`, both the client's ID as RFC 9068 asks of a client credentials token, `scope` `autonym:lifecycle:purge`, issuer/audience, `cnf.jkt`, `iat`, `exp` and `jti`, but no handle or grant ID. Maximum lifetime is five minutes. It is valid only on the two purge routes and can access only that client's instructions. It cannot satisfy a record-grant check, discover records or create grants. The lifecycle scope is deliberately outside the record-grant scope parser and never appears in a consent grant. Public clients without a registered private key cannot use polling credentials; the provider uses registered callback delivery or the owner's visible manual follow-up, recording unavailable acknowledgement assurance.\n\n## A6.7 Consent and advertising\n\nThe deployment requirements in [A16](a16-privacy-mapping.md) also apply. Advertising requires the local-law and opt-out controls in PRIVACY-05 as well as ADS-01 and ADS-02.\n\nRead and contribution permissions require separate grants, approval and revocation. One named recipient, one purpose category and a plain-language purpose explanation are required. A recipient's consent manager may initiate a flow, but only the provider's stored active grant authorises access. Recommendation/personalisation permission MUST NOT be repurposed for advertising. Declining advertising MUST leave independent non-advertising permissions intact.\n\nAdvertising is optional and off by default. Version 1 permits only explicitly person-confirmed `viewing.genre_affinity`, `reading.genres` and `music.genres`, validated against their closed core enums. All other keys are ineligible. No inferred preferences, free text, activity history, extensions, wildcard domains, sensitive or safety information, identifiers, location, financial, employment or proxy categories enter this lane. A declared value derived from sensitive source material is not made eligible by relabelling it. Providers MUST require the person to choose the offered ordinary preference directly and prohibit sensitive targeting/inference by recipient policy.\n\nAn advertising read grant requires independent first-party consent, a self-directed adult-owned record, an active eligible named recipient, explicit key selection, declared-only mode, maximum L1, exactly one permitted read, expiry within 24 hours, no persistence, delegation or onward-sharing right. If adult/self-directed eligibility cannot be established, deny the feature; do not collect extra identity documents simply to enable advertising. An advertising read for which the recipient's eligibility cannot be established fails `advertising_ineligible`; the code never reveals that the person's or the record's eligibility has changed. Child/guardian-managed records are excluded. Recipient suspension stops reads immediately. Retain context only for the current interaction and never past the signed five-minute maximum; a new interaction needs fresh permission.\n\nThe consent view shows selected context, recipient, advertising purpose, expiry and no-retention terms. Refusal is an ordinary choice. No resale, advertising identifier, cross-recipient correlation, provider monetisation of contents or undisclosed ad-exchange disclosure is implied. Contextual ads that read no record need no Autonym read grant. Off-platform misuse cannot be prevented once data is disclosed; recipient terms and independent assurance remain necessary. These rules are not a legal-compliance certificate.\n\nEvery advertising read has the same signed envelope and receipt as other reads. Withdrawal and purge state are visible to the person. Purge acknowledgement is an assertion, not proof that every copy has gone.\n\nChecks: CONSENT-01, ADS-01, ADS-02, SCOPE-10, PRIVACY-05.\n\n## A6.8 Client standing and safety purposes\n\nA suspended client takes no recipient action, even with an otherwise active grant, except at the A6.6 purge routes: it is not authorised, obtains and refreshes no token, and its request to a resource fails `client_suspended`. The child grants of a suspended client's delegations (A6.4) are unusable while it is suspended. A suspension revokes nothing, so a resumed client's unexpired grants work again; a deregistered client's grants are revoked. The person sees the recipient's registered identity and available evidence during consent.\n\nA normal v1 `safety` or `medical` purpose still requires a current recipient grant, the same compiler and a receipt. There is no anonymous emergency override, special URL that bypasses consent, or promise of emergency-service availability.\n\nChecks: CORE-01, ADS-01, CLAIM-01.\n", "core/a07-agent-surface.md": "# A7. Agent surface\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nThis chapter states the operations and confirmation rules an agent-facing binding provides. The [MCP binding](../bindings/B3-mcp.md) (B3) carries them over the Model Context Protocol; the REST binding carries the same objects (A8, B4).\n\n## A7.1 Operations\n\nEach operation below is exposed under the same name by the agent binding.\n\n| Operation | Authority | Accounting |\n| ------------------- | ---------------------------------------------------------------------------------------------------------- | ----------------------------------------------- |\n| `get_grant` | The authenticated current grant only | No read |\n| `list_domains` | Read grant | No read; eligible granted keys only |\n| `get_context` | Read grant | One atomic counted read |\n| `propose_entry` | Separate contribution grant | One accepted unique event |\n| `confirm_entry` | Contribution grant with ordinary confirmation permission; sensitive acceptance only in the first-party app | Exact-statement review |\n| `withdraw_proposal` | The contributor's own proposal | No read; cannot undo an independent declaration |\n\nThe `get_context` operation returns the A5 signed disclosure. It must not produce an unsigned alternative value. The provider rechecks the stored grant for every operation call.\n\n## A7.2 Confirmation\n\nVersion 1 `confirm_entry` always returns `review_required` with an HTTPS first-party review URL. It never accepts a contributor assertion as confirmation. The URL locates the authenticated person's review screen; it is not a bearer credential and reveals no proposal value before login. The server creates a one-use review session of at most five minutes bound to the owner session, proposal ID/version, source client and exact JCS statement `{domain,key,value_type,value,context_kind,temporal}` hash. The app displays that exact statement and rechecks the binding before committing confirmation. Any proposal change invalidates the session. Third-party callers receive only their own proposal status afterward. Sensitive acceptance is always first-party.\n\nMulti Round-Trip Requests and assistant-attested confirmation are reserved for a separately specified future extension. A contributor's confirmation permission in v1 only permits requesting the first-party review link; it never permits writing a declaration directly.\n\n## A7.3 Briefing\n\nThe briefing (the `autonym_briefing` prompt in B3) requests `agent` and `communication` at L1 through one compiler transaction. Both domains must be granted; no fallback ambient read exists. It counts once, returns a text message containing the signed disclosure JSON, and labels any human-readable summary as derived from that object. A summary cannot extend validity or add entries. The recipient must apply normal instruction/safety boundaries to contributed text; context is data, not authority to override system or tool policy.\n\nChecks: TRANSPORT-01, CORE-01, SIGN-01, LOG-01, CONTRIB-01.\n", "core/a08-recipient-api.md": "# A8. Recipient API\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nThis chapter states the recipient API requirements that do not depend on the binding. The [REST binding](../bindings/B4-rest.md) (B4) gives the HTTP routes, request validation, idempotency, conditional reads, errors and rate limits; the [MCP binding](../bindings/B3-mcp.md) (B3) carries the same operations to agents.\n\nPublic discovery is unauthenticated; every recipient action is authenticated and authorised.\n\nUnknown or foreign proposal IDs return the same `proposal_not_found`. Contribution retries are identified by authenticated event ID as specified in A14. Always recheck authority before replaying a stored response; a retry after revocation cannot retrieve protected results.\n\nBody-size, rate and authentication failures do not consume read counts. Only committed fresh disclosures consume reads.\n\nOwner management must support reviewing entries/proposals/grants/history, temporal activation, correction, revocation, export/import and deletion with re-authentication for sensitive changes. The earlier `/v1/me/*` list was illustrative. Private UI routes are outside this recipient interoperability contract; it does not grant recipients management authority.\n\nChecks: TRANSPORT-01, CORE-01, LOG-01, CONTRIB-02.\n", "core/a09-receipts-and-log.md": "# A9. Read receipts and the log\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nEvery fresh disclosure commits a [receipt](../schemas/receipt.json) before returning. Its read ID matches the signed envelope. It records the provider, grant, client, purpose, trusted time, surface, canonical request, internal entry/version/level references and response hash. `provider` is the provider's HTTPS issuer URL as discovery publishes it (A3.3), the same value as the signed disclosure's `provider`; it is part of the signed bytes, and a verifier binds the receipt to that provider's key set through it (A5.4). Internal references are owner-only; recipient-facing evidence uses the signed disclosure and its pairwise references.\n\nThe canonical request, the receipt's `request`, is the validated [context request](../schemas/context-request.json) with its A5.2 defaults written out. `max_level` (L3 when omitted), `declared_only` (false when omitted) and `min_confidence` (0 when omitted) are always present. `domains`, and `keys` when the request has them, are in ascending order without repeats. `keys` and `since` are present only when the request has them, and `since` uses the canonical instant spelling (A5.4). Requests that differ only in list order, repeated names or omitted defaults therefore have the same canonical request, and its JCS form is what the receipt's `hash` and signature cover. Writing the canonical form is the provider's duty; a verifier checks the signature over the request the receipt carries and does not reject it for its order or spelling.\n\n`response_hash` is `sha256:` plus lower-case hexadecimal SHA-256 of the exact JCS UTF-8 envelope without `proof`, the same bytes signed in A5. The receipt's `hash` covers its JCS form excluding `hash` and `proof`, including `prev_hash`. The first event uses null previous hash. Sign the complete receipt excluding `proof` using the A5.4 method and protected `typ:autonym-receipt+jws`; its signed time is `at`.\n\nThe owner log is append-only and hash-chained per record partition. Non-read events use `{event_id,at,kind,actor_client_id,subject_id,details,prev_hash,hash}`. `kind` is one of `grant_created`, `grant_revoked`, `grant_expired`, `rule_applied`, `delegation_redeemed`, `proposal_decided`, `overlay_enabled`, `overlay_disabled`, `overlay_selected`, `read_not_modified`, `purge_issued`, `purge_acknowledged`, `operator_action` or `migration_imported`. `details` contains only decision codes and relevant opaque IDs, never entry values, utterances or tokens: `details.decision` is one of the codes of [log-event.json](../schemas/log-event.json) or null, `details.ids` lists opaque IDs and `details.response_hash` is an A9 hash or null. These events use the same hash rule and are included with receipts in export.\n\nThe kinds that grant issuance, revocation, expiry, conditional reads and operators write have this content:\n\n- `grant_created`: `subject_id` is the new grant's ID, `actor_client_id` the client it is issued to and `details.decision` `approved`. `details.ids` names the grant and, where the provider keeps a record of the person's consent review, that review.\n- `grant_revoked`: `subject_id` and `details.ids` name the grant. When the person revokes it, `actor_client_id` is null and the decision is `completed`. When its client revokes it through the revocation endpoint, with the proof of possession A6.5 asks of a public client, the actor is that client and the decision is `completed`. When the provider revokes it because its client used an authorisation code or a spent refresh token a second time (A6.3), the actor is that client and the decision is `failed`. When the operator deregisters the client (A6.8), the actor is null, the decision is `disabled` and an `operator_action` is appended in the same transaction.\n- `grant_expired`: `subject_id` and `details.ids` name the grant, and the actor and the decision are null. The event records an expiry; every action checks expiry itself (A6.5).\n- `read_not_modified`: `subject_id` names the grant, `actor_client_id` the reading client and the decision is `unchanged`. `details.ids` names the earlier read, and `details.response_hash` is that read's response hash.\n- `operator_action`: `subject_id` is the record partition's ID, the actor is null, and `details.ids` says what the action concerned. A verification of the partition's log names the event IDs it reports, with the decision `completed` when the log verified, `failed` when it found a divergence and null when verification could not run. An action on a client names the client's grants in the partition that were active when the action began, with the decision `disabled` for a suspension or a deregistration, `enabled` for a resumption and `completed` for a change of class; the `grant_revoked` events a deregistration appends in the same transaction tell it apart from a suspension. One event names at most 32 IDs ([log-event.json](../schemas/log-event.json)), so an action on a client with more grants in the partition appends further `operator_action` events with the same decision, in the same transaction, until every grant is named.\n\nEach other kind's content is defined with the operation that writes it, within the rule above.\n\nGrant/counter updates and log append occur in the disclosure transaction. Failure cannot leave a successful unlogged read. A `304` appends an event referencing its previous read ID and response hash, without a fresh disclosure or counter increment.\n\nOwners can inspect reads, consent changes, temporal activation, withdrawals and purge state. Operational logs and telemetry have a separate allowlist and never contain context values, approved renderings, source evidence, uploaded content, credentials or tokens. A cryptographic chain reveals tampering relative to a trusted checkpoint; a host controlling all keys and checkpoints is not magically unable to rewrite history. Owners should be able to export signed checkpoints.\n\nISO/IEC 27560 is a useful consent-record reference, but this draft does not claim certified mapping to its unavailable full text. The explicit fields here are the wire contract.\n\nReceipts MUST stay verifiable after the signing key changes. A key ID is the RFC 7638 thumbprint of its public key (A5.4), so one key ID cannot name two keys, and a provider MUST NOT reuse a key ID. A retired signing key MUST NOT sign anything at or after its retirement. Its public key MUST stay in the provider's key set, with `exp` giving the time of its retirement (A5.4), for as long as any receipt or log event it signed is retained, and a published `exp` MUST NOT be removed or changed. A verifier rejects an object whose signed time is at or after its key's retirement (A5.4, KEY-01). Retirement is not a response to key compromise: whoever holds a retired private key can still produce an object dated before its retirement. Log retention and compaction MUST keep everything an old receipt needs to verify independently: the receipt, the hash-chain events it links to, any checkpoint it is anchored to and the public key that signed it. A receipt signed before a key rotation therefore verifies afterwards from the provider's published keys and the owner's export alone (LOG-02).\n\nChecks: LOG-01, LOG-02, KEY-01, ADS-02, SIGN-01, PORT-01.\n", "core/a10-revocation-and-purge.md": "# A10. Revocation and purge\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nEnding a grant stops future reads immediately. It does not remotely erase a recipient's existing copy. A provider issues a signed purge instruction for every ended grant with persistence rights; notices for transient grants may also be sent. The person can see delivery and acknowledgement state.\n\nThe payload follows [purge-instruction.json](../schemas/purge-instruction.json), signed as compact JWT with ES256, protected `typ:autonym-purge+jwt` and, as `kid`, the A5.4 key ID of a key in the provider's trusted key set. Its signed time is `iat`, so a recipient rejects a token whose `iat` is at or after that key's `exp` (A5.4). It binds provider issuer, pairwise subject, recipient audience, instruction ID, issue/expiry timestamps, grant ID and deadline. The reason is identical for revocation and expiry:\n\n```json\n{ \"reason\": \"grant_ended\" }\n```\n\n`scope:all` means copies obtained under that grant, including derived recipient copies. No explanation of why it ended is disclosed. Default acknowledgement deadline is seven days after issue; JWT validity is 30 days. Fetching an outstanding expired notice issues a fresh signed delivery with the same instruction ID/deadline, not a new erasure obligation.\n\nDelivery uses registered HTTPS `autonym_purge_uri` through the SSRF-safe client. Retry after 1 minute, 5 minutes, 30 minutes, 2 hours, 12 hours and then daily until acknowledgement or 30 days. Each attempt revalidates destination ownership and DNS/address safety. A recipient may poll outstanding notices using authenticated client credentials bound to its registration; this lifecycle channel does not require a still-active read grant and confers no record-read authority. Do not drop a notice merely because the triggering grant expired.\n\n[purge-ack.json](../schemas/purge-ack.json) binds instruction ID, time and `purged`, `not_held` or `legal_hold`, plus a bounded explanation. Where the recipient has a registered key, it signs the acknowledgement by the A5.4 method: a detached JWS over the UTF-8 RFC 8785 canonical JSON of the complete acknowledgement without `proof`, with protected `alg:ES256`, `typ:autonym-purge-ack+jws` and the registered key's A5.4 key ID as `kid`, carried in `proof`. Its signed time is `at`. The provider verifies it as A5.4 describes, against that recipient's registered keys only. Without a registered key, `proof` is null and the provider records the authenticated but unsigned assurance explicitly. Validate client/instruction binding. An acknowledgement is the recipient's attestation, signed where it holds a registered key, of the outcome it reports: `purged`, `not_held` or `legal_hold`. It proves only that the recipient made that attestation; even `purged` does not prove that every copy has gone. A provider MUST NOT present an acknowledgement, to the person or anywhere else, as proof of erasure or as evidence that no copy remains (PURGE-01). `legal_hold` records an exception claim, not completed purge.\n\nMissing acknowledgement past the deadline remains visible to the person. The default status-retention period is 12 months, subject to a shorter period required by applicable law or necessity, or the owner's shorter lawful retention choice. Any longer retention needs the specific lawful justification and safeguards in A16.5. Do not expose it to other recipients. No registry standing or certification is inferred in v1.\n\nChecks: PURGE-01, ADS-02, SIGN-01, KEY-01, CORE-01.\n", "core/a11-portability.md": "# A11. Portability\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n## A11.1 Export and import\n\n[export.json](../schemas/export.json) defines `autonym-export/1.0`: export time, origin, entries and included versions, non-content deletion tombstones, proposal events/acknowledgements, historical grants, read receipts, non-read log events, public verification keys, inactive policy history, unsupported-category report and proof. The owner chooses current versions or complete retained history. The export manifest says which was chosen. Owner-only wrappers bind every historical grant, receipt, log event, proposal and policy to its partition ID; validate those IDs against the partition list. Preserve canonical IDs, temporal intervals, overlay targets, semantic kinds, provenance, evidence references and original origin. Evidence references may be unavailable at the new host; report that explicitly, never treat missing evidence as verified.\n\nSign the JCS export excluding `proof` by the A5.4 method with the originating provider's ES256 key and protected `typ:autonym-export+jws`; its signed time is `exported_at`. Exported public keys preserve verifiability of historical artefacts, keeping any `exp` (A5.4); they do not become trusted active signing keys at the destination. Once the export verifies, its `public_keys` and `origin_host` are the trusted key set and issuer for the receipts it carries, and a carried receipt naming another provider is verified against that provider's own key set or reported as unverified history (A5.4). The owner's authenticated export operation establishes the source, with explicit source trust on import. Do not follow arbitrary key URLs from the file. Never export private keys, access/refresh tokens, passkeys, client secrets or executable credentials.\n\nThe importer validates size, schema, signatures, vocabulary, IDs, versions, temporal constraints, dependency cycles, relationships and each partition's A4.1 entry limit before changing the destination. Maximum decoded v1 import is 64 MiB and 100,000 entries/events of each supported kind. Reject duplicate IDs/versions with differing content. Identical retransmission is idempotent. Imports use a staged preview listing unsupported categories and conflicts. The person chooses whether to omit unsupported material or cancel; no silent data loss is permitted. Committing entries, selection and provenance is atomic for the accepted import.\n\nImported grants, rules, delegations and consent events are immutable history, never executable authority. The destination creates fresh keys, handles and client-bound grants after new consent. An old token MUST fail at the new provider. Unverified credentials remain archived and non-disclosable. A legacy value with no core key mapping is reported as unsupported, not coerced into a broad text field.\n\n## A11.2 Optional encrypted export\n\nThe unencrypted signed JSON contract is required for Portable; passphrase encryption is an optional, fully specified format. Use compact [JWE](https://www.rfc-editor.org/rfc/rfc7516) with `alg:dir`, `enc:A256GCM`, `typ:autonym-export+jwe` and `cty:application/autonym-export+json`. Plaintext is UTF-8 of the signed export. Use a new random 96-bit GCM IV and 128-bit authentication tag as required by JWE.\n\nDerive a 32-byte key with [Argon2id RFC 9106](https://www.rfc-editor.org/rfc/rfc9106#section-4), version 19, memory 65,536 KiB, three iterations, four lanes and a fresh random 16-byte salt. The UTF-8 passphrase is used exactly as entered, without normalisation or truncation. The protected header contains `crit:[\"autonym_kdf\"]` and `autonym_kdf:{name:\"argon2id\",v:19,m:65536,t:3,p:4,salt:}`. This authenticated critical extension is the sole v1 KDF parameter set. Argon2id is not a JOSE `alg`.\n\nReject unsupported/missing KDF fields, salt size, algorithms, duplicate JSON members and excess encrypted size before allocating Argon2 memory. Limit concurrent derivations. Verify GCM before parsing or exposing plaintext, then verify export signatures and semantics. Authentication failure returns a generic invalid-export result, without distinguishing wrong passphrase from tampering. Use maintained Argon2/JWE libraries; do not implement these primitives in application code.\n\n## A11.3 Honest portability\n\nA provider claiming Portable supports both export and import for its stated categories and demonstrates round-trip preservation, conflict reporting and no authority transfer. A recipient claiming Reciprocal supports receiving and returning the person's stated data categories; it need not transfer proprietary model weights or ranking algorithms. Raw history and confirmed preferences are separate selections. Named media services are examples, not integration claims.\n\nChecks: PORT-01, ENCRYPT-01, SIGN-01, KEY-01, LOG-02, CLAIM-01, TEMP-01 to TEMP-03.\n", "core/a14-contributions.md": "# A14. Contributions\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n## A14.1 Authority and transport\n\nVersion 1 uses authenticated HTTPS push: one event per `POST /v1/proposals`, or the identical `propose_entry` MCP tool. Maximum event body is 64 KiB. Batches, background polling, streaming subscriptions and vendor-specific export formats are outside v1. A connector repeatedly pushes within its bounded, separately revocable contribution grant; continuity does not imply perpetual permission.\n\nGrant constraints are an exact domain/key allowlist, purpose, expiry, maximum accepted unique events and optional ordinary confirmation permission. A read grant cannot contribute; a contribution grant cannot read context, enumerate records, list other recipients or discover migration destinations. The current-grant endpoint is restricted to the authenticated grant and exposes no linked grants.\n\n## A14.2 Events and deduplication\n\n[contribution-event.json](../schemas/contribution-event.json) defines a discriminated `create`, `correct` or `withdraw` event. An event whose `value_type` or `value` does not match the key definition (A4.1) fails `value_rejected`. `event_id` is a contributor-scoped opaque ASCII identifier of 1 to 128 letters, digits, underscores or hyphens. Record the authenticated client as source; reject a body-supplied source client or ingestion time. The provider sets ingestion time from its trusted Clock. Occurrence time can describe past activity but must not exceed ingestion by more than five minutes; it does not backdate authority.\n\nUniqueness is `(record partition, authenticated client, event_id)`, independent of a refreshed grant. Hash the canonical submitted payload with SHA-256 for comparison. An identical authorised retry returns the original acknowledgement; a differing payload under the same ID returns `idempotency_conflict`. A new correction uses a new event ID and names its predecessor. Accept and acknowledge transactionally, after rechecking current grant activity and limits. Identical retries do not consume another event allowance, but still require active authority and rate limits.\n\nRetain deduplication identities and payload digests for the stream lifetime plus 30 days. Revocation ends that stream; reopening requires a fresh stream namespace communicated in the new contribution grant. A stream namespace is a UUIDv4 and is included in every event. The provider never accepts the old namespace under a new stream grant. Retired namespaces retain a non-content tombstone so old events cannot reappear after deduplication expiry. Digests and metadata remain protected, not public diagnostics.\n\n## A14.3 Corrections, withdrawal and provenance\n\nCorrections/withdrawals may target only a previous event from the same client, stream and record. The full predecessor chain is bounded to 100 and cannot branch silently: a correction must reference the current head or fail `proposal_decided`. Source withdrawal stops disclosure of the contributed observation and invalidates dependent derivations. It cannot delete the person's independently confirmed declaration; instead flag the changed evidence for the person's review.\n\nEvent category distinguishes `user_supplied`, `activity`, `observation` and `inference`. Preserve it even after acceptance. Approval of a batch, client or general stream is not confirmation of a statement. Becoming `declared` requires explicit confirmation of the exact value and protected statement hash. The first-party app handles all sensitive or safety-critical proposals; all v1 confirmation occurs in the first-party app; third parties can request review only. `inferable:false`, safety and special-category prohibitions cannot be overridden by enabling a domain. For a special-category or safety-critical key, only a `user_supplied` event is accepted, and it remains a protected proposal until the person confirms it in the first-party app (A4.2); any other event for such a key fails `safety_write_forbidden` if the key is safety-critical and `inference_forbidden` otherwise. An `inference` event for any other key with `inferable:false` fails `inference_forbidden`.\n\nRejected suggestions must not repeatedly resurface: suppress identical `(client,domain,key,canonical value digest)` proposals for 90 days unless the person explicitly reopens the suggestion or supplies a new declaration. Evidence references are opaque pointers, not permission for the server to fetch arbitrary URLs. External evidence retrieval needs separate safe-fetch and owner consent rules.\n\n## A14.4 Separation of history and preference\n\nContributing viewing activity does not imply permission to read a person's other preferences. Another service may request reviewed preferences, raw history or both, with separate key selection. Derivations obey A4's recursive input-rights rule. An independently confirmed preference can be shared without history, while original source evidence remains protected.\n\nContinuous connectors are reserved for 2.0; see [the connectors reservation](reserved/a14-connectors.md).\n\n## A14.5 Contribution and reciprocal portability\n\nA contribution grant is bounded permission to submit proposals, not to read or overwrite the record. Version 1 HTTPS push has a strict event schema, authenticated source identity, stream namespace, idempotent event IDs, finite limits, correction/withdrawal rules and replay tombstones. A14 defines the full contract. No continuous subscription survives revocation.\n\nDistinguish user-supplied preferences, activity, observations and inference. Review does not automatically create a declaration: the person confirms the exact statement, while provenance and protected evidence remain intact. A contributor cannot alter an independent declaration or learn who later reads its contribution.\n\nA person can share reviewed preferences, raw history or both. Preferences do not automatically expose history. Derivations require permission for every actual input field and level; a separately confirmed declaration may be shared independently.\n\nPortability requires bidirectional transfer for the categories claimed, preservation of meaning and temporal/provenance data, validation, unsupported-data reporting and tests. Exports do not transfer executable tokens, grants or private keys. Provider migration requires fresh provider/audience-valid consent. The old contributor does not learn the destination by default.\n\nChecks: CONTRIB-01 to CONTRIB-03, INFER-01, CONSENT-01, TEMP-03, CORE-01.\n", "core/a15-security.md": "# A15. Security requirements\n\n**Status:** normative. Document version `1.0-draft-1`.\n\nThe protocol minimises disclosure; it does not make a trusted host harmless or guarantee deletion by a recipient. Treat record contents and contributor text as untrusted data. They cannot override recipient system instructions, tool permissions or safety boundaries.\n\n## A15.1 Authority and isolation\n\nEvery recipient action requires current server-side authority. Enforce issuer, exact audience, client binding, expiry, the DPoP proof, grant revision, domain/key/level constraints, purpose, temporal validity and limits. Recheck inside the transaction. Deny missing, unknown or incompatible state. The privacy boundary covers errors, discovery, provenance, identifiers, metrics and conditional requests as well as entry values.\n\nUse client-bound handles and entry aliases. A contributor cannot enumerate other recipients or learn where the person migrated. L0 categories are closed and reveal no direct value; combinations may still identify a person or imply sensitive information. Providers SHOULD refuse a wildcard L0 grant to a client already holding L2 or higher in any domain, and explain its actual grant selection to the person.\n\n## A15.2 Signed objects\n\nRequired signatures cover successful disclosure envelopes, owner-verifiable read receipts, export envelopes, purge instructions and purge acknowledgements where the recipient has a registered key. Reserved future host-binding formats must define their own signed object before use. TLS is still mandatory.\n\nHTTP `204`/`304`, operational health/readiness, errors, lists and discovery are not signed disclosure envelopes. MCP wraps the same signed object rather than an unsigned equivalent. This boundary replaces the earlier ambiguous phrase “every response signed”. Signature verification includes configured trust, protected type/algorithm, complete signed bindings, strict canonicalisation and deadline checks; see A5.\n\n## A15.3 Implementation controls\n\n- Use maintained cryptographic libraries and secure platform primitives. Private keys and encrypted record contents must be isolated from operational support access. Administrative actions are logged to affected owner history without exposing values.\n- Rate-limit by client, grant and unauthenticated origin. Bound nested JSON, body size, dependency depth, exports, cryptographic work and retries. Unavailable key storage or grant state fails closed with `not_ready`.\n- Fetch client-supplied URLs only through SSRF-safe retrieval, checking resolved addresses and redirects and blocking private/link-local destinations unless an explicitly isolated local mode is configured. No credential forwarding across origins.\n- Keep values, renderings, utterances, evidence, uploads, credentials and tokens out of operational logs, traces, metrics, emails and job payloads. Owner history is separately protected.\n- Protect first-party changes with authenticated sessions, CSRF controls, fresh re-authentication for sensitive actions and visible audit history. A first-party request without a current session fails `session_required`, one whose CSRF proof does not verify fails `csrf_invalid`, and a sensitive action without recent re-authentication fails `reauthentication_required`. A sign-in that does not succeed fails `sign_in_failed` whatever the reason, and a sign-up while the provider admits no new accounts fails `signup_unavailable`; neither depends on whether an address has an account. Never expose a route that decrypts arbitrary records for operators.\n\nVersion 1 excludes guardian-managed advertising and reserves general guardian/duress functionality. These need independent abuse, safeguarding and control-transfer designs before release. A plausible-looking “duress record” is not a security guarantee and must not be claimed from this draft.\n\nChecks: all security-relevant checks in the [manifest](../conformance/profiles.json), including FETCH-01 and WILDCARD-01. Cryptographic interoperability, concurrency, storage and live authorisation remain runtime release gates.\n", "core/a16-privacy-mapping.md": "# A16. Privacy and legal mapping\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n## A16.1 What the protocol supports\n\nThis subsection is informative. Protocol mechanisms can support privacy obligations; they do not establish lawful processing, legal compliance or certification. Roles, purposes, jurisdiction, safeguards and actual operation matter. A16.2 to A16.8 define deployment requirements for providers and recipients claiming conformance. They add no wire fields and do not turn conformance into legal approval.\n\n| Mechanism | What it can support | What it does not establish |\n| ---------------------------------------- | --------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- |\n| Consent screen and grant | Recording a specific decision and facilitating withdrawal | Valid freely given, informed consent or the correct lawful basis in every situation |\n| Revocation | Stopping future provider-mediated access | Erasure of existing recipient copies or withdrawal of every other legal basis |\n| Read log | Evidence useful for an access response | All information required by an access right |\n| Correction and versioning | Rectifying active data and retaining necessary history | Rectification merely because an old and new version both exist |\n| Purge notice and acknowledgement | Requesting deletion and recording a recipient's assertion | Completed erasure, removal of backups, or absence of an applicable exception |\n| Export/import | Transfer of the specified user-data categories | That every item falls within a statutory portability right or may be disclosed despite others' rights |\n| Sensitive-key and inference restrictions | Data minimisation and additional technical controls | A lawful condition for processing special-category data |\n| Pairwise identifiers and short validity | Privacy by design and reduced linkability | Anonymity, impossibility of inference or prevention of off-platform misuse |\n\nThe EU GDPR provisions most directly relevant include Articles 7, 9, 15, 16, 17, 20 and 25. Read their conditions and exceptions in the [official regulation](https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng). UK applicability must be evaluated separately using current legislation and [ICO consent guidance](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/consent/); it is not assumed identical to EU rules.\n\nThe [EU Data Governance Act](https://eur-lex.europa.eu/eli/reg/2022/868/oj/eng) has its own scope, notification requirements and conditions, including Articles 11 and 12. A technical registry badge cannot confer data-intermediation status. Advertising eligibility rules in A6.7 are protocol restrictions, not a declaration that an advertising use is lawful.\n\nThe [international privacy guide](https://autonym.dev/international-privacy) gives dated, informative jurisdiction notes and primary sources. It is not a substitute for the deployment assessment below and is not incorporated as normative law.\n\n## A16.2 Applicability, roles and lawful processing\n\nBefore collecting, storing, accepting a contribution, deriving or disclosing personal data, each deploying provider and recipient MUST document the applicable jurisdictions, its actual legal roles, purposes, data categories and lawful conditions for those operations. The assessment MUST consider the people served, establishment, targeting, sector and actual processing, rather than relying solely on nationality, IP address or hosting location. Where a required condition is absent or unresolved, the affected operation MUST remain disabled. Independently lawful operations need not be disabled.\n\nProtocol actors do not determine legal roles. The assessment MUST distinguish independent, joint and processor relationships where applicable, including account administration, security logs, hosting and recipient use. Encryption and a person's household use do not automatically exempt a commercial provider. Required notices, agreements and evidence of the selected lawful conditions MUST be in place before the relevant processing.\n\nA grant is a technical permission, not itself a lawful basis. Where consent is relied on, the implementation MUST retain proportionate evidence of the actual notice and version, language, purposes, parties, categories, affirmative action, time and withdrawal route. It MUST satisfy any applicable explicit, separate, written or representative-consent formality and permit refusal and withdrawal without prohibited detriment. Withdrawal MUST be as easy as giving consent where the law requires it. Grant acceptance MUST NOT waive statutory rights or authorise a purpose that the protocol prohibits.\n\nRequired indirect-collection notices MUST be handled at the legally required time. Data in a pending or rejected contribution has already been collected; a confirmation queue is not an exemption. Compliance records MUST remain protected and MUST NOT expand discovery or disclose additional personal data to recipients.\n\nCheck: PRIVACY-01.\n\n## A16.3 Sensitive data, necessity and further use\n\nThe provider and recipient MUST assess legal sensitivity for the actual data, source, inference and combination in each applicable jurisdiction. Vocabulary flags and disclosure levels are technical controls, not an exhaustive legal classification. A low-resolution rendering can remain personal or sensitive data. Implementations MUST NOT relabel data, lower its disclosure level or describe it as a preference to evade a legal restriction.\n\nCollection, storage and disclosure MUST be limited to the purpose and necessity permitted by applicable law. Operations governed by a grant MUST also remain within that grant’s purpose and authority. Where processing requires a special condition, that condition MUST be established before the affected data is accepted or used. Consent MUST NOT be treated as overriding a statutory prohibition or strict necessity requirement. Unsupported categories and uses MUST remain disabled for the affected deployment.\n\nModel training, advertising, enrichment and other further uses MUST NOT be inferred from permission to read, contribute or host a record. Any further use MUST satisfy its own applicable legal conditions and the protocol's purpose and authority limits; fresh consent cannot override a protocol prohibition.\n\nCheck: PRIVACY-02.\n\n## A16.4 International flows\n\nBefore an international flow begins, the deploying parties MUST document its source, destination, parties, purposes and data categories, including hosting, backups, remote access, subprocessors and onward disclosure. They MUST establish any required transfer mechanism, assessment, contract, notice, separate permission, filing, representation or localisation arrangement for that flow. A grant, encrypted transport, chosen hosting region or an agreement designed for another jurisdiction is not sufficient evidence by itself.\n\nThe assessment MUST record which flows an instrument covers, applicable conditions and a review point. A material change of destination, recipient, access arrangement or legal protection MUST trigger reassessment before the changed flow proceeds. A flow whose required safeguards are no longer satisfied MUST be suspended without silently selecting a different destination.\n\nCheck: PRIVACY-03.\n\n## A16.5 Rights, retention and erasure\n\nEach deploying party MUST provide an accessible route for applicable access, correction, deletion, restriction, objection and portability requests, authorised representatives, complaints and appeals. Identity verification MUST be proportionate. It MUST NOT require a new account where applicable law prohibits doing so. The party MUST track the applicable deadline, any permitted extension, outcome, reasons and challenge route. A protocol export or read log alone MUST NOT be represented as a complete statutory response.\n\nCorrection MUST stop superseded information from being presented as current and communicate corrections or restrictions to recipients where required. Keeping both versions is not sufficient. Disputed or restricted data MUST be prevented from entering uses that the restriction prohibits.\n\nRetention rules MUST cover entries, history, contributions, receipts, logs, caches, exports and backups. Grant expiry and revocation MUST NOT be treated as deletion. Append-only audit design MUST NOT imply indefinite personal-data retention. Implementations MUST use bounded history and proportionate evidence, with a tested deletion or effective cryptographic-erasure process where appropriate. Restoring a backup MUST reapply deletions and restrictions before restored data becomes available for processing.\n\nRevocation, consent withdrawal, restriction and erasure MUST be handled as distinct actions with their actual effects explained. A10's default seven-day acknowledgement period is a protocol target, not a universal legal deadline. A recipient's purge acknowledgement MUST be described as its assertion, not proof that every copy has disappeared. Missing acknowledgements and incomplete deletion MUST have a tracked follow-up process.\n\nAny retained data under a legal exception or hold MUST have a specific documented ground, restricted access and use, a review or end condition, and any legally required explanation and challenge route. Such retention MUST NOT be reported as erasure or become an implicit new grant.\n\nCheck: PRIVACY-04.\n\n## A16.6 Advertising choices and children\n\nA6.7's advertising restrictions are an upper bound, not legal authorisation. Before enabling that optional capability, the deploying parties MUST assess whether the arrangement constitutes regulated sale, sharing, targeted advertising or another restricted use, including non-monetary consideration. The capability MUST remain disabled wherever a required condition cannot be met.\n\nImplementations MUST honour applicable objections, opt-outs and recognised preference signals, including signals received after a grant was issued, before the next affected disclosure or use. A grant MUST NOT silently override a valid opt-out. The absence of a signal is not consent. Any legally permitted later opt-in MUST be handled through the required informed process. Version 1 defines no universal transport for these signals; an implementation without a reliable way to receive and enforce applicable choices MUST keep the affected advertising use disabled. Device access, cookies and direct marketing require their own assessment.\n\nVersion 1's reserved guardian mechanisms do not establish a child-consent or capacity framework. A deployment directed to children, or otherwise within applicable child-protection duties, MUST establish the required age, capacity, representative authority and child-specific safeguards through a separately specified and verified process before enabling affected processing. Until that process exists, the deployment MUST restrict its supported audience and affected functions accordingly, using proportionate measures. It MUST NOT claim that a generic checkbox establishes parental authority. Child and guardian advertising remains excluded by A6.7.\n\nCheck: PRIVACY-05.\n\n## A16.7 Accountability and regulated services\n\nEach deploying party MUST establish the impact assessments, security measures, contracts, records, registrations, permits, licences, prior authorisations, officers and representatives required for its actual activity. Where an approval is required before processing or a transfer, the party MUST establish that it has been granted and covers the intended activity, rather than treating an application or personal consent as approval. It MUST track conditions, expiry and renewal, and stop the affected operation when required permission is absent or expires. It MUST maintain and exercise an incident process with jurisdiction-specific triggers, reporting routes and deadlines. Unauthorised disclosures, including misuse by an authorised recipient, MUST be assessed; incident handling MUST NOT assume that every law uses the same threshold or a 72-hour deadline.\n\nA recipient using data for a decision subject to explanation, objection, review or human-intervention rights MUST provide the applicable process and information. A read receipt explains an access event, not the reasoning or consequences of a subsequent decision.\n\nParties MUST assess any activity-specific regime, including data intermediation, registered consent-management services and sector health or financial rules, before claiming that status. A technical provider, consent screen or registry entry MUST NOT be described as a legally registered or certified service without the required legal conditions, registration and any structural safeguards.\n\nCheck: PRIVACY-06.\n\n## A16.8 Evidence and claims\n\nA deployment claiming conformance MUST hold evidence for PRIVACY-01 to PRIVACY-06 identifying the tested build, jurisdictions, supported uses and categories, assessment date, responsible reviewer, restrictions, operational procedures and observed results. Evidence MUST include representative exercises of the relevant consent, rights, transfer, retention, opt-out and incident processes. Legal applicability decisions require accountable review; automated schema checks cannot make them.\n\nThe deployment MUST reassess material changes in law, purpose, audience, data or flows. Public claims MUST state their scope and limitations without publishing personal data, privileged advice or confidential security details. A checklist, pending test or published contract MUST NOT be presented as an operating safeguard. No conformance statement under A17 may be labelled a legal compliance certificate.\n\nChecks: PRIVACY-01 to PRIVACY-06 and CLAIM-01.\n", "core/a17-conformance-and-change.md": "# A17. Conformance and change process\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n## A17.1 Provider and recipient roles\n\n[The conformance manifest](../conformance/profiles.json) defines exact required check groups and dependencies. Shared security, data-minimisation and A16 deployment requirements apply to every claimed capability. PRIVACY-01 to PRIVACY-06 require operational evidence for the deployment's stated jurisdictions and uses; passing them is not a legal compliance certificate.\n\n| Role | Capability | Required behaviour |\n| --------- | ---------- | ------------------------------------------------------------------------------------------------------------------------ |\n| Provider | Core | Pairwise identity, typed record, temporal compiler, consent, one or both public surfaces, receipts, revocation and purge |\n| Provider | Write | Core plus separate contributions, protected confirmation and correction/replay handling |\n| Provider | Portable | Core plus export and import, preservation/unsupported reporting and migration without authority transfer |\n| Provider | Delegated | Core plus bounded standing rules and one-use target-bound grant offers |\n| Recipient | Read | Correct grant use, signature/binding/expiry verification, permitted retention and purge |\n| Recipient | Contribute | Separate contribution authority, provenance, retries and own-event correction/withdrawal |\n| Recipient | Reciprocal | Read and Contribute plus inbound/outbound transfer for the same stated categories |\n\nAdvertising is optional and additionally requires ADS-01 and ADS-02. In the same way, a provider that offers public handles additionally requires HANDLE-01, one that offers the A11.2 encrypted export requires ENCRYPT-01, and one that offers the B1 binding requires BINDING-01. WILDCARD-01 checks the A15.1 recommendation; no capability requires it. Verified credential presentations, Trust registries and emergency cards are reserved, unclaimable v1 extensions. “Read” does not mean Portable. An export-only implementation cannot claim Portable or Reciprocal.\n\n## A17.2 Claims and evidence\n\nUse [capability-claim.json](../schemas/capability-claim.json): role, wire/document version, capabilities, exact domain/key categories, directions, limitations, evidence URLs/timestamps and `assurance:self-declared`. Provider capability names and recipient capability names cannot be interchanged. Directions must match actual behaviour and the declared capabilities. A Read-only claim cannot advertise contribution or transfer. Every claimed direction has at least one supported category; categories may differ for reading and contribution. Portable/Reciprocal covers both export and import for every category named in that claim. Evidence identifies a reproducible test suite version, tested build and result for every required check.\n\nThe draft establishes no certification authority and issues no badges. Independent certification requires a separately published governance and assessment process. A self-declared implementation can accurately publish its evidence and limitations, but cannot say “certified” because its JSON parsed or because a provider supports a similar capability.\n\nContract checks in the reference repository validate schemas, vocabulary examples, scope syntax and selected pure policy invariants, and run example and property tests of the pure compiler. A library verifier in the same repository checks A5.4 detached signatures on disclosures, receipts, purge acknowledgements and exports. The published [test vectors](../conformance/vectors/README.md) for disclosures, receipts and purge are checked by the repository's tests, which use that verifier for every detached signature among them, and independently by a second verifier written from the specification text alone with other libraries. A [statement audit](../conformance/statements.json) maps every normative sentence it extracts from the core, the bindings and the vocabulary page to the checks that test it, or to the reason no suite can. These checks do not exercise a running recipient service. Where a check's manifest entry records `integration` evidence, the reference implementation's integration tests, which run its provider against real storage, cover every duty the check's requirement places on a provider that one provider's own tests can show; a verifier's part of the requirement keeps the evidence of its own tests and vectors, and that shows the reference provider meets those duties, not that another implementation does. Full runtime checks in the manifest remain pending and must pass before a conforming implementation is claimed. Failure reports must identify check ID, expected behaviour and observed behaviour without exposing personal values.\n\n## A17.3 Changes\n\nDocument version `1.0-draft-1` is distinct from proposed wire version `1.0`. After wire release, breaking changes require a new version/URL prefix, an ADR, migration guidance and explicit approval. Additive core keys require full value/rendering definitions, sensitivity review, examples and conformance coverage. Unknown keys stay rejected until the new vocabulary version is negotiated.\n\nA17.4 describes review, compatibility and published editions.\n\n## A17.4 Versioning and editions\n\nThe current document version is `1.0-draft-1`; the proposed wire version is `1.0`. Document versions identify editions of the specification. Wire versions identify the protocol used by compatible implementations.\n\n### Draft status\n\nThe draft is open to review and interoperability testing. Published requirements and implementation status are separate: the [implementation and conformance status](../conformance/README.md) records which contracts have executable checks and which service capabilities remain in development.\n\n### Reviewing changes\n\nChanges are reviewed with their effects on privacy, consent, security and compatibility. A protocol change includes the corresponding normative text, schemas, examples and conformance requirements. Implementations follow the requirements for the version they claim.\n\nNew vocabulary keys need a complete value definition, supported disclosure levels, rendering rules, sensitivity review, examples and conformance coverage. Keys remain unavailable until their vocabulary version is supported and negotiated.\n\n### Compatibility\n\nAfter the wire protocol is released, breaking changes require a new wire version and URL prefix, an approved architecture decision record and migration guidance. Additive changes retain existing consent and disclosure limits. Reserved extensions need their own complete contracts and evidence before implementations can claim support.\n\n### Published editions\n\nEach edition includes the specification text, machine-readable contracts, examples and conformance requirements. Downloadable bundles include a source revision and checksums so implementations can identify the exact edition they use.\n\n## A17.5 Capability claims and acceptance\n\nA17 defines provider Core/Write/Portable/Delegated separately from recipient Read/Contribute/Reciprocal. Discovery identifies role, version, exact categories, directions, evidence and limitations. Version 1 assurance is self-declared; there is no issued certification or badge. No export means no full portability claim.\n\nChecks for A17.5 and the requirements first published as A18: CONSENT-01, ADS-01/02, TEMP-01/02/03, CONTRIB-01/02/03, PORT-01 and CLAIM-01 in the [conformance manifest](../conformance/profiles.json). SCOPE-10 and structural/pure policy tests execute now; service authorisation, temporal selection, cryptography, transactions and integrations remain implementation gates.\n\n## A17.6 Self-declaration and reserved capabilities\n\nFor v1, capability discovery uses [capability-claim.json](../schemas/capability-claim.json) and explicitly states `assurance:self-declared`, role, protocol/document version, data categories, directions, limitations and test evidence. A provider must not turn self-declaration into a verified/certified badge or trusted client class. No v1 tier can be purchased or inferred from passing a structural schema check. Registry tiers, signed registry attestations, registry-mediated governance and emergency cards are reserved for a later version; see the placeholders for [A12](reserved/a12-recipient-registry.md) and [A13](reserved/a13-emergency-information.md).\n\nAn implementation offering a separate experimental emergency card must clearly distinguish it from v1 conformance. Offline scans cannot reliably be logged or remotely revoked, and the person must be told before creating one. Never label an offline disclosure as a logged Autonym read or make an emergency-care reliability claim from this protocol.\n\nChecks: CLAIM-01 and all checks required by the declared capabilities.\n", "core/identifiers.md": "# Typed record identifiers\n\n**Status:** implementation note for A4.1. It records how the reference library implements the section; its requirements bind that library and add none for other implementations. Document version `1.0-draft-1`.\n\nThis implements the prefixed ULIDs in [A4.1](a04-data-model.md) and the additional entity types in the service design. It does not implement public or pairwise handles, access tokens, account recovery or any authentication mechanism. Identifiers are not secrets or proof of authority; they encode a creation timestamp.\n\nThe single source of truth is `packages/schema/src/identifiers.ts`. The [generated schema](../schemas/identifier.json) accepts any supported type; callers MUST use `idSchemaFor(prefix)` at a boundary that expects one particular type. [Synthetic examples](../examples/identifiers.json) are generated from the same prefix enum.\n\n| Prefix | Entity |\n| ------ | ----------------- |\n| acc_ | Account |\n| rec_ | Record |\n| prf_ | Record partition |\n| ent_ | Entry |\n| gr_ | Grant |\n| rd_ | Read |\n| prp_ | Proposal |\n| cl_ | Client |\n| evt_ | Chain event |\n| pi_ | Purge instruction |\n| rule_ | Standing rule |\n| dp_ | Delegation policy |\n| imp_ | Import job |\n| exp_ | Export job |\n\nThe wire representation MUST use the exact lower-case prefix and underscore followed by 26 upper-case Crockford Base32 characters. The first ULID character MUST be 0-7; the remaining alphabet excludes I, L, O and U. Whitespace, abbreviated ids, alternative case, look-alike substitutions and trailing bytes are rejected rather than normalised. The canonical upper-case representation removes aliases at storage and authorisation boundaries. This is an explicit Autonym wire constraint; generic ULID tools may also accept lower-case text.\n\n`createId(prefix, timestampMilliseconds)` uses the maintained `ulid` library's default platform CSPRNG and requires an explicit integral Unix timestamp from 1 through 281474976710655 inclusive. A service supplies its Clock reading as whole milliseconds, with any finer digits dropped rather than rounded (`epochMilliseconds(clock.now())`); the helper MUST NOT use ambient time, Math.random or a custom PRNG. Zero is valid in the wire format, but generation deliberately rejects zero: the pinned library treats it as a request for ambient time. Invalid prefixes/timestamps or missing secure randomness fail with a fixed `IdentifierError`, containing no input or underlying library error. These are local helper failures, not new transport error codes.\n\nGeneration is random within a millisecond, not monotonic. Database uniqueness constraints and conflict handling remain required in the persistence package; sample generation is not proof that collisions are impossible. No timestamp or id is suitable as a bearer credential. Pairwise recipient identifiers remain a separate privacy contract.\n\nID-01 checks every prefix and canonical boundaries, including ULID overflow. ID-02 checks explicit time with ambient time and Math.random made unavailable. ID-03 checks invalid generation input. ID-04 checks 10,000 generated ids against the type and timestamp. ID-05 bundles the public schema package for a real Chromium browser, exercises scope parsing and generation, and proves generation fails without WebCrypto. The browser harness is built separately and is absent from the application image.\n\nThe entry model and its value shapes are specified in [A4.1](a04-data-model.md) and the [entry schema](../schemas/entry.json); this note covers identifiers only. The reference provider's record store refuses any stored identifier with a prefix from the table above that is not in canonical form.\n", "core/principles.md": "# Design principles\n\n**Status:** informative. Document version `1.0-draft-1`.\n\n- Every disclosure level needs a grant, including L0. There is no ambient read or default permission.\n- L1 may contain safe structure, roles and age bands. Identifiers still require their permitted higher level.\n- The stored grant wins over token scope and request filters. A request can only narrow it.\n- Read and contribution authority are separate, independently approved and revoked.\n- Temporary context is a bounded overlay or additive state; expiry restores the baseline without a destructive edit.\n- Advertising is optional, off by default, one read within 24 hours, limited to three confirmed entertainment-preference keys, with no retention, delegation or onward right.\n- Each recipient gets its own handle and entry references. Canonical IDs and raw derivation evidence remain private.\n- Portability transfers data and history, not executable credentials or consent authority.\n- Provider and recipient claims are distinct. No implementation or certification follows from publishing a schema.\n- The 30-key vocabulary 1.1 is closed and retains the original 27 keys from vocabulary 1.0. Broader candidates, credential presentations, emergency cards, registries and guardian/duress operation require later specifications.\n\nThe [interpretation notes](../history/source-ambiguities.md) link these principles to their requirements. See [versioning and changes](a17-conformance-and-change.md#a174-versioning-and-editions) for the review and compatibility process.\n", "core/reserved/a12-recipient-registry.md": "# A12. Recipient registry and trust\n\n**Status:** informative placeholder for a capability reserved for 2.0. It carries no requirements. Document version `1.0-draft-1`.\n\nThe Trust capability, registry tiers, signed registry attestations and registry-mediated governance are reserved for a later version. A future registry extension would need to specify issuer trust, verification, expiry, suspension, appeal, purge evidence and independent assessment before certification claims could become valid. Trust certification is outside v1, with no issued certificates.\n\nThe version 1 rules this chapter stated in edition 0.2-draft now live in [A2.1](../a02-actors-and-trust.md#a21-recipient-registries-and-trust-evidence) (registries and trust evidence), [A6.8](../a06-authorisation.md#a68-client-standing-and-safety-purposes) (client standing) and [A17.6](../a17-conformance-and-change.md#a176-self-declaration-and-reserved-capabilities) (self-declaration), with their check ids unchanged.\n", "core/reserved/a13-emergency-information.md": "# A13. Emergency information\n\n**Status:** informative placeholder for a capability reserved for 2.0. It carries no requirements. Document version `1.0-draft-1`.\n\nEmergency cards are outside the v1 interoperable capability set. The future design direction is an explicitly person-selected clinical subset carried using a separately verified health-link standard. That work would need to establish clinical mappings, offline disclosure, key distribution, expiry, revocation limitations, consent and device access before release. This draft does not invent a SMART Health Link or IPS wire format or claim compliance with those standards. Clinical interoperability and offline-card acceptance are outside v1 scope.\n\nThe version 1 rules this chapter stated in edition 0.2-draft now live in [A6.8](../a06-authorisation.md#a68-client-standing-and-safety-purposes) (safety and medical purposes) and [A17.6](../a17-conformance-and-change.md#a176-self-declaration-and-reserved-capabilities) (experimental emergency cards), with their check id unchanged.\n", "core/reserved/a14-connectors.md": "# Continuous connectors (reserved from A14)\n\n**Status:** informative placeholder for a capability reserved for 2.0. It carries no requirements. Document version `1.0-draft-1`.\n\nVersion 1 contributions use the authenticated HTTPS push of [A14](../a14-contributions.md): one event per request within a bounded, separately revocable contribution grant. Batches, background polling, streaming subscriptions and vendor-specific export formats are outside version 1 (A14.1).\n\nA continuous connector framework is reserved for 2.0. This page adds no requirement: continuous connectors are outside version 1 conformance under A14.1, and A1.2 and A17.1 govern what an implementation may claim.\n", "core/scopes.md": "# Scope grammar implementation\n\n**Status:** implementation note for A6.2. It records how the reference library implements the section; its requirements bind that library and add none for other implementations. Document version `1.0-draft-1`.\n\nThis implements the grammar in [A6.2](a06-authorisation.md), not an authorisation server. An authorisation server parses the `scope` of an authorisation or token request with it; no recipient route accepts scopes. Scopes from a token MUST NOT replace the stored grant as authority (A6.2; read-path verification remains pending).\n\nThe source of truth is `packages/schema/src/scope/index.ts`. [scopes.json](../scopes.json) publishes the closed purpose/capability sets and limits, with the purpose codes and capability meanings below; its `scope` marker, `grammar-and-meanings`, says that it holds the grammar and the meanings issuance applies (A6.2), not an endpoint; [scope-token.json](../schemas/scope-token.json) validates one token; [examples](../examples/scopes.json) are generated and round-trip through the parser. A token schema does not validate a complete grant. Complete sets MUST pass the semantic checks below.\n\n## Parsing and canonical form\n\n`parseScopes(string)` returns a canonical token array; `serialiseScopes(array)` revalidates and joins it. Both MUST reject unknown tokens, trailing content, invalid case and malformed boundaries with `invalid_scope`. No input is trimmed, decoded or case-folded. The separator is exactly one ASCII space. Input is limited to 16,384 ASCII bytes, 128 tokens before deduplication and 128 characters per domain. Non-ASCII input, leading/trailing spaces and all other whitespace are rejected. The domain character alphabet is the published scope grammar, including extension names and exact case. A syntactically valid domain is not automatically a registered vocabulary domain.\n\nExactly one purpose token MUST occur before deduplication. A valid token set without one fails with `purpose_missing`; two occurrences, even identical ones, fail with `invalid_scope`. An empty string also fails with `purpose_missing`. Malformed input is rejected before the purpose count. All ten purposes and eight capability strings are generated from schemas.\n\n`*` MUST appear only on L0 read scopes. No missing domain implies an L0 floor. `ceilingFor(set, domain)` returns the explicit domain ceiling, or L0 for a wildcard, or null. It revalidates the whole set and rejects a wildcard or invalid queried domain. It is a ceiling lookup only: expiry, status, read counters, confidence, purpose, declared-only and every other stored grant restriction are still required before a read.\n\nRead duplicates for the same exact domain and the same declared-only mode MUST collapse to their highest level at the first occurrence's position. Duplicate capabilities collapse to their first occurrence. Explicit domains and `*` remain distinct. Mixed unrestricted and `:declared` reads for the same domain MUST be rejected in this implementation. At grant issuance, any accepted `:declared` modifier makes the entire stored grant `declared_only:true`, including wildcard/explicit-domain combinations. Consent shows this restriction. A person wanting different declaration restrictions uses separate grants. Explicit domain ceilings take precedence over the wildcard L0 ceiling; no declaration restriction is removed. No present code treats a ceiling as permission to disclose an entry.\n\nValidation errors contain a fixed name, registered code and title, never the input or the underlying Zod issues. `invalid_scope` and `purpose_missing` are registered as status 400 Problem Details variants for routes outside OAuth. At the authorisation and token endpoints, a record-grant scope the parser refuses fails OAuth `invalid_scope` (RFC 6749 sections 4.1.2.1 and 5.2) in the OAuth error form, and so does a scope without a purpose. The A6.6 lifecycle scope is not a record-grant scope: the token endpoint checks it on its own, outside the parser. The parser itself throws `ScopeValidationError`.\n\n## Purpose codes\n\nWhere a purpose has to be an absolute URI, such as PDPP's `purpose_code` (B1.4), the purpose `autonym:purpose:` is written `urn:autonym:purpose:`: `urn:autonym:purpose:booking`, for example. [scopes.json](../scopes.json) lists the ten codes as `purpose_codes`. No other code names an Open Personal Context purpose.\n\n## Capability meanings\n\nEach capability scope has one meaning at issuance (A6.2), published in [scopes.json](../scopes.json) as `capability_meanings`. A client receives a third-party capability only when its class may hold it (A2).\n\n| Scope | Who may hold it | Meaning |\n| ------------------------ | --------------- | ----------------------------------------------------------------------------- |\n| `autonym:propose` | Third party | Requests a contribution grant, separate from any read grant |\n| `autonym:confirm` | Third party | Sets `allow_confirmation` on that contribution grant |\n| `autonym:persist` | Third party | Permits `persist_until` on a read grant |\n| `autonym:delegate` | Third party | Sets `allow_delegation` on a read grant |\n| `autonym:confirm:safety` | First party | Reserved to the person's own first-party clients; never issued to a recipient |\n| `autonym:write:declared` | First party | Reserved to the person's own first-party clients; never issued to a recipient |\n| `autonym:log:read` | First party | Reserved to the person's own first-party clients; never issued to a recipient |\n| `autonym:manage` | First party | Reserved to the person's own first-party clients; never issued to a recipient |\n\nA capability of one grant kind cannot be combined with a request for the other kind, so `autonym:propose` with a read scope, `autonym:persist` or `autonym:delegate` is a mixed request. The second of the published [examples](../examples/scopes.json), which reads two domains and asks for `autonym:propose`, is valid grammar but such a mixed request, so issuance refuses it with `invalid_scope`. `openid` and `offline_access` are not Open Personal Context scopes: the parser refuses them like any other unknown token.\n\n## Advertising purpose\n\n`autonym:purpose:advertising` is separate from `personalisation` and `recommendation`. The parser MUST preserve that distinction and MUST NOT add read, proposal or persistence capabilities from a purpose alone. A combined advertising and personalisation set MUST be rejected by the one-purpose rule; separate consent requires separate grants. SCOPE-10 checks this grammar boundary. [A6.7](a06-authorisation.md#a67-consent-and-advertising) defines the draft consent requirements. Parsing a scope does not establish consent, an eligible domain or permission to disclose.\n\n## Executable checks\n\n`packages/schema/test/scopes.test.ts` supplies SCOPE-01 (source fixture), SCOPE-02 (closed purposes/capabilities), SCOPE-03 (one purpose), SCOPE-04 (wildcard and absence), SCOPE-05 (duplicates and declaration ambiguity), SCOPE-06 (exact parsing), SCOPE-07 (limits and caller boundary validation), SCOPE-08 (10,000 arbitrary inputs) and SCOPE-09 (10,000 valid sets, round trips and ceiling bounds). SCOPE-10 checks the advertising boundary. These are grammar checks, not certification of the A17 recipient capabilities.\n\nRecipient OpenAPI/MCP contracts are now generated, while endpoints and SDK implementations remain pending. Parsing is not an endpoint or a conformance claim. The separate client-lifecycle scope in A6 is not a record-grant scope.\n", "core/terminology.md": "# Terminology\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n- **Person**: the individual who controls a record.\n- **Record**: the person's stored context, partitioned where needed and protected by the provider.\n- **Partition**: a selected portion of the record; the historical wire field is `profile_id`.\n- **Handle**: the opaque, normally pairwise address a recipient uses after consent.\n- **Entry**: a typed fact, preference or state with provenance, versions and temporal validity.\n- **Overlay**: an explicitly enabled, bounded preference targeting a standing baseline.\n- **Domain/key**: a vocabulary category and its exact admitted value definition.\n- **Level**: the permitted disclosure detail, L0 to L3; every level requires a grant.\n- **Recipient/client**: the authenticated assistant or service requesting a defined capability.\n- **Grant**: the provider's stored authority for one recipient and purpose, approved by the person.\n- **Read receipt**: the owner-visible evidence committed with a disclosure.\n- **Purge instruction**: a signed request to delete copies obtained under an ended grant.\n- **Provider**: a service implementing declared Autonym capabilities; conformance requires evidence.\n", "errors.json": "{\n \"scope\": \"complete-1.0\",\n \"errors\": {\n \"invalid_scope\": {\n \"type\": \"urn:autonym:error:invalid_scope\",\n \"status\": 400,\n \"title\": \"Invalid scope\",\n \"sections\": [\n \"scopes\"\n ]\n },\n \"purpose_missing\": {\n \"type\": \"urn:autonym:error:purpose_missing\",\n \"status\": 400,\n \"title\": \"Purpose is required\",\n \"sections\": [\n \"scopes\"\n ]\n },\n \"invalid_request\": {\n \"type\": \"urn:autonym:error:invalid_request\",\n \"status\": 400,\n \"title\": \"Invalid request\",\n \"sections\": [\n \"B4.1\"\n ]\n },\n \"not_found\": {\n \"type\": \"urn:autonym:error:not_found\",\n \"status\": 404,\n \"title\": \"Not found\",\n \"sections\": [\n \"B4.3\"\n ]\n },\n \"idempotency_conflict\": {\n \"type\": \"urn:autonym:error:idempotency_conflict\",\n \"status\": 409,\n \"title\": \"Idempotency key already used\",\n \"sections\": [\n \"A14.2\",\n \"B4.1\"\n ]\n },\n \"payload_too_large\": {\n \"type\": \"urn:autonym:error:payload_too_large\",\n \"status\": 413,\n \"title\": \"Request too large\",\n \"sections\": [\n \"B4.1\"\n ]\n },\n \"rate_limited\": {\n \"type\": \"urn:autonym:error:rate_limited\",\n \"status\": 429,\n \"title\": \"Try again later\",\n \"sections\": [\n \"A6.1\",\n \"B4.3\"\n ]\n },\n \"internal_error\": {\n \"type\": \"urn:autonym:error:internal_error\",\n \"status\": 500,\n \"title\": \"Request could not be completed\",\n \"sections\": [\n \"A5.2\",\n \"B4.3\"\n ]\n },\n \"not_ready\": {\n \"type\": \"urn:autonym:error:not_ready\",\n \"status\": 503,\n \"title\": \"Service is not ready\",\n \"sections\": [\n \"A15.3\",\n \"B4.3\"\n ]\n },\n \"domain_not_granted\": {\n \"type\": \"urn:autonym:error:domain_not_granted\",\n \"status\": 403,\n \"title\": \"Domain is not granted\",\n \"sections\": [\n \"A5.2\"\n ]\n },\n \"grant_revoked\": {\n \"type\": \"urn:autonym:error:grant_revoked\",\n \"status\": 403,\n \"title\": \"Grant is no longer active\",\n \"sections\": [\n \"A5.2\"\n ]\n },\n \"grant_expired\": {\n \"type\": \"urn:autonym:error:grant_expired\",\n \"status\": 403,\n \"title\": \"Grant has expired\",\n \"sections\": [\n \"A5.2\"\n ]\n },\n \"grant_exhausted\": {\n \"type\": \"urn:autonym:error:grant_exhausted\",\n \"status\": 403,\n \"title\": \"Grant limit reached\",\n \"sections\": [\n \"A5.2\",\n \"B1.5\"\n ]\n },\n \"dpop_required\": {\n \"type\": \"urn:autonym:error:dpop_required\",\n \"status\": 401,\n \"title\": \"Sender proof is required\",\n \"sections\": [\n \"A6.3\"\n ]\n },\n \"dpop_invalid\": {\n \"type\": \"urn:autonym:error:dpop_invalid\",\n \"status\": 401,\n \"title\": \"Sender proof is invalid\",\n \"sections\": [\n \"A6.3\"\n ]\n },\n \"safety_write_forbidden\": {\n \"type\": \"urn:autonym:error:safety_write_forbidden\",\n \"status\": 403,\n \"title\": \"First-party confirmation is required\",\n \"sections\": [\n \"A14.3\"\n ]\n },\n \"inference_forbidden\": {\n \"type\": \"urn:autonym:error:inference_forbidden\",\n \"status\": 403,\n \"title\": \"Inference is not permitted\",\n \"sections\": [\n \"A14.3\"\n ]\n },\n \"proposal_not_found\": {\n \"type\": \"urn:autonym:error:proposal_not_found\",\n \"status\": 404,\n \"title\": \"Proposal was not found\",\n \"sections\": [\n \"A8\"\n ]\n },\n \"proposal_decided\": {\n \"type\": \"urn:autonym:error:proposal_decided\",\n \"status\": 409,\n \"title\": \"Proposal has already been decided\",\n \"sections\": [\n \"A14.3\"\n ]\n },\n \"value_rejected\": {\n \"type\": \"urn:autonym:error:value_rejected\",\n \"status\": 422,\n \"title\": \"Value does not match the vocabulary\",\n \"sections\": [\n \"A14.2\"\n ]\n },\n \"capability_not_granted\": {\n \"type\": \"urn:autonym:error:capability_not_granted\",\n \"status\": 403,\n \"title\": \"Capability is not granted\",\n \"sections\": [\n \"A6.2\"\n ]\n },\n \"advertising_ineligible\": {\n \"type\": \"urn:autonym:error:advertising_ineligible\",\n \"status\": 403,\n \"title\": \"Advertising permission is unavailable\",\n \"sections\": [\n \"A6.7\"\n ]\n },\n \"client_suspended\": {\n \"type\": \"urn:autonym:error:client_suspended\",\n \"status\": 403,\n \"title\": \"Client is suspended\",\n \"sections\": [\n \"A6.8\"\n ]\n },\n \"entry_limit_reached\": {\n \"type\": \"urn:autonym:error:entry_limit_reached\",\n \"status\": 409,\n \"title\": \"Entry limit reached\",\n \"sections\": [\n \"A4.1\"\n ]\n },\n \"session_required\": {\n \"type\": \"urn:autonym:error:session_required\",\n \"status\": 401,\n \"title\": \"Sign-in is required\",\n \"sections\": [\n \"A15.3\"\n ]\n },\n \"csrf_invalid\": {\n \"type\": \"urn:autonym:error:csrf_invalid\",\n \"status\": 403,\n \"title\": \"Request could not be verified\",\n \"sections\": [\n \"A15.3\"\n ]\n },\n \"reauthentication_required\": {\n \"type\": \"urn:autonym:error:reauthentication_required\",\n \"status\": 403,\n \"title\": \"Recent sign-in is required\",\n \"sections\": [\n \"A15.3\"\n ]\n },\n \"signup_unavailable\": {\n \"type\": \"urn:autonym:error:signup_unavailable\",\n \"status\": 403,\n \"title\": \"Sign-up is not available\",\n \"sections\": [\n \"A15.3\"\n ]\n },\n \"sign_in_failed\": {\n \"type\": \"urn:autonym:error:sign_in_failed\",\n \"status\": 400,\n \"title\": \"Sign-in failed\",\n \"sections\": [\n \"A15.3\"\n ]\n }\n },\n \"external\": {\n \"oauth\": {\n \"invalid_request\": [\n \"A6.3\"\n ],\n \"invalid_client\": [\n \"A6.3\"\n ],\n \"invalid_grant\": [\n \"A6.3\",\n \"A6.4\"\n ],\n \"unauthorized_client\": [\n \"A6.3\"\n ],\n \"unsupported_grant_type\": [\n \"A6.3\"\n ],\n \"unsupported_response_type\": [\n \"A6.3\"\n ],\n \"invalid_scope\": [\n \"A2\",\n \"A6.2\",\n \"A6.3\",\n \"scopes\"\n ],\n \"access_denied\": [\n \"A6.3\"\n ],\n \"server_error\": [\n \"A6.3\"\n ],\n \"login_required\": [\n \"A6.3\"\n ],\n \"consent_required\": [\n \"A6.3\"\n ],\n \"interaction_required\": [\n \"A6.3\"\n ],\n \"invalid_redirect_uri\": [\n \"A6.1\"\n ],\n \"invalid_client_metadata\": [\n \"A6.1\"\n ],\n \"invalid_request_uri\": [\n \"A6.3\"\n ],\n \"invalid_target\": [\n \"A6.3\"\n ],\n \"invalid_authorization_details\": [\n \"A6.2\",\n \"A6.3\",\n \"B1.5\"\n ],\n \"unsupported_token_type\": [\n \"A6.5\"\n ],\n \"invalid_token\": [\n \"A6.3\",\n \"B3.4\"\n ],\n \"invalid_dpop_proof\": [\n \"A6.3\",\n \"A6.5\"\n ],\n \"use_dpop_nonce\": [\n \"A6.3\",\n \"A6.5\"\n ]\n },\n \"pdpp\": {\n \"grant_expired\": [\n \"B1.4\"\n ],\n \"grant_revoked\": [\n \"B1.4\"\n ],\n \"not_found\": [\n \"B1.7\"\n ],\n \"invalid_request\": [\n \"B1.7\"\n ],\n \"blob_not_found\": [\n \"B1.7\"\n ]\n }\n }\n}\n", "examples/authorisation.json": "{\n \"example_notice\": \"Synthetic examples. The client key was generated for these examples and its private part discarded, so it belongs to no client and nobody can authenticate with it. Never register it, or any published test key.\",\n \"client_metadata\": {\n \"redirect_uris\": [\n \"https://service.example/oauth/callback\"\n ],\n \"token_endpoint_auth_method\": \"private_key_jwt\",\n \"grant_types\": [\n \"authorization_code\",\n \"refresh_token\"\n ],\n \"response_types\": [\n \"code\"\n ],\n \"client_name\": \"Example service\",\n \"client_uri\": \"https://service.example/\",\n \"jwks\": {\n \"keys\": [\n {\n \"kty\": \"EC\",\n \"crv\": \"P-256\",\n \"x\": \"njOeiZQUe2HwY2idXfXktt1AXEEB1iHPaSbPXQYWub4\",\n \"y\": \"cLyI-5n-XMRpVwvUTVtdHxxfEbsKbr2Fh2_AdEwH5eU\",\n \"kid\": \"3e5EGnVT8u8s0A5VYevGKyCmkIyUNwF0VWAB7frX880\",\n \"alg\": \"ES256\",\n \"use\": \"sig\"\n }\n ]\n },\n \"dpop_bound_access_tokens\": true,\n \"autonym_purge_uri\": \"https://service.example/autonym/purge\"\n },\n \"client_metadata_document\": {\n \"client_id\": \"https://assistant.example/oauth/client.json\",\n \"redirect_uris\": [\n \"https://assistant.example/oauth/callback\",\n \"http://127.0.0.1/callback\"\n ],\n \"token_endpoint_auth_method\": \"none\",\n \"grant_types\": [\n \"authorization_code\",\n \"refresh_token\"\n ],\n \"response_types\": [\n \"code\"\n ],\n \"client_name\": \"Example assistant\",\n \"client_uri\": \"https://assistant.example/\"\n },\n \"access_token_claims\": {\n \"iss\": \"https://autonym.example\",\n \"aud\": \"https://autonym.example/mcp\",\n \"sub\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"client_id\": \"https://assistant.example/oauth/client.json\",\n \"jti\": \"example-read-token-0001\",\n \"iat\": 1789948800,\n \"exp\": 1789952400,\n \"cnf\": {\n \"jkt\": \"3e5EGnVT8u8s0A5VYevGKyCmkIyUNwF0VWAB7frX880\"\n },\n \"autonym_grant_id\": \"gr_01K5ZJ8Q2M3N4P5R6S7T8V9W0X\",\n \"autonym_purpose\": \"personalisation\",\n \"scope\": \"autonym:read:agent:L1 autonym:read:communication:L1 autonym:purpose:personalisation\"\n },\n \"contribution_access_token_claims\": {\n \"iss\": \"https://autonym.example\",\n \"aud\": \"https://autonym.example/v1\",\n \"sub\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"client_id\": \"cl_01K5ZJ8Q2M3N4P5R6S7T8V9W0X\",\n \"jti\": \"example-contribution-token-0001\",\n \"iat\": 1789948800,\n \"exp\": 1789952400,\n \"cnf\": {\n \"jkt\": \"3e5EGnVT8u8s0A5VYevGKyCmkIyUNwF0VWAB7frX880\"\n },\n \"autonym_grant_id\": \"gr_01K5ZJ8Q2M3N4P5R6S7T8V9W1Y\",\n \"autonym_purpose\": \"personalisation\",\n \"scope\": \"autonym:propose autonym:purpose:personalisation\",\n \"authorization_details\": [\n {\n \"type\": \"urn:autonym:authorization-details:contribute\",\n \"contribute\": [\n {\n \"domain\": \"agent\",\n \"keys\": [\n \"always_do\",\n \"never_do\"\n ]\n }\n ],\n \"max_events\": 20,\n \"allow_confirmation\": false\n }\n ]\n },\n \"lifecycle_token_claims\": {\n \"autonym_token_kind\": \"lifecycle\",\n \"iss\": \"https://autonym.example\",\n \"aud\": \"https://autonym.example/v1\",\n \"sub\": \"cl_01K5ZJ8Q2M3N4P5R6S7T8V9W0X\",\n \"client_id\": \"cl_01K5ZJ8Q2M3N4P5R6S7T8V9W0X\",\n \"scope\": \"autonym:lifecycle:purge\",\n \"jti\": \"example-lifecycle-token-0001\",\n \"iat\": 1789948800,\n \"exp\": 1789949100,\n \"cnf\": {\n \"jkt\": \"3e5EGnVT8u8s0A5VYevGKyCmkIyUNwF0VWAB7frX880\"\n }\n },\n \"contribution_detail\": {\n \"type\": \"urn:autonym:authorization-details:contribute\",\n \"contribute\": [\n {\n \"domain\": \"agent\",\n \"keys\": [\n \"always_do\",\n \"never_do\"\n ]\n }\n ],\n \"max_events\": 20,\n \"allow_confirmation\": false\n }\n}\n", "examples/identifiers.json": "[\n {\n \"prefix\": \"acc_\",\n \"id\": \"acc_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"rec_\",\n \"id\": \"rec_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"prf_\",\n \"id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"ent_\",\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"gr_\",\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"rd_\",\n \"id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"prp_\",\n \"id\": \"prp_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"cl_\",\n \"id\": \"cl_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"evt_\",\n \"id\": \"evt_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"pi_\",\n \"id\": \"pi_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"rule_\",\n \"id\": \"rule_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"dp_\",\n \"id\": \"dp_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"imp_\",\n \"id\": \"imp_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n {\n \"prefix\": \"exp_\",\n \"id\": \"exp_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n }\n]\n", "examples/identity-framing.json": "[\n {\n \"key_hex\": \"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f\",\n \"input\": {\n \"purpose\": \"autonym.handle.v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"rotation\": \"00000000-0000-4000-8000-000000000001\"\n },\n \"canonical_utf8\": \"{\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"purpose\\\":\\\"autonym.handle.v1\\\",\\\"rotation\\\":\\\"00000000-0000-4000-8000-000000000001\\\"}\",\n \"hmac_sha256_hex\": \"bfb0de298b0bc4e0876aa25fabfad963a620e0a744e839608bbb6ff59cce5b49\",\n \"base32\": \"x6yn4kmlbpcobb3kujp2x6wzmotcbyfhitudsyelxnx7lhgolneq\",\n \"result\": \"autonym:x6yn4kmlbpcobb3kujp2x6wzmotcbyfh@autonym.example\"\n },\n {\n \"key_hex\": \"000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f\",\n \"input\": {\n \"purpose\": \"autonym.entry.v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"rotation\": \"00000000-0000-4000-8000-000000000001\",\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V7\"\n },\n \"canonical_utf8\": \"{\\\"client_id\\\":\\\"https://recipient.example/client\\\",\\\"entry_id\\\":\\\"ent_01JAB3K9Q7X2M5N8P0R1S4T6V7\\\",\\\"purpose\\\":\\\"autonym.entry.v1\\\",\\\"rotation\\\":\\\"00000000-0000-4000-8000-000000000001\\\"}\",\n \"hmac_sha256_hex\": \"6b785b5a3109d624a3dee0ad96248c5e8368f3fc0fb54628466a01daadcd966f\",\n \"base32\": \"nn4fwwrrbhlcji664cwzmjeml2bwr474b62umkcgnia5vlonszxq\",\n \"result\": \"rent_nn4fwwrrbhlcji664cwzmjeml2bwr474b62umkcgnia5vlonszxq\"\n }\n]\n", "examples/media/README.md": "# Media worked example\n\n**Status:** informative. Document version `1.0-draft-1`. Every file in this folder except this page is generated by `packages/schema/src/examples/media.ts` through `pnpm --filter @autonym/schema generate`, and `pnpm check:generated` fails if any differs. Do not edit them by hand.\n\nAll data here is synthetic. The person, the recipient and the identifiers are invented for this example, and the keys are the synthetic keys published with the [test vectors](../../conformance/vectors/README.md).\n\n## The story\n\nA person keeps a few media preferences in their record: viewing genres, two programmes they watched, reading genres and music genres. They also keep how they like an assistant to talk to them: brief answers, an informal tone, British English ([`person.json`](person.json)).\n\nA recommendation service, `https://recommender.example/client`, asks for permission to suggest something to watch, read or listen to this evening. The person is shown three versions of the same request and approves each, so the example can compare them. They differ only in the disclosure level (A5.1):\n\n| Grant | Level | What the service receives |\n| ---------------------------------- | ----- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| [`grants/l0.json`](grants/l0.json) | L0 | Only the category of each key, for example `viewing_context`. It learns which kinds of preference exist, nothing more ([rendering](renderings/l0.json)) |\n| [`grants/l1.json`](grants/l1.json) | L1 | The genres, tone, language and verbosity themselves, which carry no identifier. Viewing history stays at its category ([rendering](renderings/l1.json)) |\n| [`grants/l2.json`](grants/l2.json) | L2 | The same as L1 for these keys, and the right to keep what it reads until the grant ends ([rendering](renderings/l2.json)) |\n\nTwo things the example shows:\n\n- **The vocabulary decides what a level means for each key.** The genre lists are identifier-free, so the vocabulary renders them in full from L1 upwards. Viewing history supports only L0 and L3 in the vocabulary, so even the L2 grant receives `viewing_context` for both programmes. The compiler picks the highest level the key supports at or below the grant's ceiling (A5.2).\n- **The compiler is the only renderer.** Each rendering is the output of the A5 compiler over `person.json` and the grant, signed as A5.4 describes. The test recompiles it and compares byte for byte.\n\nAll three grants are for the `recommendation` purpose (A6.2). None of them is for advertising, so the advertising rules of A6.7 are not exercised.\n\n## Receipts\n\nEach read appends a receipt to the person's log ([L0](receipts/l0.json), [L1](receipts/l1.json), [L2](receipts/l2.json)) before the response is returned (A9). A receipt names the provider, the grant, the client, the purpose and the read ID, and lists the internal entry references and levels returned. Those references are visible to the person only; the recipient sees the client-bound `rent_` aliases in the rendering. `request` is the A9 canonical request: the domains sorted, with `declared_only` and `min_confidence` written out although the request omitted them. `response_hash` is the SHA-256 of the canonical rendering without its proof. The three receipts form one hash chain: each later one points at the previous receipt's `hash`. They are an excerpt of the person's log. A real log also holds the non-read events of A9 in the same chain, such as `grant_created` before the first read and `grant_revoked`, `purge_issued` and `purge_acknowledged` after it, so its first receipt would not have a null `prev_hash`.\n\n## Purge\n\nOnly the L2 grant may keep what it reads. The grant files show each grant as issued, before the reads and before this revocation. When the person ends the L2 grant, the provider issues a signed purge instruction (A10): [`purge/instruction.json`](purge/instruction.json) holds the claims, and [`purge/instruction-token.json`](purge/instruction-token.json) holds the signed token. A recipient receives it as a compact JWT, `protected.payload.signature`; the file stores the same three parts in the RFC 7515 flattened JSON form, because the repository's secret scanner rejects any committed compact JWT and allowlisting is not this example's decision. The recipient deletes its copy and returns a signed acknowledgement before the deadline ([`purge/ack.json`](purge/ack.json)). The acknowledgement proves only that the recipient signed an attestation that it purged; it does not prove that every copy has gone (A10). As A10 requires, the acknowledgement signature covers the canonical JSON of the acknowledgement without `proof`, by the A5.4 detached method.\n\n## Keys and signatures\n\nThe example is signed with the synthetic keys published with the test vectors in [`keys.json`](../../conformance/vectors/keys.json), private parts included, so anyone can check or reproduce the signatures. The active provider key signs the renderings, the receipts and the purge instruction; the recipient key signs the acknowledgement. The provider's key set in that file also holds a key that retired before these reads, so it signs nothing here. Each key's `kid` is the RFC 7638 thumbprint of its public key, as A5.4 requires. The keys belong to no real provider or recipient and must never be trusted outside the vectors and this example.\n\nES256 signatures are randomised. The generator therefore keeps an existing signature while it still verifies over the regenerated content, and signs afresh only when the content changes.\n\n## Identifiers\n\nThe pairwise handle, the `rent_` aliases and the other identifiers have the right shape but are not derived. The A3.2 derivation is shown by the vectors in [`identity-framing.json`](../identity-framing.json).\n\n## Checks\n\n`packages/schema/test/media-example.test.ts` checks that:\n\n- every file validates against its schema;\n- recompiling gives the same renderings, and their signatures verify;\n- every rendering, receipt and the acknowledgement verifies from its published text with the reference verifier, as A5.4 describes, against the provider's and the recipient's key sets in `keys.json`;\n- the example is signed with the published test-vector keys and holds no key of its own;\n- L0 discloses no identifier for any programme title or genre list (a property test);\n- receipts name the provider and reference the grants and the returned entries, and the hash chain and signatures verify;\n- the purge acknowledgement matches its instruction.\n", "examples/media/grants/l0.json": "{\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G0\",\n \"revision\": 1,\n \"handle\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"client_id\": \"https://recommender.example/client\",\n \"purpose\": {\n \"category\": \"recommendation\",\n \"text\": \"Suggest something to watch, read or listen to this evening\"\n },\n \"issued_at\": \"2026-10-02T18:00:00Z\",\n \"expires_at\": \"2026-10-09T18:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"read\",\n \"read\": [\n {\n \"domain\": \"viewing\",\n \"keys\": null,\n \"max_level\": \"L0\"\n },\n {\n \"domain\": \"reading\",\n \"keys\": null,\n \"max_level\": \"L0\"\n },\n {\n \"domain\": \"music\",\n \"keys\": null,\n \"max_level\": \"L0\"\n },\n {\n \"domain\": \"agent\",\n \"keys\": null,\n \"max_level\": \"L0\"\n },\n {\n \"domain\": \"communication\",\n \"keys\": null,\n \"max_level\": \"L0\"\n }\n ],\n \"declared_only\": false,\n \"min_confidence\": 0,\n \"max_reads\": 10,\n \"reads_used\": 0,\n \"persist_until\": null,\n \"allow_delegation\": false,\n \"onward_share\": false\n}\n", "examples/media/grants/l1.json": "{\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G1\",\n \"revision\": 1,\n \"handle\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"client_id\": \"https://recommender.example/client\",\n \"purpose\": {\n \"category\": \"recommendation\",\n \"text\": \"Suggest something to watch, read or listen to this evening\"\n },\n \"issued_at\": \"2026-10-02T18:00:00Z\",\n \"expires_at\": \"2026-10-09T18:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"read\",\n \"read\": [\n {\n \"domain\": \"viewing\",\n \"keys\": null,\n \"max_level\": \"L1\"\n },\n {\n \"domain\": \"reading\",\n \"keys\": null,\n \"max_level\": \"L1\"\n },\n {\n \"domain\": \"music\",\n \"keys\": null,\n \"max_level\": \"L1\"\n },\n {\n \"domain\": \"agent\",\n \"keys\": null,\n \"max_level\": \"L1\"\n },\n {\n \"domain\": \"communication\",\n \"keys\": null,\n \"max_level\": \"L1\"\n }\n ],\n \"declared_only\": false,\n \"min_confidence\": 0,\n \"max_reads\": 10,\n \"reads_used\": 0,\n \"persist_until\": null,\n \"allow_delegation\": false,\n \"onward_share\": false\n}\n", "examples/media/grants/l2.json": "{\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G2\",\n \"revision\": 1,\n \"handle\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"client_id\": \"https://recommender.example/client\",\n \"purpose\": {\n \"category\": \"recommendation\",\n \"text\": \"Suggest something to watch, read or listen to this evening\"\n },\n \"issued_at\": \"2026-10-02T18:00:00Z\",\n \"expires_at\": \"2026-10-09T18:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"read\",\n \"read\": [\n {\n \"domain\": \"viewing\",\n \"keys\": null,\n \"max_level\": \"L2\"\n },\n {\n \"domain\": \"reading\",\n \"keys\": null,\n \"max_level\": \"L2\"\n },\n {\n \"domain\": \"music\",\n \"keys\": null,\n \"max_level\": \"L2\"\n },\n {\n \"domain\": \"agent\",\n \"keys\": null,\n \"max_level\": \"L2\"\n },\n {\n \"domain\": \"communication\",\n \"keys\": null,\n \"max_level\": \"L2\"\n }\n ],\n \"declared_only\": false,\n \"min_confidence\": 0,\n \"max_reads\": 10,\n \"reads_used\": 0,\n \"persist_until\": \"2026-10-09T18:00:00Z\",\n \"allow_delegation\": false,\n \"onward_share\": false\n}\n", "examples/media/person.json": "{\n \"notice\": \"Synthetic person for the media worked example. No real data.\",\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"recipient\": {\n \"client_id\": \"https://recommender.example/client\",\n \"handle\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"aliases\": [\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM01\",\n \"alias\": \"rent_mediaexamplealiasaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM02\",\n \"alias\": \"rent_mediaexamplealiasbaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM03\",\n \"alias\": \"rent_mediaexamplealiascaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM04\",\n \"alias\": \"rent_mediaexamplealiasdaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM05\",\n \"alias\": \"rent_mediaexamplealiaseaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM06\",\n \"alias\": \"rent_mediaexamplealiasfaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM07\",\n \"alias\": \"rent_mediaexamplealiasgaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM08\",\n \"alias\": \"rent_mediaexamplealiashaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n }\n ]\n },\n \"entries\": [\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM01\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"viewing\",\n \"key\": \"genre_affinity\",\n \"value_type\": \"list\",\n \"value\": [\n \"documentary\",\n \"science_fiction\"\n ],\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM02\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"value_type\": \"structured\",\n \"value\": {\n \"title\": \"Synthetic nature series, episode 3\",\n \"occurred_at\": \"2026-09-28T20:00:00Z\",\n \"completed\": true\n },\n \"context_kind\": \"fact\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM03\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"value_type\": \"structured\",\n \"value\": {\n \"title\": \"Synthetic space drama, episode 1\",\n \"occurred_at\": \"2026-09-30T21:00:00Z\",\n \"completed\": false\n },\n \"context_kind\": \"fact\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM04\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"reading\",\n \"key\": \"genres\",\n \"value_type\": \"list\",\n \"value\": [\n \"mystery\",\n \"science\"\n ],\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM05\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"music\",\n \"key\": \"genres\",\n \"value_type\": \"list\",\n \"value\": [\n \"jazz\",\n \"folk\"\n ],\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM06\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"value_type\": \"enum\",\n \"value\": \"brief\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM07\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"communication\",\n \"key\": \"tone\",\n \"value_type\": \"enum\",\n \"value\": \"informal\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM08\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6M0\",\n \"domain\": \"communication\",\n \"key\": \"preferred_language\",\n \"value_type\": \"enum\",\n \"value\": \"en-GB\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-10-01T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-10-01T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-10-01T00:00:00Z\",\n \"updated_at\": \"2026-10-01T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n }\n ]\n}\n", "examples/media/purge/ack.json": "{\n \"instruction_id\": \"pi_01JAB3K9Q7X2M5N8P0R1S4T6P0\",\n \"attestation\": \"purged\",\n \"at\": \"2026-10-03T15:00:00Z\",\n \"note\": \"Deleted the stored genres and preferences received under this grant.\",\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"w7t35gDe7Lcp0DXE4NrgKar6duLgsJCrvmYyLuVjpIc\",\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Inc3dDM1Z0RlN0xjcDBEWEU0TnJnS2FyNmR1TGdzSkNydm1ZeUx1VmpwSWMiLCJ0eXAiOiJhdXRvbnltLXB1cmdlLWFjaytqd3MifQ..JxxuHsGBNmnusPrDp3nI10f00UbgoLiLHWL3TANOL7J0ZxTP8bEDB27cWjnDu1kMVf2J6bdC29Xpyx7Mfn6eVA\"\n }\n}\n", "examples/media/purge/instruction-token.json": "{\n \"protected\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXB1cmdlK2p3dCJ9\",\n \"payload\": \"eyJpc3MiOiJodHRwczovL2F1dG9ueW0uZXhhbXBsZSIsInN1YiI6ImF1dG9ueW06bWVkaWFleGFtcGxlaGFuZGxlYWFhYWFhYWFhYWFhYWFAYXV0b255bS5leGFtcGxlIiwiYXVkIjoiaHR0cHM6Ly9yZWNvbW1lbmRlci5leGFtcGxlL2NsaWVudCIsImp0aSI6InBpXzAxSkFCM0s5UTdYMk01TjhQMFIxUzRUNlAwIiwiaWF0IjoxNzkxMDE4MDAwLCJleHAiOjE3OTM2MTAwMDAsImF1dG9ueW1fZ3JhbnRfaWQiOiJncl8wMUpBQjNLOVE3WDJNNU44UDBSMVM0VDZHMiIsInJlYXNvbiI6ImdyYW50X2VuZGVkIiwic2NvcGUiOiJhbGwiLCJkZWFkbGluZSI6IjIwMjYtMTAtMTBUMDk6MDA6MDBaIn0\",\n \"signature\": \"-HsEF7zQKDYfUYqtM1pWz1SL_ovYhARBwVJZlvhF9FWz1KvG2GdeymTAgieCIwec7ZwGN1IBcQDeADSFtoytiw\"\n}\n", "examples/media/purge/instruction.json": "{\n \"iss\": \"https://autonym.example\",\n \"sub\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"aud\": \"https://recommender.example/client\",\n \"jti\": \"pi_01JAB3K9Q7X2M5N8P0R1S4T6P0\",\n \"iat\": 1791018000,\n \"exp\": 1793610000,\n \"autonym_grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G2\",\n \"reason\": \"grant_ended\",\n \"scope\": \"all\",\n \"deadline\": \"2026-10-10T09:00:00Z\"\n}\n", "examples/media/receipts/l0.json": "{\n \"event_id\": \"evt_01JAB3K9Q7X2M5N8P0R1S4T6E0\",\n \"provider\": \"https://autonym.example\",\n \"read_id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6R0\",\n \"grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G0\",\n \"client_id\": \"https://recommender.example/client\",\n \"at\": \"2026-10-02T19:00:00Z\",\n \"purpose\": \"recommendation\",\n \"surface\": \"rest\",\n \"request\": {\n \"domains\": [\n \"agent\",\n \"communication\",\n \"music\",\n \"reading\",\n \"viewing\"\n ],\n \"max_level\": \"L0\",\n \"declared_only\": false,\n \"min_confidence\": 0\n },\n \"returned\": [\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM06\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM08\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM07\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM05\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM04\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM01\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM02\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM03\",\n \"version\": 1,\n \"level\": \"L0\"\n }\n ],\n \"response_hash\": \"sha256:14814de352c854929607b6eed2e4e56d79ea1a4616faa97569acf937a2c59fe3\",\n \"prev_hash\": null,\n \"hash\": \"sha256:f0870ebadee01d60d0d0bffc3b49f4eafb30dce14e49a7903a0c1d4ce4dcbed2\",\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..GKQ-F9lMbeD9sVTRiEDQSl0zZLNVQavJZQTku7MLmOQ47uoxI2Mp7hxwLjmGO8f3LAJo8d1OH2zCv4tlXYXfXQ\"\n }\n}\n", "examples/media/receipts/l1.json": "{\n \"event_id\": \"evt_01JAB3K9Q7X2M5N8P0R1S4T6E1\",\n \"provider\": \"https://autonym.example\",\n \"read_id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6R1\",\n \"grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G1\",\n \"client_id\": \"https://recommender.example/client\",\n \"at\": \"2026-10-02T20:00:00Z\",\n \"purpose\": \"recommendation\",\n \"surface\": \"rest\",\n \"request\": {\n \"domains\": [\n \"agent\",\n \"communication\",\n \"music\",\n \"reading\",\n \"viewing\"\n ],\n \"max_level\": \"L1\",\n \"declared_only\": false,\n \"min_confidence\": 0\n },\n \"returned\": [\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM06\",\n \"version\": 1,\n \"level\": \"L1\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM08\",\n \"version\": 1,\n \"level\": \"L1\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM07\",\n \"version\": 1,\n \"level\": \"L1\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM05\",\n \"version\": 1,\n \"level\": \"L1\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM04\",\n \"version\": 1,\n \"level\": \"L1\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM01\",\n \"version\": 1,\n \"level\": \"L1\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM02\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM03\",\n \"version\": 1,\n \"level\": \"L0\"\n }\n ],\n \"response_hash\": \"sha256:0a6b78b7c375c6ec04456992d2adfcc3036a18b3a305cf1b6ef07466d8bdc4af\",\n \"prev_hash\": \"sha256:f0870ebadee01d60d0d0bffc3b49f4eafb30dce14e49a7903a0c1d4ce4dcbed2\",\n \"hash\": \"sha256:b88c3f2d947ceb76315f67dcfd66708835bf877f13e5e63d2195b117ff7f40d5\",\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..bRtUNQwK50NflN9st6W-rBco9erCKgBTjb-OVQrJ1pD7aHa9_-L0ttB71lsfeBoFjryr5EMMxvHxkYpKaOA1Rg\"\n }\n}\n", "examples/media/receipts/l2.json": "{\n \"event_id\": \"evt_01JAB3K9Q7X2M5N8P0R1S4T6E2\",\n \"provider\": \"https://autonym.example\",\n \"read_id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6R2\",\n \"grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G2\",\n \"client_id\": \"https://recommender.example/client\",\n \"at\": \"2026-10-02T21:00:00Z\",\n \"purpose\": \"recommendation\",\n \"surface\": \"rest\",\n \"request\": {\n \"domains\": [\n \"agent\",\n \"communication\",\n \"music\",\n \"reading\",\n \"viewing\"\n ],\n \"max_level\": \"L2\",\n \"declared_only\": false,\n \"min_confidence\": 0\n },\n \"returned\": [\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM06\",\n \"version\": 1,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM08\",\n \"version\": 1,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM07\",\n \"version\": 1,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM05\",\n \"version\": 1,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM04\",\n \"version\": 1,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM01\",\n \"version\": 1,\n \"level\": \"L2\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM02\",\n \"version\": 1,\n \"level\": \"L0\"\n },\n {\n \"entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4TM03\",\n \"version\": 1,\n \"level\": \"L0\"\n }\n ],\n \"response_hash\": \"sha256:ca098f987d1f18985d88e12231366e9934e0bf7a338e5a039484d024913ad9be\",\n \"prev_hash\": \"sha256:b88c3f2d947ceb76315f67dcfd66708835bf877f13e5e63d2195b117ff7f40d5\",\n \"hash\": \"sha256:1b1996878923be6d542de2d21bad57eeac60f3186500daf06eab4e8d6758aa60\",\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLXJlY2VpcHQrandzIn0..CVl06QtIh7nxEreYAMYSwTC_xMbTkG20a1y5443jNUmi8V5aGg76GLWtwq7w-tC6DbjTiQ890Un5FLn8DBpfwg\"\n }\n}\n", "examples/media/renderings/l0.json": "{\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recommender.example/client\",\n \"handle\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G0\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6R0\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-10-02T19:00:00Z\",\n \"valid_until\": \"2026-10-02T19:05:00Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": null,\n \"entries\": [\n {\n \"id\": \"rent_mediaexamplealiasfaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"agent_context\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiashaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"communication\",\n \"key\": \"preferred_language\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"communication_context\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasgaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"communication\",\n \"key\": \"tone\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"communication_context\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiaseaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"music\",\n \"key\": \"genres\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"music_context\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasdaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"reading\",\n \"key\": \"genres\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"reading_context\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"genre_affinity\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"viewing_context\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasbaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"viewing_context\",\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiascaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"viewing_context\",\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ],\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..JzLJzIHiRKAVDWq3VToFmQAT3wWCC_hfvw9Qy9N-H1aC3UnlrEXumr2a_eZv0azWssnmragVBDyVfVLrqY_FTg\"\n }\n}\n", "examples/media/renderings/l1.json": "{\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recommender.example/client\",\n \"handle\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G1\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6R1\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-10-02T20:00:00Z\",\n \"valid_until\": \"2026-10-02T20:05:00Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": null,\n \"entries\": [\n {\n \"id\": \"rent_mediaexamplealiasfaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"level\": \"L1\",\n \"value_type\": \"enum\",\n \"value\": \"brief\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiashaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"communication\",\n \"key\": \"preferred_language\",\n \"level\": \"L1\",\n \"value_type\": \"enum\",\n \"value\": \"en-GB\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasgaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"communication\",\n \"key\": \"tone\",\n \"level\": \"L1\",\n \"value_type\": \"enum\",\n \"value\": \"informal\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiaseaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"music\",\n \"key\": \"genres\",\n \"level\": \"L1\",\n \"value_type\": \"list\",\n \"value\": [\n \"jazz\",\n \"folk\"\n ],\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasdaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"reading\",\n \"key\": \"genres\",\n \"level\": \"L1\",\n \"value_type\": \"list\",\n \"value\": [\n \"mystery\",\n \"science\"\n ],\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"genre_affinity\",\n \"level\": \"L1\",\n \"value_type\": \"list\",\n \"value\": [\n \"documentary\",\n \"science_fiction\"\n ],\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasbaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"viewing_context\",\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiascaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"viewing_context\",\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ],\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..7ymhqgHJOswVVW0p4LpkW3BZ0kmGFGrXfO1GqOHHSLIXS99AckdyZ42YrJyp7DveQIyHz4JHNuczitRebioy5w\"\n }\n}\n", "examples/media/renderings/l2.json": "{\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recommender.example/client\",\n \"handle\": \"autonym:mediaexamplehandleaaaaaaaaaaaaaa@autonym.example\",\n \"grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6G2\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6R2\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-10-02T21:00:00Z\",\n \"valid_until\": \"2026-10-02T21:05:00Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": \"2026-10-09T18:00:00Z\",\n \"entries\": [\n {\n \"id\": \"rent_mediaexamplealiasfaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"level\": \"L2\",\n \"value_type\": \"enum\",\n \"value\": \"brief\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiashaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"communication\",\n \"key\": \"preferred_language\",\n \"level\": \"L2\",\n \"value_type\": \"enum\",\n \"value\": \"en-GB\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasgaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"communication\",\n \"key\": \"tone\",\n \"level\": \"L2\",\n \"value_type\": \"enum\",\n \"value\": \"informal\",\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiaseaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"music\",\n \"key\": \"genres\",\n \"level\": \"L2\",\n \"value_type\": \"list\",\n \"value\": [\n \"jazz\",\n \"folk\"\n ],\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasdaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"reading\",\n \"key\": \"genres\",\n \"level\": \"L2\",\n \"value_type\": \"list\",\n \"value\": [\n \"mystery\",\n \"science\"\n ],\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"genre_affinity\",\n \"level\": \"L2\",\n \"value_type\": \"list\",\n \"value\": [\n \"documentary\",\n \"science_fiction\"\n ],\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiasbaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"viewing_context\",\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n },\n {\n \"id\": \"rent_mediaexamplealiascaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"level\": \"L0\",\n \"value_type\": \"text\",\n \"value\": \"viewing_context\",\n \"context_kind\": \"fact\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ],\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"mYO1BpXaL579Vtqrg7FdfvJt9y-uBrMaUE6_CW-DHWc\",\n \"jws\": \"eyJhbGciOiJFUzI1NiIsImtpZCI6Im1ZTzFCcFhhTDU3OVZ0cXJnN0ZkZnZKdDl5LXVCck1hVUU2X0NXLURIV2MiLCJ0eXAiOiJhdXRvbnltLWRpc2Nsb3N1cmUrandzIn0..WOuIWFq7Y5d0t-w8NC5uqOi3FsLUMJIrnAz26FCSIbb1HieikG6_XBbY1DPE7BlRWXorQhLZD4aCIIzs8zHy_Q\"\n }\n}\n", "examples/operational-errors.json": "[\n {\n \"type\": \"urn:autonym:error:invalid_scope\",\n \"status\": 400,\n \"title\": \"Invalid scope\",\n \"code\": \"invalid_scope\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:purpose_missing\",\n \"status\": 400,\n \"title\": \"Purpose is required\",\n \"code\": \"purpose_missing\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:invalid_request\",\n \"status\": 400,\n \"title\": \"Invalid request\",\n \"code\": \"invalid_request\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:not_found\",\n \"status\": 404,\n \"title\": \"Not found\",\n \"code\": \"not_found\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:idempotency_conflict\",\n \"status\": 409,\n \"title\": \"Idempotency key already used\",\n \"code\": \"idempotency_conflict\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:payload_too_large\",\n \"status\": 413,\n \"title\": \"Request too large\",\n \"code\": \"payload_too_large\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:rate_limited\",\n \"status\": 429,\n \"title\": \"Try again later\",\n \"code\": \"rate_limited\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:internal_error\",\n \"status\": 500,\n \"title\": \"Request could not be completed\",\n \"code\": \"internal_error\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:not_ready\",\n \"status\": 503,\n \"title\": \"Service is not ready\",\n \"code\": \"not_ready\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:domain_not_granted\",\n \"status\": 403,\n \"title\": \"Domain is not granted\",\n \"code\": \"domain_not_granted\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:grant_revoked\",\n \"status\": 403,\n \"title\": \"Grant is no longer active\",\n \"code\": \"grant_revoked\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:grant_expired\",\n \"status\": 403,\n \"title\": \"Grant has expired\",\n \"code\": \"grant_expired\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:grant_exhausted\",\n \"status\": 403,\n \"title\": \"Grant limit reached\",\n \"code\": \"grant_exhausted\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:dpop_required\",\n \"status\": 401,\n \"title\": \"Sender proof is required\",\n \"code\": \"dpop_required\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:dpop_invalid\",\n \"status\": 401,\n \"title\": \"Sender proof is invalid\",\n \"code\": \"dpop_invalid\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:safety_write_forbidden\",\n \"status\": 403,\n \"title\": \"First-party confirmation is required\",\n \"code\": \"safety_write_forbidden\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:inference_forbidden\",\n \"status\": 403,\n \"title\": \"Inference is not permitted\",\n \"code\": \"inference_forbidden\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:proposal_not_found\",\n \"status\": 404,\n \"title\": \"Proposal was not found\",\n \"code\": \"proposal_not_found\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:proposal_decided\",\n \"status\": 409,\n \"title\": \"Proposal has already been decided\",\n \"code\": \"proposal_decided\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:value_rejected\",\n \"status\": 422,\n \"title\": \"Value does not match the vocabulary\",\n \"code\": \"value_rejected\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:capability_not_granted\",\n \"status\": 403,\n \"title\": \"Capability is not granted\",\n \"code\": \"capability_not_granted\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:advertising_ineligible\",\n \"status\": 403,\n \"title\": \"Advertising permission is unavailable\",\n \"code\": \"advertising_ineligible\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:client_suspended\",\n \"status\": 403,\n \"title\": \"Client is suspended\",\n \"code\": \"client_suspended\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:entry_limit_reached\",\n \"status\": 409,\n \"title\": \"Entry limit reached\",\n \"code\": \"entry_limit_reached\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:session_required\",\n \"status\": 401,\n \"title\": \"Sign-in is required\",\n \"code\": \"session_required\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:csrf_invalid\",\n \"status\": 403,\n \"title\": \"Request could not be verified\",\n \"code\": \"csrf_invalid\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:reauthentication_required\",\n \"status\": 403,\n \"title\": \"Recent sign-in is required\",\n \"code\": \"reauthentication_required\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:signup_unavailable\",\n \"status\": 403,\n \"title\": \"Sign-up is not available\",\n \"code\": \"signup_unavailable\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n {\n \"type\": \"urn:autonym:error:sign_in_failed\",\n \"status\": 400,\n \"title\": \"Sign-in failed\",\n \"code\": \"sign_in_failed\",\n \"request_id\": \"00000000-0000-4000-8000-000000000001\"\n }\n]\n", "examples/protocol.json": "{\n \"example_notice\": \"Synthetic examples. Proof bytes are placeholders, never valid signatures or evidence of implementation.\",\n \"pilot_vocabulary\": {\n \"vocabulary_version\": \"1.1\",\n \"approval_notice\": \"Synthetic confirmed preferences; recipients must support vocabulary 1.1 and grants must approve its keys.\",\n \"entries\": [\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V1\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"domain\": \"agent\",\n \"key\": \"always_do\",\n \"value_type\": \"text\",\n \"value\": \"State assumptions before a recommendation\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-09-21T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-09-21T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {\n \"L1\": \"State assumptions before a recommendation\"\n },\n \"status\": \"active\",\n \"created_at\": \"2026-09-21T00:00:00Z\",\n \"updated_at\": \"2026-09-21T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V2\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"domain\": \"agent\",\n \"key\": \"explanation_depth\",\n \"value_type\": \"enum\",\n \"value\": \"walkthrough\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-09-21T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-09-21T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-09-21T00:00:00Z\",\n \"updated_at\": \"2026-09-21T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V3\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"domain\": \"communication\",\n \"key\": \"spelling\",\n \"value_type\": \"enum\",\n \"value\": \"en-GB\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-09-21T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-09-21T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-09-21T00:00:00Z\",\n \"updated_at\": \"2026-09-21T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n }\n ]\n },\n \"read_grant\": {\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"revision\": 1,\n \"handle\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"client_id\": \"https://recipient.example/client\",\n \"purpose\": {\n \"category\": \"recommendation\",\n \"text\": \"Choose a programme for this visit\"\n },\n \"issued_at\": \"2026-09-21T00:00:00Z\",\n \"expires_at\": \"2026-09-22T00:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"read\",\n \"read\": [\n {\n \"domain\": \"viewing\",\n \"keys\": [\n \"genre_affinity\"\n ],\n \"max_level\": \"L1\"\n }\n ],\n \"declared_only\": true,\n \"min_confidence\": 1,\n \"max_reads\": 1,\n \"reads_used\": 0,\n \"persist_until\": null,\n \"allow_delegation\": false,\n \"onward_share\": false\n },\n \"contribution_grant\": {\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6V8\",\n \"revision\": 1,\n \"handle\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"client_id\": \"https://recipient.example/client\",\n \"purpose\": {\n \"category\": \"recommendation\",\n \"text\": \"Choose a programme for this visit\"\n },\n \"issued_at\": \"2026-09-21T00:00:00Z\",\n \"expires_at\": \"2026-09-22T00:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"contribute\",\n \"contribute\": [\n {\n \"domain\": \"viewing\",\n \"keys\": [\n \"genre_affinity\"\n ]\n }\n ],\n \"max_events\": 100,\n \"events_used\": 0,\n \"allow_confirmation\": false,\n \"stream_id\": \"00000000-0000-4000-8000-000000000001\"\n },\n \"advertising_grant\": {\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6V9\",\n \"revision\": 1,\n \"handle\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"client_id\": \"https://recipient.example/client\",\n \"purpose\": {\n \"category\": \"advertising\",\n \"text\": \"Choose one advert during this visit\"\n },\n \"issued_at\": \"2026-09-21T00:00:00Z\",\n \"expires_at\": \"2026-09-22T00:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"read\",\n \"read\": [\n {\n \"domain\": \"viewing\",\n \"keys\": [\n \"genre_affinity\"\n ],\n \"max_level\": \"L1\"\n }\n ],\n \"declared_only\": true,\n \"min_confidence\": 1,\n \"max_reads\": 1,\n \"reads_used\": 0,\n \"persist_until\": null,\n \"allow_delegation\": false,\n \"onward_share\": false\n },\n \"entry\": {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"domain\": \"dining\",\n \"key\": \"drink_preference\",\n \"value_type\": \"enum\",\n \"value\": \"no_alcohol\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-09-21T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-09-21T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": \"2026-10-01T00:00:00Z\",\n \"valid_until\": \"2026-11-01T00:00:00Z\"\n },\n \"overlay\": {\n \"target_entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V8\",\n \"enabled\": true,\n \"selected\": true\n },\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-09-21T00:00:00Z\",\n \"updated_at\": \"2026-09-21T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n \"export\": {\n \"format\": \"autonym-export/1.0\",\n \"exported_at\": \"2026-09-21T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\",\n \"history_mode\": \"current\",\n \"partitions\": [\n {\n \"id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"label\": \"Personal record\"\n }\n ],\n \"entries\": [\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V8\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"domain\": \"dining\",\n \"key\": \"drink_preference\",\n \"value_type\": \"enum\",\n \"value\": \"no_preference\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-09-21T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-09-21T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"overlay\": null,\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-09-21T00:00:00Z\",\n \"updated_at\": \"2026-09-21T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n },\n {\n \"id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"version\": 1,\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"domain\": \"dining\",\n \"key\": \"drink_preference\",\n \"value_type\": \"enum\",\n \"value\": \"no_alcohol\",\n \"context_kind\": \"preference\",\n \"provenance\": {\n \"kind\": \"declared\",\n \"source_client_id\": null,\n \"source_event_id\": null,\n \"recorded_at\": \"2026-09-21T00:00:00Z\",\n \"occurred_at\": null,\n \"confidence\": null,\n \"confirmed_at\": \"2026-09-21T00:00:00Z\",\n \"evidence_refs\": [],\n \"derived_from\": []\n },\n \"temporal\": {\n \"valid_from\": \"2026-10-01T00:00:00Z\",\n \"valid_until\": \"2026-11-01T00:00:00Z\"\n },\n \"overlay\": {\n \"target_entry_id\": \"ent_01JAB3K9Q7X2M5N8P0R1S4T6V8\",\n \"enabled\": true,\n \"selected\": true\n },\n \"rendering_overrides\": {},\n \"status\": \"active\",\n \"created_at\": \"2026-09-21T00:00:00Z\",\n \"updated_at\": \"2026-09-21T00:00:00Z\",\n \"origin_host\": \"https://autonym.example\"\n }\n ],\n \"tombstones\": [],\n \"grants_history\": [\n {\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"grant\": {\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"revision\": 1,\n \"handle\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"client_id\": \"https://recipient.example/client\",\n \"purpose\": {\n \"category\": \"recommendation\",\n \"text\": \"Choose a programme for this visit\"\n },\n \"issued_at\": \"2026-09-21T00:00:00Z\",\n \"expires_at\": \"2026-09-22T00:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"read\",\n \"read\": [\n {\n \"domain\": \"viewing\",\n \"keys\": [\n \"genre_affinity\"\n ],\n \"max_level\": \"L1\"\n }\n ],\n \"declared_only\": true,\n \"min_confidence\": 1,\n \"max_reads\": 1,\n \"reads_used\": 0,\n \"persist_until\": null,\n \"allow_delegation\": false,\n \"onward_share\": false\n }\n },\n {\n \"profile_id\": \"prf_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"grant\": {\n \"id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6V8\",\n \"revision\": 1,\n \"handle\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"client_id\": \"https://recipient.example/client\",\n \"purpose\": {\n \"category\": \"recommendation\",\n \"text\": \"Choose a programme for this visit\"\n },\n \"issued_at\": \"2026-09-21T00:00:00Z\",\n \"expires_at\": \"2026-09-22T00:00:00Z\",\n \"status\": \"active\",\n \"kind\": \"contribute\",\n \"contribute\": [\n {\n \"domain\": \"viewing\",\n \"keys\": [\n \"genre_affinity\"\n ]\n }\n ],\n \"max_events\": 100,\n \"events_used\": 0,\n \"allow_confirmation\": false,\n \"stream_id\": \"00000000-0000-4000-8000-000000000001\"\n }\n }\n ],\n \"receipts\": [],\n \"log_events\": [],\n \"public_keys\": [],\n \"policy_history\": [],\n \"proposals\": [],\n \"unsupported\": [],\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"example-only-not-a-key-thumbprint0000000000\",\n \"jws\": \"ZXhhbXBsZQ..bm90LWEtc2lnbmF0dXJl\"\n }\n },\n \"lifecycle_request\": {\n \"grant_type\": \"client_credentials\",\n \"scope\": \"autonym:lifecycle:purge\",\n \"resource\": \"https://autonym.example/v1\"\n },\n \"discovery\": {\n \"autonym_version\": \"1.0\",\n \"issuer\": \"https://autonym.example\",\n \"authorization_server\": \"https://autonym.example\",\n \"jwks_uri\": \"https://autonym.example/.well-known/jwks.json\",\n \"rest_endpoint\": null,\n \"mcp_endpoint\": null,\n \"capabilities\": {\n \"autonym_version\": \"1.0\",\n \"document_version\": \"1.0-draft-1\",\n \"categories\": [],\n \"limitations\": [\n \"Synthetic discovery example; no runtime capability is asserted\"\n ],\n \"assurance\": \"self-declared\",\n \"evidence\": [],\n \"role\": \"provider\",\n \"capabilities\": []\n }\n },\n \"contribution\": {\n \"event_id\": \"event_001\",\n \"occurred_at\": \"2026-09-21T00:00:00Z\",\n \"stream_id\": \"00000000-0000-4000-8000-000000000001\",\n \"domain\": \"viewing\",\n \"key\": \"genre_affinity\",\n \"value_type\": \"list\",\n \"value\": [\n \"comedy\"\n ],\n \"context_kind\": \"preference\",\n \"temporal\": {\n \"valid_from\": null,\n \"valid_until\": null\n },\n \"category\": \"user_supplied\",\n \"evidence_refs\": [],\n \"operation\": \"create\"\n },\n \"disclosure\": {\n \"autonym_version\": \"1.0\",\n \"provider\": \"https://autonym.example\",\n \"audience\": \"https://autonym.example/v1\",\n \"client_id\": \"https://recipient.example/client\",\n \"handle\": \"autonym:abcdefghijklmnopqrstuvwxyz234567@autonym.example\",\n \"grant_id\": \"gr_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"grant_revision\": 1,\n \"read_id\": \"rd_01JAB3K9Q7X2M5N8P0R1S4T6V7\",\n \"purpose\": \"recommendation\",\n \"issued_at\": \"2026-09-21T00:00:00Z\",\n \"valid_until\": \"2026-09-21T00:05:00Z\",\n \"ttl_seconds\": 300,\n \"persist_until\": null,\n \"entries\": [\n {\n \"id\": \"rent_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\n \"version\": 1,\n \"domain\": \"viewing\",\n \"key\": \"genre_affinity\",\n \"level\": \"L1\",\n \"value_type\": \"list\",\n \"value\": [\n \"comedy\"\n ],\n \"context_kind\": \"preference\",\n \"safety_critical\": false,\n \"provenance\": {\n \"kind\": \"declared\",\n \"confirmed\": true\n },\n \"stale\": false\n }\n ],\n \"proof\": {\n \"type\": \"jws\",\n \"alg\": \"ES256\",\n \"kid\": \"example-only-not-a-key-thumbprint0000000000\",\n \"jws\": \"ZXhhbXBsZQ..bm90LWEtc2lnbmF0dXJl\"\n }\n },\n \"capabilities\": {\n \"autonym_version\": \"1.0\",\n \"document_version\": \"1.0-draft-1\",\n \"categories\": [\n {\n \"domain\": \"viewing\",\n \"keys\": [\n \"genre_affinity\"\n ],\n \"directions\": [\n \"read\"\n ]\n }\n ],\n \"limitations\": [\n \"Synthetic schema example; no implementation or certification is asserted\"\n ],\n \"assurance\": \"self-declared\",\n \"evidence\": [],\n \"role\": \"recipient\",\n \"capabilities\": [\n \"Read\"\n ]\n }\n}\n", "examples/scopes.json": "[\n {\n \"scope\": \"autonym:read:dining:L1 autonym:read:accessibility:L1 autonym:purpose:booking\"\n },\n {\n \"scope\": \"autonym:read:agent:L1 autonym:read:communication:L1 autonym:propose autonym:purpose:personalisation\"\n },\n {\n \"scope\": \"autonym:read:*:L0:declared autonym:purpose:research\"\n },\n {\n \"scope\": \"autonym:read:viewing:L1:declared autonym:purpose:advertising\"\n }\n]\n", "history/CHANGES-from-proposal.md": "# Changes from the recovered proposal\n\nThe first draft imported A1-A17, terminology and both appendices from the recovered proposal. Recovered originals remain unchanged in the source inventory. The import was reproducible, rejected an unexpected source hash and applied only the corrections listed here, plus Markdown formatting and explicit implementation-status notes.\n\n- The reference implementation introduced an explicitly bounded operational HTTP surface in `operations.md`, operational errors in `errors.json` and generated health, readiness and problem schemas. These are not a replacement for the proposal's A8 recipient error registry.\n- The reference implementation's server takes its key from a local key file of exactly 32 bytes, readable only by its own user, or, in tests only, from a key held in one process's memory. It reports ready only when that key provider and its database both work and its signing keys exist, and it refuses to start in production; accepting a local key file in production will require an explicit acknowledgement of local key custody. This is stricter than an always-ready development placeholder; it avoids suggesting that a process can protect real records before its keys are under deliberate custody.\n- `migrate` applies the reference implementation's database migrations as a dedicated role and creates its job queues, and `serve` and `work` refuse a database role with any attribute beyond login, a membership of any role, the right to create in the database or any schema or to make temporary tables, ownership of any object, a grant outside the service's own schemas, a parameter privilege or settings of its own; the grants inside the service's own schemas are the ones its migrations make, and are not read at start. `work` runs the job runner, whose job payloads carry identifiers only; no job is defined yet. `ctl` offers help, the creation of a new key file, the listing and rotation of the provider's signing keys, and the verification of a partition's owner log, which reads its events and the signing keys, decrypts no record, and records an `operator_action` in each log it read. None of these gives an operator any access to records.\n- Where the reference implementation is hosted does not change the recipient wire protocol.\n\n## Scope grammar implementation clarifications\n\nThe scope grammar implementation covers [A6.3 parsing](../core/scopes.md) independently of the remaining entry schemas. Duplicate reads with the same declaration mode collapse to their highest level as required by the backlog. Mixed declaration modes for one domain are rejected until their semantics are resolved. Bounds, exact space separators, case handling, duplicate-purpose rejection and safe validation errors are documented and checked as SCOPE-01 to SCOPE-09. The generated token schema is explicitly insufficient for whole-grant validation. No recipient endpoint, OAuth mapping or complete SDK is added.\n\n## Normative import corrections\n\nThe [identifier subset](../core/identifiers.md) adds the prefixes required by the service design and explicitly requires canonical upper-case ULID bodies with valid 128-bit bounds. It does not change public/pairwise handles or invent the remaining entry shapes. Generation requires a positive explicit timestamp because the pinned library treats zero as ambient time. These clarifications have ID-01 to ID-05 checks, including a separately bundled browser run.\n\n| Correction | Sections | Applied change |\n| ---------------------------- | ---------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| D1 | All | Autonym names for scheme, scopes, headers, metadata, claims, media type, URNs, resources, examples and conformance names |\n| D2 | A7 | MCP revision 2026-07-28, stateless discovery/current metadata and routing headers, cache fields, legacy compatibility, Multi Round-Trip confirmation; no new adoption of deprecated features |\n| D3 | A1, A6.2 | Client ID Metadata Documents first, static first-party clients and retained DCR compatibility |\n| D4 | A6.1 | RFC 9207 issuer parameter on authorisation responses |\n| D5 | A6.1, A6.5 | Separate MCP/REST audiences and metadata; REST token example uses the REST audience |\n| D11 | A8 | Grant-scoped HMAC ETags; 304 reads logged and rate-limited without increasing the read counter |\n| D12 | A6.4 | Stored grant is authoritative; copied token claims cannot widen or freeze it; no L0 read without a grant |\n| D17 | A10 | Purge reason is grant_ended for both revocation and expiry |\n| D19 | A2 | assistant_unverified class and its restricted defaults for public clients off the assistant allowlist, without self-promotion; since 14 October 2026 without Bearer tokens (A6.3) |\n| Design 12.1 | A3.2 | Public handle grammar and claim protections; recipient tokens/envelopes remain pairwise. The pairwise alphabet is lower-case RFC 4648 base32 without padding |\n| Design 4.1 | A6.7 | Token revocation path is /oauth/revoke under the configured authorisation-server prefix |\n| Design 10 and logging rule | A7 | Sensitive proposals return to the person's app; assistant attestation is ordinary-key-only and utterances are protected evidence rather than operational logs |\n| Design 3.1 and honest status | A17 | Distinguish 0.1-draft document from 1.0 wire version; conformance suite is pending, not shipped |\n\nThe current MCP transport standard requires `Mcp-Name` for `tools/call`, `resources/read` and `prompts/get`; it is not a blanket requirement on every method. This clarifies the shorthand in the service design. Exact source links and verification are in the dependency record. Existing illustrative JSON examples remain draft illustrations; their full generated equivalents arrive with the corresponding implementation.\n\nAll imported requirements are pending the executable checks described in [conformance status](../conformance/README.md). Unresolved source ambiguities are listed separately; this import does not decide them silently. No internal hostname appears in these public contracts.\n\n## 21 September 2026: consent, temporary context and reciprocity\n\nA scope review added an addendum on consent, temporary context and reciprocity. Its text is now in [A6.7](../core/a06-authorisation.md#a67-consent-and-advertising) and the other sections listed under the edition 1.0-draft-1 restructure below. Grants and temporal attributes already existed; the additions clarify purpose separation, temporary override precedence and reciprocal contribution. The historical source files remain unchanged. The reproducible import adds `advertising` to A6.3 and links the overriding addendum from A4, A6, A11 and A17.\n\nThe scope schema, manifest, token schema and examples now include the explicit advertising purpose; SCOPE-10 checks that it grants no implicit read, proposal or persistence capability and cannot combine purposes. No authorisation server, recipient integration, temporal compiler or portability endpoint is introduced. Read/Contribute are capability descriptions mapped to existing Core/Write requirements, not renamed protocol identifiers or issued certifications. No breaking URL or wire-version change is made.\n\n## Full draft publication, 21 September 2026\n\nDocument 0.2-draft resolves S1 to S4 and every item in the source ambiguity register. Historical corrections above describe earlier stages; the current numbered chapters supersede conflicting original examples. The original source hash remains checked; versioned editorial Markdown sources generate the revised chapters reproducibly.\n\nThe draft now includes typed contracts, a 27-key closed vocabulary, recipient OpenAPI/MCP definitions, examples and stable conformance requirements. Recipient IDs, temporary-context state, grants and export shapes change within an unreleased wire draft under ADR 0002. No existing recipient runtime is migrated. Unknown candidate keys and reserved extensions are explicitly excluded rather than published as incomplete wire formats.\n\n## Public documentation cleanup\n\nThe public standard presents protocol requirements, design principles, interpretation notes and versioning guidance. No wire format, consent rule, vocabulary key or conformance requirement changes.\n\n## International privacy deployment requirements\n\nA16.1 retains the informative legal mapping. A16.2 to A16.8 require deployment-specific evidence for legal applicability, sensitive-data limits, international flows, rights and retention, opt-outs and child safeguards, and accountable operation, including granted regulatory permits and their continuing validity. PRIVACY-01 to PRIVACY-06 apply to every claimed provider or recipient capability. Unsupported operations remain disabled; passing protocol checks is not legal certification. A10 permits shorter lawful or necessary purge-status retention independently of an owner request, and A18 explicitly applies the local advertising checks. No wire format or vocabulary changes. Operational implementation and evidence remain pending.\n\n## Pure compiler clarifications, 24 September 2026\n\nThe first compiler makes A4.5's field-right checks reproducible with a bounded `value` / `value.` dependency notation; unsupported paths are withheld. A5.2 defines confidence filtering for exact declarations and null confidence, and permits conservative inclusion after selection-group changes while requiring baseline/dependency restoration. Request output filters do not grant input rights. These clarify the unreleased draft without changing wire object shapes, vocabulary keys or capability claims. The compiler's internal snapshot and owner-only receipt references are not new recipient contracts. Fractional UTC boundaries are compared without truncating to milliseconds.\n\n## Approved pilot vocabulary 1.1, 24 September 2026\n\nAdds `agent.always_do`, `agent.explanation_depth` and `communication.spelling` with the reviewed definitions in Appendix A. Every key records its introduction version. The 27 original keys retain their semantics; the catalogue now has 30 keys in 17 domains. Compiler disclosure of new keys requires both stored grant approval and recipient support for vocabulary 1.1, defaulting missing evidence to 1.0. No wire envelope shape or protocol version changes. VOCAB-1.1-01 to VOCAB-1.1-09 and the full compiler properties cover the addition; runtime negotiation and consent persistence remain pending.\n\n## Edition 1.0-draft-1 restructure, 4 October 2026\n\nEdition `1.0-draft-1` restructures the 0.2-draft text without changing a requirement. The core chapters move to `core/`, A12, A13 and continuous connectors to `core/reserved/`, the MCP and REST transport detail of A7 and A8 to the bindings B3 and B4, and the vocabulary to `vocabulary/`. A18 is folded section by section: A18.1 becomes A6.7, A18.2 becomes A4.6, A18.3 becomes A14.5 and A18.4 becomes A17.5; the unnumbered change-process page becomes A17.4. Every section's new location is in [`section-map.json`](../section-map.json). The operational HTTP surface and the app shell describe the reference implementation rather than the standard and move to its design documentation. The core text is now maintained by hand; the recovered proposal stays hash-locked and the editorial import pipeline is retired. The document version, held once in `packages/schema`, becomes `1.0-draft-1` in the schema identifiers embedded in the OpenAPI document and the MCP tool definitions, the OpenAPI version, the conformance manifest, and the capability-claim and discovery schemas; the wire version stays `1.0`. Capability claims and discovery documents stating `0.2-draft` no longer validate; no implementation had published one. The operational health and readiness schemas and the operational error examples stay generated into `spec/` as informative artefacts of the reference server, governed by its design documentation. The conformance manifest gains a `pending_phase` for every check and lists the SCOPE, ID and VOCAB-1.1 families it previously cited only in text. The vocabulary document gains the documentation group `media` (`viewing`, `reading`, `music`), which adds no key or permission.\n\n## Reserved chapters as placeholders, 4 October 2026\n\nThe version 1 rules A12 and A13 stated move into the normative core, with their check ids unchanged: registries and trust evidence to A2.1, client standing and safety or medical purposes to A6.8, and self-declaration and experimental emergency cards to A17.6. `core/reserved/` now holds informative placeholders for A12, A13 and continuous connectors, which carry no requirements. No requirement changes. `handle_moved` stays removed (B4.3).\n\n## PDPP binding body, 4 October 2026\n\nThe body of [B1](../bindings/B1-pdpp.md) binds read grants to PDPP Core v0.1.0 at commit `8f79a48`. Disclosure levels become statically declared derived streams, one per domain and level, with a `.declared` variant; restrictions PDPP cannot express travel in a second RFC 9396 detail; contribution grants and PDPP owner tokens are outside the binding; and the deviations from a strict reading of PDPP Core are listed as B1-D1 to B1-D8. No requirement of the core changes and no generated contract changes. The binding's new wire values (the detail type, purpose codes, stream names and record shape, identifier derivations, the `autonym_lifecycle` token kind, `Autonym-Read-Id` and a `pdpp` receipt surface) are draft text until they are generated from the schema package. The reasons for adopting PDPP Core, and what is taken from it, are in [its adoption record](../adoption/pdpp.md).\n\n## Review amendments, 5 October 2026\n\nThe grant model belongs to the core: A1.3 and A6 now say that Open Personal Context Core stays meaningful without PDPP, and that B1 is the normative 1.0 grant binding, not a dependency of the model; the PDPP and OAuth adoption records say the same. A9 adds the key lifecycle that keeps receipts verifiable after a key rotation: key IDs are never reused, retired keys sign nothing new and stay published with their retirement date, and retention and compaction keep everything an old receipt needs. A5.4 verifiers reject a signature made after the key's retirement. Two checks join the Core provider profile, KEY-01 and LOG-02, both pending runtime evidence; the retirement-date member is defined when the key-publication contract is generated. A10 states that an acknowledgement proves only the recipient's signed attestation of the outcome it reports, never that every copy has gone. No wire format changes.\n\n## Error registry for 1.0, 5 October 2026\n\nThe [error registry](../errors.json) now covers the whole 1.0 specification and replaces the proposal's A8 error list. Each registered code carries its `urn:autonym:error:` type, status, title and the sections whose text raises it, and each of those sections names the code: A5.2 the grant, domain and disclosure-failure codes; A6 the capability, sender-proof, advertising and client-standing codes; A8 and A14 the proposal, value, idempotency and contribution codes; and A15.3 and B4 the operational codes. `client_suspended` (403) is added for the A6.8 rule that a suspended or disabled client cannot read. A14.3 now states the refusal that the A4.2 prohibitions on observing and inferring sensitive keys require: for a special-category or safety-critical key only a `user_supplied` event is accepted, as a protected proposal, and any other event fails `safety_write_forbidden` or `inference_forbidden`. `level_exceeded` is removed because no section raises it: A5.2 caps a requested level at the grant's ceiling instead of refusing the request. A later version that refuses such a request registers a code with the text that raises it. The registry also lists, without registering them, the OAuth codes and the PDPP Core section 8 codes that the text cites, including `blob_not_found` on the PDPP endpoints (B1.7, B1.9). B3.4 maps every registered code to one MCP error form. The status and title of every remaining code are unchanged.\n\n## PDPP conformance table, 5 October 2026\n\nB1.10 now states, item by item, how the binding meets each Authorization Server and Resource Server requirement of PDPP Core section 9 at commit `8f79a48`, so the published binding stands on its own. It previously relied on a table in a design document, and B1 no longer links to that document. No requirement changes.\n\n## Signed-object contract, 6 October 2026\n\nA5.4 now settles the bytes every detached signature covers and how they are verified. Receipts, purge acknowledgements and exports use the same method as disclosures, and each signed object names its signed time. A key ID is the RFC 7638 SHA-256 thumbprint of its public key, so one key ID cannot name two keys. The provider's key set at the discovery `jwks_uri` follows the new [key-set.json](../schemas/key-set.json): ES256 P-256 signing keys only, no private members. A retired key carries the JWK parameter `exp` that OpenID Federation 1.0 registers, in whole seconds, and a verifier rejects any object signed at or after it; a key carrying another lifetime member is not used. This makes the A9 key lifecycle, previously pending a published retirement member, a complete contract. Verification parses the received text strictly before canonicalisation, refusing repeated member names and non-I-JSON (lone surrogates, noncharacters and numbers with more magnitude or precision than a binary64 value provides), and refuses any protected header member other than `alg`, `kid` and `typ`. Every instant a provider writes into a signed or hashed object has one canonical spelling, without trailing fractional zeros and without losing precision.\n\nA receipt now names its `provider`, the issuer URL discovery publishes, inside the signed bytes, and a verifier rejects one whose `provider` is not the trusted issuer. A9 defines the receipt's canonical request: the validated context request with `max_level`, `declared_only` and `min_confidence` always written out, its lists sorted without repeats and `since` in the canonical spelling; the receipt's `request` member now requires those defaults. A10 says the acknowledgement signature covers the RFC 8785 canonical JSON of the acknowledgement without `proof`, by the A5.4 method, and that the purge token's `kid` and `iat` follow A5.4. A verifier also recomputes a receipt's `hash`, refuses a disclosure issued more than 60 seconds ahead of its own clock, and accepts key coordinates and key IDs only in canonical base64url; a provider's signing key appears in no other provider's key set, and a published `exp` never changes. A receipt carried in an export is checked against the export's verified `origin_host`, and a verifier refuses an object that its schema would rewrite rather than return a value that was not signed. These are wire changes before the 1.0 wire release: receipts gain a required `provider`, and `proof.kid`, exported public keys and receipt requests are stricter, and the media example is re-signed under thumbprint key IDs.\n\n## Normative statement audit, 6 October 2026\n\nEvery sentence of the normative pages that carries MUST, MUST NOT, SHOULD or SHOULD NOT, every requirement they state in the imperative, and every sentence that uses a lower-case must or should, now has an entry in [`statements.json`](../conformance/statements.json) naming the checks that test it or the reason no suite can. RFC 8174 gives the lower-case forms no normative force, but the text often uses them for requirements, so they are audited too; their wording is unchanged. The items of the A5.4 rejection list count as imperatives, and some requirements stated without a modal, such as the key, key-set and instant rules of A5.4, the canonical request of A9 and the acknowledgement bytes of A10, also have hand-chosen declarative entries; nothing requires one for every such sentence. Nine checks join the conformance manifest for requirements no check covered, all pending runtime evidence: WIRE-01 (A1.1 and A4.1, unknown members, keys and values outside a key's closed schema), HANDLE-01 (A3.2, public handles), MIGRATE-01 (A3.4 and B4.3, migration), INFER-01 (A4.2 and A14.3, keys that cannot be observed or inferred), OAUTH-01 (A6.1 and A6.3, metadata, registration and the code flow), FETCH-01 (A15.3, A3.3 and A6.1, retrieval of supplied URLs), ENCRYPT-01 (A11.2, the optional encrypted export), BINDING-01 (the requirements of B1 itself) and WILDCARD-01 (the A15.1 recommendation). The Core provider profile gains WIRE-01, OAUTH-01, FETCH-01 and INFER-01, and Portable gains MIGRATE-01. The Read and Contribute recipient profiles gain WIRE-01 and FETCH-01, because both are shared security requirements. HANDLE-01, ENCRYPT-01 and BINDING-01 are the checks of three new optional features, `public-handles`, `encrypted-export` and `pdpp-binding`, which A17.1 now names beside advertising; WILDCARD-01, a recommendation, belongs to no profile. A5 now also cites TEMP-02 and LOG-02, A6 the SCOPE checks of its scope grammar and DISC-01, A4 and B4 WIRE-01, A10 KEY-01, and A11 KEY-01 and LOG-02. The PDPP, OAuth and JWE adoption records name the new checks that apply to them.\n\nThe audit tightened four passages of A4 without changing behaviour:\n\n- A4.3 says that instants compare by the time they denote, at full fractional precision, not by their bytes.\n- A4.4 says that overlays apply only to the baseline that is eligible and selected for its key, and that selection counts only that baseline's eligible enabled overlays, so a selection on an ineligible or disabled overlay neither wins nor counts against another. It also says that the overlay is chosen from the record before the grant and request apply, so a winning overlay that they withhold is omitted and the baseline it replaces is never disclosed in its place.\n- A4.5 says how its limit of 256 dependency references is counted: every reference traversed from the disclosed entry, along every path and without de-duplication, so an input reached by several paths, or named more than once, counts each time it is reached, together with its own references. The text previously said \"more than 256 total dependencies\" and did not say how a shared input counts. This is the stricter reading: an implementation that counted distinct inputs would accept graphs this rule withholds, never the reverse.\n- A4.6 no longer reads as contradicting A4.4 when a single eligible enabled overlay has no selection: that overlay applies. Among several eligible enabled overlays, the baseline is used until exactly one of them is selected.\n\nThe reference compiler already behaves this way, and its TEMP-01 to TEMP-03 tests pin each reading. No wire format, vocabulary key or error code changes.\n\n## Published test vectors, 6 October 2026\n\n[`conformance/vectors/`](../conformance/vectors/README.md) publishes informative test vectors for the A5.4 signed objects: synthetic provider and recipient keys with their private parts, one provider key retired with `exp`; RFC 8785 canonical JSON with its UTF-8 bytes and SHA-256; signed disclosures; a receipt chain across a key rotation with its canonical requests; a purge instruction token and acknowledgement; and the signed objects a verifier must reject. The provider key set in `keys.json` is also the example of [key-set.json](../schemas/key-set.json). The media worked example is re-signed with the vector keys and no longer carries keys of its own. The conformance manifest gains an optional `vectors` member listing the vector files that evidence a check. No requirement changes.\n\n## Contract checks in A17.2, 6 October 2026\n\nA17.2's description of the reference repository's contract checks now also names the compiler's example and property tests, the library verifier for A5.4 detached signatures, the published test vectors, checked by the repository's tests with that verifier and independently by a second verifier written from the specification text alone, and the statement audit. The sentence that follows says \"These checks\" instead of \"They\". No requirement changes: the A17.2 sentences that use a modal or the imperative are unchanged, and runtime checks remain pending.\n\n## Integration evidence in the conformance manifest, 7 October 2026\n\nA check's `runtime_evidence` may now be `integration` as well as `library` or `pending`: the reference implementation's integration tests, which run its provider against real storage, cover every duty the check's requirement places on a provider that one provider's own tests can show, while a verifier's part keeps the evidence of its own tests and vectors. A17.2 and the [conformance README](../conformance/README.md) say what it shows and what it does not: that the reference provider meets those duties, not that another implementation does. The README also says that neither library nor integration evidence is gathered from a running service, what `pending_phase` names for a check with integration evidence (the phase whose tests supplied it), and which parts of KEY-01 its integration evidence leaves to a verifier's tests, to a running service or to other providers; it covers a provider whose issuer changes, whose earlier retired keys stay published. KEY-01 records it, from the tests of the reference key store against a real database, and the README defines the `-STORE` test-name suffix for such tests. The README also says what one provider's tests cannot show of a key never being shared between providers. PAIR-01 stays pending: its last requirement, that no canonical identifier escapes, needs a running read path, so tests of a store alone cannot cover it. No requirement, schema or wire format changes.\n\n## Medical alert example, 6 October 2026\n\nIn [the vocabulary](../vocabulary/core.json), the L1 and L2 example renderings of `health.medical_alert` repeated the `agent.never_do` example text. Each free-text key's L1 and L2 example is now its own example, so the medical alert shows its synthetic example at L1, L2 and L3. No key, value schema, supported level, renderer operation, flag, label or explanation changes, and a compiler never uses an example.\n\n## Entry limit per partition, 7 October 2026\n\nA4.1 now bounds a partition at 10,000 entries that have not been deleted, which bounds what one read compiles: the reference compiler takes at most 10,000 entries in one read, and without a bound a partition past it could no longer be read at all. A write that would add another entry fails with the new registered code `entry_limit_reached` (409, \"Entry limit reached\") and changes nothing; a new version of an existing entry, and a deletion, are not refused by it. The proposal set no such limit. No other code's status or title changes, and no schema changes beyond the registry, the Problem Details union and their generated examples.\n\nNo agent operation adds an entry in this version: a contribution is acknowledged as a proposal whatever the partition holds, and only the person's own operations, such as accepting a proposal in the first-party app or an import, meet the limit. B3.4 therefore lists `entry_limit_reached` in a row of its own, of codes no agent operation raises, rather than with the refusals of an agent's request, so a contributor never learns how many entries a partition holds. A11.1 adds each partition's entry limit to what an importer validates before changing the destination, and PORT-01's requirement now includes it.\n\n## Tombstone versions, 8 October 2026\n\nA4.1 now fixes a tombstone's version: one more than the last version of the entry it deletes, so no ID and version name both an entry version and a tombstone, and two exports either side of a deletion never give one `(id, version)` two meanings, which A11.1's rejection of differing duplicates relies on. An earlier version keeps the status it was written with: a new version never changes an earlier one. The proposal left a tombstone's version unstated.\n\n## Handle authority, 8 October 2026\n\nA3.2 now says that an IP address is never a handle's authority, and neither is a name whose last label is all digits or `0x` followed by hexadecimal digits, since URL parsers read such a name as an IPv4 address. The proposal allowed the DNS name of the host, which names such as `example.1` and `foo.0xab` can be. A3.2 also says that the handle pattern in the published schemas checks only the syntax of the authority's labels, so it accepts such names. No schema or example changes: tightening the published pattern would change a wire format, and is not made here.\n\n## Authorisation contract, 14 October 2026\n\nEvery access token is now bound to its client's DPoP key, for every client class and every resource. The proposal and D19 let an assistant, an unverified one included, use Bearer tokens, and A6.3 required DPoP only for service and connector clients; A2, A6.3, A15.1 and B4.1 now say that no class uses Bearer tokens, and the [OpenAPI document](../openapi/autonym-v1.yaml) no longer has its `EligibleAssistantBearer` security scheme. A token request without a valid proof fails RFC 9449 `invalid_dpop_proof`, a proof is accepted only once and within 60 seconds of its `iat`, and a resource keeps `dpop_required` and `dpop_invalid`. The [MCP record](../adoption/mcp.md) says how this departs from the Bearer usage MCP specifies.\n\nA2 assigns every class from registration evidence: a client on the operator's assistant allowlist is `assistant`, any other public client `assistant_unverified` and a confidential client that authenticates with a registered key `service`. Previously only a public MCP client was `assistant_unverified`, and every other unknown client was `service`. A6.1 replaces the root protected-resource metadata document with one path-specific document for each resource, because the root document's `resource` would be the origin, which is not an audience, and says which registration metadata a provider accepts ([client-metadata.json](../schemas/client-metadata.json), [client-metadata-document.json](../schemas/client-metadata-document.json)): inline ES256 keys, and no `jwks_uri`, `sector_identifier_uri`, software statement, client secret or member the schema does not list. A6.2 gives each capability scope its meaning, gives every grant one audience, defines a continuous grant and defines the contribution request, an RFC 9396 detail of type `urn:autonym:authorization-details:contribute` ([contribution-detail.json](../schemas/contribution-detail.json)). A6.3 names the access token's claims ([access-token-claims.json](../schemas/access-token-claims.json)), signed with ES256 only, ends a grant whose authorisation code or refresh token is used a second time, and lists the OAuth error codes its endpoints answer; the A6.6 lifecycle token's claims are in [lifecycle-token-claims.json](../schemas/lifecycle-token-claims.json). A6.5 says that an access token ends with its grant and is not revoked on its own. A6.8 widens suspension from reads to every recipient action except the purge routes, and to the delegations of a suspended client; a deregistration revokes the client's grants. A9 defines the content of `grant_created`, `grant_revoked`, `grant_expired`, `read_not_modified` and `operator_action`, including how an `operator_action` says what it concerned, which A9 previously left to supplementary contracts that did not exist. The [scope grammar](../core/scopes.md) publishes the purpose codes `urn:autonym:purpose:` and the capability meanings, which [scopes.json](../scopes.json) now carries too.\n\nThe [error registry](../errors.json) registers five codes for the person's own first-party requests (A15.3): `session_required` (401, \"Sign-in is required\"), `csrf_invalid` (403, \"Request could not be verified\"), `reauthentication_required` (403, \"Recent sign-in is required\"), `signup_unavailable` (403, \"Sign-up is not available\") and `sign_in_failed` (400, \"Sign-in failed\"); B3.4 lists them with the codes no agent operation raises. The registry also lists the OAuth codes A6 now cites, and `rate_limited` names A6.1, whose registration endpoint answers it in RFC 7591's error form. A2 gives each class's grant kinds, capability scopes and longest grant in a table, and leaves `autonym:persist` and `autonym:delegate` for an `assistant` or `service` client to the provider's policy. A client is `assistant` by its redirect URIs only when the allowlist names every one of them, and a client that registers or publishes a loopback redirect URI is never `assistant`, by either path; every client that is not `assistant` and not classified by the operator is shown as unverified at consent, whatever its class. A6.1 states the rules between registration members, accepts the A6.4 token exchange and grant offer in `grant_types`, the grant offer only from a client that authenticates with `private_key_jwt`, and refuses `application_type`, a Client Identifier URL with a percent-encoded dot segment or a host that URL parsers read as an IPv4 address, a port outside 1 to 65535, and in display text control, bidirectional, default-ignorable and interlinear annotation characters and any character outside the Basic Multilingual Plane. A6.2 makes a contribution detail's `allow_confirmation` true exactly when `autonym:confirm` is requested. A6.3 applies the loopback-port exception only to a client whose redirect URIs are all loopback URIs, requires a resource's DPoP proof to be signed by the token's `cnf.jkt` key, and answers `invalid_token` only for a token that fails verification. A6.4 binds the token exchange's proof to the subject token's key and names only a confidential recipient, which redeems the offer with `private_key_jwt`. A6.5 ends the grant whose refresh token its client revokes, with a DPoP proof by the token's key from a public client, and A9 records that revocation with the client as actor. A6.6's lifecycle token carries `sub`, the client's ID, as RFC 9068 section 2.2 requires of every JWT access token, and its `scope`. A9 splits an action on a client with more than 32 grants in one partition over several `operator_action` events. The `scope` marker of scopes.json becomes `grammar-and-meanings`, because the file now carries the meanings issuance applies. The requirements of OAUTH-01, LOG-01, CONSENT-01 and DELEGATE-01 in the [conformance manifest](../conformance/profiles.json) now name the A2, A6.4, A6.5, A6.6, A6.8 and A9 rules their statements cite, and no check is loosened. B1-D4 and the [PDPP record](../adoption/pdpp.md) say that no client uses Bearer tokens, and a reused refresh token in B1.10 revokes the grant; the rest of B1's DPoP wording follows with the PDPP binding's own change, and where it differs, A6 wins. The example client key is no longer the published recipient test key, whose private part anyone can read.\n\nThese are wire changes before the 1.0 wire release, inside the unreleased wire draft that ADR 0002 allows to change: the OpenAPI security schemes, the error registry, the Problem Details union and scopes.json change, and five schemas are added, with examples in [authorisation.json](../examples/authorisation.json). The test vectors do not change.\n", "history/source-ambiguities.md": "# Interpretation notes\n\nThis guide links cross-cutting protocol rules to their normative sections. It is informative; the linked requirements define implementation behaviour.\n\n| Topic | Requirement |\n| ------------------------------------------- | -------------------------------------------------------------------------------------------------------- |\n| Handle encoding and derivation | A3 exact alphabet, JCS domain-separated framing, 32-character new handle, recipient entry aliases |\n| Request disclosure ceiling | A5 single scalar request intersected independently with each grant-domain ceiling |\n| Declared-only and confidence combination | A5 logical OR and maximum threshold |\n| Token validity | A6 one-hour valid UTC example; complete token rules explicit |\n| Sensitivity and inference | A4/A14 prohibit inference for non-inferable, sensitive and safety keys |\n| Vocabulary and rendering | Appendix A and generated core.json define all 30 vocabulary 1.1 keys; candidates rejected |\n| L1 versus L2 structure | A5 identifier-free structure allowed at L1; names only when the key explicitly allows them at L2 |\n| Sparse-level and free-text fallback | A5 highest supported permitted level; approved text or omission |\n| Signature boundaries | A5/A15 exact signed object boundary and representations |\n| Briefing authority and read count | A7 shared authorised transaction, both domains required, one read |\n| Advertising policy | A6.7 explicit three-key, adult-only, one-read policy |\n| Temporal representation | A4 explicit kind, interval, overlay target/activation/selection |\n| Contributor identity, correction and replay | A14 strict event schema, authenticated source, stream namespaces and replay rules |\n| Role claims and certification | A17 role/version/category evidence; self-declaration only |\n| Global IDs and migration privacy | A3 recipient-specific aliases, owner-only canonical IDs, no credential redirects |\n| Purge polling after grant expiry | A10 authenticated client lifecycle channel with no record-read authority |\n| Export encryption and delegated offers | A11 exact JWE/KDF; A6 exact OAuth exchange/redemption |\n| Legal equivalence claims | A16.1 informative support mapping; A16.2 to A16.8 normative deployment evidence, not legal certification |\n\nSee [conformance status](../conformance/README.md) for implementation and test coverage.\n", "manifest.json": "{\n \"edition\": \"1.0-draft-1\",\n \"wire_version\": \"1.0\",\n \"note\": \"Bundle 1.0-draft-1 is these files at these digests. Generated by pnpm spec:layout; checked by pnpm check:spec.\",\n \"files\": [\n {\n \"path\": \"LICENSE\",\n \"bytes\": 11358,\n \"sha256\": \"cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30\"\n },\n {\n \"path\": \"README.md\",\n \"bytes\": 8859,\n \"sha256\": \"1a080e9e43e8da7ec55f876d6f92221de058e89caf9c47bf52290cf529ac124d\"\n },\n {\n \"path\": \"adoption/README.md\",\n \"bytes\": 7958,\n \"sha256\": \"76d164b401c4888b53e5bd856dbfd15a23ee5db7ad339eecfd66bdea7ffb150e\"\n },\n {\n \"path\": \"adoption/agent-memory-interop.md\",\n \"bytes\": 2111,\n \"sha256\": \"11b407fc128cf9419ff0b1684971ec62ae775dbe0104b34395b9315ce91e8925\"\n },\n {\n \"path\": \"adoption/dpv.md\",\n \"bytes\": 1908,\n \"sha256\": \"425bf76413b1b4e67d98ee25ee541958a0eac17210b8467a3a17b476c1cc8c46\"\n },\n {\n \"path\": \"adoption/hcp.md\",\n \"bytes\": 2446,\n \"sha256\": \"28d90f4fb58680495a50451be00df0776f230b65d6f9484242c618cb7bbcb8a2\"\n },\n {\n \"path\": \"adoption/iab-data-subject-rights.md\",\n \"bytes\": 2511,\n \"sha256\": \"b172e479a6044ad22a60c232467739a27aa13bca2b3a4f1defb50a59eab7da67\"\n },\n {\n \"path\": \"adoption/iso-24751.md\",\n \"bytes\": 2351,\n \"sha256\": \"efcac4eae93e2f906df03fb1fb2d9f6d035112da297ba5148ea0998bf2ebcf5c\"\n },\n {\n \"path\": \"adoption/iso-27560.md\",\n \"bytes\": 2141,\n \"sha256\": \"d7c7c59ea138623db4697eaecb112823ce967bafbb5ef02f3081ce861911487e\"\n },\n {\n \"path\": \"adoption/jose.md\",\n \"bytes\": 5180,\n \"sha256\": \"2b55fc0e350c2289217d51a9591e98c44847d55b0b79568476ddfe8d3ca951fb\"\n },\n {\n \"path\": \"adoption/json-schema-openapi-problem-details.md\",\n \"bytes\": 2962,\n \"sha256\": \"2edc372b486502e1ef6e7b2903b58b5c0dcd0b2e296048835e3d9dae6d15d557\"\n },\n {\n \"path\": \"adoption/jwe-argon2id.md\",\n \"bytes\": 1549,\n \"sha256\": \"c315038409f03feaf8ccc7be67dfa2982de8e41aae6644fabc04b3cfe5d29444\"\n },\n {\n \"path\": \"adoption/linked-web-storage.md\",\n \"bytes\": 1889,\n \"sha256\": \"f95419f3bf57cab25a54024ccc776169ee94b72a9f18c9d8fd5ed8f29f4961d9\"\n },\n {\n \"path\": \"adoption/mcp.md\",\n \"bytes\": 4336,\n \"sha256\": \"e1fcc4461075adaba23823bfe4a4232712d951e9c8b379fcf730fbefcd39ef8a\"\n },\n {\n \"path\": \"adoption/oauth.md\",\n \"bytes\": 13348,\n \"sha256\": \"a67426596d91f10cb6cf130f4a78afc2dcc0d9416013aa626331497f060b4279\"\n },\n {\n \"path\": \"adoption/pdpp.lock.json\",\n \"bytes\": 1046,\n \"sha256\": \"a7d4ab7cad706562b276d504c631f727d92ddcae7ae5a45a88d661e3dd5c7111\"\n },\n {\n \"path\": \"adoption/pdpp.md\",\n \"bytes\": 7777,\n \"sha256\": \"0850848fcd61ad200447571c9fcda16f956dff26e36c6a2c22848814a55cf3ca\"\n },\n {\n \"path\": \"adoption/reserved-credentials.md\",\n \"bytes\": 3248,\n \"sha256\": \"f2709f84c6e8e8a0fa0eb9dad7e998cae565187216ad1b5743c08133a31a933f\"\n },\n {\n \"path\": \"adoption/scitt.md\",\n \"bytes\": 2213,\n \"sha256\": \"df83a2d9397dcbb12c13773fbaf47c9407b6d7df3ad691f74a8da0fe12543a09\"\n },\n {\n \"path\": \"bindings/B1-pdpp.md\",\n \"bytes\": 44380,\n \"sha256\": \"34a2ed8c41f51212f3ec3ca493a3184ed20118a908992bffb56b6c13a32d18cd\"\n },\n {\n \"path\": \"bindings/B2-linked-web-storage.md\",\n \"bytes\": 658,\n \"sha256\": \"99fd014a9f72a2f501d60f37453fc195085d9bef0e192ff2be85f07b034ddb1c\"\n },\n {\n \"path\": \"bindings/B3-mcp.md\",\n \"bytes\": 8092,\n \"sha256\": \"659351f2430097e756bc5519400fc219741867a732e84bda737374c8f5da618c\"\n },\n {\n \"path\": \"bindings/B4-rest.md\",\n \"bytes\": 5355,\n \"sha256\": \"166cd7e6944800fd901eedd82668125bcf0c8c24319398a8795c04fe8890742a\"\n },\n {\n \"path\": \"bindings/README.md\",\n \"bytes\": 1374,\n \"sha256\": \"e3678b5ee2e22bbbf90dcdb1a5fc9ba24d8ca55b959a9568b7d9743c2530ca8c\"\n },\n {\n \"path\": \"conformance/README.md\",\n \"bytes\": 24198,\n \"sha256\": \"080a58bc99ce30bbd3e1330a8e7b3cf810fe8118389605c13c6bee5fac43bbb0\"\n },\n {\n \"path\": \"conformance/profiles.json\",\n \"bytes\": 20034,\n \"sha256\": \"2e31c5692ad7d65179d3e4f53207c93d3bfc156d39887aa3b2e157d26804be75\"\n },\n {\n \"path\": \"conformance/statements.json\",\n \"bytes\": 106381,\n \"sha256\": \"3c73b990c43c9c522590f81e99b3c23f129f64ed77b084e3a3cddfa9dda6bcce\"\n },\n {\n \"path\": \"conformance/vectors/README.md\",\n \"bytes\": 9783,\n \"sha256\": \"94dca31f2f4915c74bbe811f49369cc6e3dc846680e8db0ffd8a96fd654ac715\"\n },\n {\n \"path\": \"conformance/vectors/disclosure.json\",\n \"bytes\": 22575,\n \"sha256\": \"1a319ac2ba86f7ffc0725e0e7790552fff083d5c53c7a73dc23e39805ee9f765\"\n },\n {\n \"path\": \"conformance/vectors/jcs.json\",\n \"bytes\": 11872,\n \"sha256\": \"0e6966918b3aa47a43672f36dd43c3b638f987738f9d0117a770c669847490de\"\n },\n {\n \"path\": \"conformance/vectors/keys.json\",\n \"bytes\": 3849,\n \"sha256\": \"ee56df0c7b3033beba0a5e8a726ff636fee91f0ad1333701c98909a6a85bb835\"\n },\n {\n \"path\": \"conformance/vectors/negative.json\",\n \"bytes\": 87309,\n \"sha256\": \"883f90b639fd77925f006f88a7d6e3b053bb3b8a0a3008fd15b50e472c20ea39\"\n },\n {\n \"path\": \"conformance/vectors/purge.json\",\n \"bytes\": 4386,\n \"sha256\": \"452a0b7c1519094f99ba8a3d41c0a38f0c07df2f94d6df4dab74ff5946c0cac5\"\n },\n {\n \"path\": \"conformance/vectors/receipt.json\",\n \"bytes\": 12731,\n \"sha256\": \"a7b95204207f9cbfb45430a83092e4822dd43eca1e5b5ef4941d14f0eff62cee\"\n },\n {\n \"path\": \"core/a01-scope-and-layering.md\",\n \"bytes\": 4500,\n \"sha256\": \"29f48af4c25a6dd800f0657e5f5e362db1816958ba5bc86b8040b158d2f34fa0\"\n },\n {\n \"path\": \"core/a02-actors-and-trust.md\",\n \"bytes\": 4621,\n \"sha256\": \"2329c99b80f670e2809850cfa3c7705135d5309f7292411aec45e152c931d65f\"\n },\n {\n \"path\": \"core/a03-identifiers-and-resolution.md\",\n \"bytes\": 5503,\n \"sha256\": \"0f301c1e9e515fd0f013b6b28a7b8ded8ef5c80f6ae757099484be14601b9637\"\n },\n {\n \"path\": \"core/a04-data-model.md\",\n \"bytes\": 10027,\n \"sha256\": \"87353e22a36fd209f20525d177b2c6688877356561c728d7e805c479e74f208a\"\n },\n {\n \"path\": \"core/a05-disclosure.md\",\n \"bytes\": 11594,\n \"sha256\": \"6691d93fc1a8a171b003342fad31fc51a5ba1665fd46e1cb3d6757b8cb21be22\"\n },\n {\n \"path\": \"core/a06-authorisation.md\",\n \"bytes\": 22439,\n \"sha256\": \"e422540e9bd6f82083ac454793e994694071a59a16611f3464095368f8c8c8eb\"\n },\n {\n \"path\": \"core/a07-agent-surface.md\",\n \"bytes\": 3714,\n \"sha256\": \"586ec8cfc297a7634256f5fcdc54fa727203183f5b6b35f0f2f8071bb56742ee\"\n },\n {\n \"path\": \"core/a08-recipient-api.md\",\n \"bytes\": 1299,\n \"sha256\": \"f55bd68c481efcbe570e4a04e5864aa9800b21c78406688b49a976c585c74edd\"\n },\n {\n \"path\": \"core/a09-receipts-and-log.md\",\n \"bytes\": 7301,\n \"sha256\": \"d5a8432fc1df07414661ab484bf1009e60d7f886168da6a4fd1bffac5d096827\"\n },\n {\n \"path\": \"core/a10-revocation-and-purge.md\",\n \"bytes\": 3521,\n \"sha256\": \"f86cf90515582b9e03fae72a6db9bca55723dc0f1c29e2e9612a40dc31691eb3\"\n },\n {\n \"path\": \"core/a11-portability.md\",\n \"bytes\": 4872,\n \"sha256\": \"7c074a59167557d675e8136842a47709ddbd4dc43b12926eab5509f52cbf3886\"\n },\n {\n \"path\": \"core/a14-contributions.md\",\n \"bytes\": 6509,\n \"sha256\": \"bca9244d403b72a95c7eb8cf1de68284fb7d7c141725c3b5db5f7fbdea4af6c0\"\n },\n {\n \"path\": \"core/a15-security.md\",\n \"bytes\": 4092,\n \"sha256\": \"2fd9496cbb7b79f28dd2363bafabb871435d289bc490c550501edf614c2fe28a\"\n },\n {\n \"path\": \"core/a16-privacy-mapping.md\",\n \"bytes\": 14383,\n \"sha256\": \"40d9c727c57b4552ca3d149c1055bdb9668ed18983922652e57a9bba51bc8798\"\n },\n {\n \"path\": \"core/a17-conformance-and-change.md\",\n \"bytes\": 9156,\n \"sha256\": \"994c92d3053beb616787e8a723a8abb0156a954f5d3f1d88c20850b022a100f1\"\n },\n {\n \"path\": \"core/identifiers.md\",\n \"bytes\": 3812,\n \"sha256\": \"cb8c8031c815652116a76bb297604366b5b2a9bd7c7e1693c8d21a83bebe2c1f\"\n },\n {\n \"path\": \"core/principles.md\",\n \"bytes\": 1545,\n \"sha256\": \"c042b25cb98ec9ee08d2031585ca0244bb70921fb4e5a5f9b082d82f7978a218\"\n },\n {\n \"path\": \"core/reserved/a12-recipient-registry.md\",\n \"bytes\": 985,\n \"sha256\": \"571432be9b1f0a8c42656966e46a9f02aa4cd2fc5026b483371291bc82d254e0\"\n },\n {\n \"path\": \"core/reserved/a13-emergency-information.md\",\n \"bytes\": 1044,\n \"sha256\": \"e8b79bcfe9328c36cf257c8aa3959d7b0aaaccf52af6e485fdc427b7df1fd882\"\n },\n {\n \"path\": \"core/reserved/a14-connectors.md\",\n \"bytes\": 684,\n \"sha256\": \"e70d4bfd22e4d3727a8aaed232c16f7e6158855275803141f41ec18c44ce6919\"\n },\n {\n \"path\": \"core/scopes.md\",\n \"bytes\": 7794,\n \"sha256\": \"9c639fe195880ccda6f557a6505ba5cf038a8794662efb280eceec3f35fb8eb5\"\n },\n {\n \"path\": \"core/terminology.md\",\n \"bytes\": 1214,\n \"sha256\": \"9bd3ca48cda8f95b8e8e8be0a8edb111ac520ae18d9d21ec5d143ce917a4c26d\"\n },\n {\n \"path\": \"errors.json\",\n \"bytes\": 7239,\n \"sha256\": \"a027dd74c6447f3d259de0400743d39f545ec79fdcf37a815701ad30c8ff0704\"\n },\n {\n \"path\": \"examples/authorisation.json\",\n \"bytes\": 3806,\n \"sha256\": \"d524c2d97204d0efd75ffeb08ec0321e548e19d74fe3871d560ff7d6a293f586\"\n },\n {\n \"path\": \"examples/identifiers.json\",\n \"bytes\": 1031,\n \"sha256\": \"1253f71bc3b68472e9bb6c9dfbc960f704b6268bc8d15ef47eca92d1d6e28691\"\n },\n {\n \"path\": \"examples/identity-framing.json\",\n \"bytes\": 1430,\n \"sha256\": \"f383ba33594e98ff7b064e9a3cdd6329ad16705abfe315e5fd929f6c0a708a68\"\n },\n {\n \"path\": \"examples/media/README.md\",\n \"bytes\": 6795,\n \"sha256\": \"8308f4b1db47b485fb2e05095a0f0d2042d0d6085744d42e0604bbd8d4befa03\"\n },\n {\n \"path\": \"examples/media/grants/l0.json\",\n \"bytes\": 1036,\n \"sha256\": \"e8ebfa2e95908b467f19caa5dce341f45cf48ea3cc14fb5bec9ff890a0f18698\"\n },\n {\n \"path\": \"examples/media/grants/l1.json\",\n \"bytes\": 1036,\n \"sha256\": \"ab4da95ae9d5d0026dedd1665b22ffdffb2adaa906a6fda23707abd2815bf5de\"\n },\n {\n \"path\": \"examples/media/grants/l2.json\",\n \"bytes\": 1054,\n \"sha256\": \"09da574482a24c1490ebaf27ad246a43769f0a6a3ff1b9306621083b7618c0fb\"\n },\n {\n \"path\": \"examples/media/person.json\",\n \"bytes\": 9193,\n \"sha256\": \"9193e28c0f72be04b4cfb74b6458df240c1f4edec0821c395911765a37b7fb16\"\n },\n {\n \"path\": \"examples/media/purge/ack.json\",\n \"bytes\": 544,\n \"sha256\": \"df71d1787a9d2644e1e3c7668cc89d10bd48fc35bca724044c57ac8b04a8eb25\"\n },\n {\n \"path\": \"examples/media/purge/instruction-token.json\",\n \"bytes\": 715,\n \"sha256\": \"dd39a5e0482f355d8c1f69d5b403fe7c96739cba94a379815096ef7ece8304df\"\n },\n {\n \"path\": \"examples/media/purge/instruction.json\",\n \"bytes\": 377,\n \"sha256\": \"27aedb6e7636802e931176c46db384dc3c2ee77399b0dea0e15d2eefbe95bb3c\"\n },\n {\n \"path\": \"examples/media/receipts/l0.json\",\n \"bytes\": 1931,\n \"sha256\": \"95be04c87d61b0fa63c6ec5644bce9f1d72b6abfed5ec8f529705db9223104fb\"\n },\n {\n \"path\": \"examples/media/receipts/l1.json\",\n \"bytes\": 2000,\n \"sha256\": \"b019efecdb74b2b8c5851d827cda015a0629b62618b0c15abce258fa9e92fedc\"\n },\n {\n \"path\": \"examples/media/receipts/l2.json\",\n \"bytes\": 2000,\n \"sha256\": \"ab269c704ce75ae963c704aa4b0a6011e534b9b755bdeb519d5415eba6a01eb2\"\n },\n {\n \"path\": \"examples/media/renderings/l0.json\",\n \"bytes\": 4229,\n \"sha256\": \"62443c32a117f12ae956acedf2da67b38d992a0a5f490d565a5c825daca3b393\"\n },\n {\n \"path\": \"examples/media/renderings/l1.json\",\n \"bytes\": 4287,\n \"sha256\": \"9f40f4f86f3bea5f60cc729ff6d980e936bc7aa899ef5ee1690ceee32dba70b6\"\n },\n {\n \"path\": \"examples/media/renderings/l2.json\",\n \"bytes\": 4305,\n \"sha256\": \"0e2f7c43c045e01e7a4f9a40ceb77ad28b4435e6c44520462e65c6186ef395c0\"\n },\n {\n \"path\": \"examples/operational-errors.json\",\n \"bytes\": 5992,\n \"sha256\": \"b18844e4f1782bde2e50c40d9a19d70b0334fe6fff752879491e867dd9d7bcf8\"\n },\n {\n \"path\": \"examples/protocol.json\",\n \"bytes\": 14392,\n \"sha256\": \"4d55604497a8a17c2f05452d727f43ba12188751315d3e80d698c9630ac3a6a6\"\n },\n {\n \"path\": \"examples/scopes.json\",\n \"bytes\": 389,\n \"sha256\": \"a22a24b16de3dc7a9c08b51d9c7acf1797dc527c5bc93e16953bb8c231faa1d0\"\n },\n {\n \"path\": \"history/CHANGES-from-proposal.md\",\n \"bytes\": 36747,\n \"sha256\": \"056426cd7072919800aabdb612399a7043b10f2e53188948226b12e004482e3e\"\n },\n {\n \"path\": \"history/source-ambiguities.md\",\n \"bytes\": 3366,\n \"sha256\": \"0c726097938f88603ba084dbaa35362e675446e2d1187d9c2b6a4753965aafeb\"\n },\n {\n \"path\": \"mcp/tools.json\",\n \"bytes\": 40026,\n \"sha256\": \"1288669c20ac103a35f6a47810ef86a31a7e763ddb54d518a9967edb0286fd05\"\n },\n {\n \"path\": \"openapi/autonym-v1.yaml\",\n \"bytes\": 208755,\n \"sha256\": \"b1ddac85b2463a05e944970980320a51944bf8450f9e6b5dc0f99b8f12a14dff\"\n },\n {\n \"path\": \"schemas/access-token-claims.json\",\n \"bytes\": 13009,\n \"sha256\": \"d453661445b2a45abc1282957b33b43143e6e5ef77f89c49ed349a8590b90f17\"\n },\n {\n \"path\": \"schemas/capability-claim.json\",\n \"bytes\": 6476,\n \"sha256\": \"6e449da83211978d6840fceed56b17ede2d28b7b6a8ad940f96e7cf205182145\"\n },\n {\n \"path\": \"schemas/client-metadata-document.json\",\n \"bytes\": 9082,\n \"sha256\": \"1ab0a0d3592b07831ee0283259563befc0fb76d1d1d315c5486e7b9dcf87d272\"\n },\n {\n \"path\": \"schemas/client-metadata.json\",\n \"bytes\": 8621,\n \"sha256\": \"f51fd9f26553dbc614c3233ad94be3b66477f47dd7208200fc02852cff829696\"\n },\n {\n \"path\": \"schemas/confirmation-result.json\",\n \"bytes\": 344,\n \"sha256\": \"fb5431d48d38363ce4f2f453768b53e54fa424d1eb6192cb3409edd5d41f9aa2\"\n },\n {\n \"path\": \"schemas/confirmation.json\",\n \"bytes\": 294,\n \"sha256\": \"827d9f7a795263b0bd8663eb537ccc8ff63a0fdf0f5a4c1c108e5c0494308c5c\"\n },\n {\n \"path\": \"schemas/context-request.json\",\n \"bytes\": 1189,\n \"sha256\": \"b8c127bdbc0ff9b2a3ba057a47cccfc292c8728e7085b1e508c5e3ef10e9e4a9\"\n },\n {\n \"path\": \"schemas/contribution-detail.json\",\n \"bytes\": 1304,\n \"sha256\": \"c529ac027342e5e06215544fb5a5388cc886a3d51dafa62ca7ef1d9757c64936\"\n },\n {\n \"path\": \"schemas/contribution-event.json\",\n \"bytes\": 9542,\n \"sha256\": \"747ad8ad8dcfc91dfbfaa8f2d96f4b1a3cb5a76863a3c80ad2eb30f6ef9a2faf\"\n },\n {\n \"path\": \"schemas/disclosure.json\",\n \"bytes\": 6544,\n \"sha256\": \"11943a3a5eaa46852933d086fa4ede9b0b006df7267b8e3b3ffb7597c0367209\"\n },\n {\n \"path\": \"schemas/discovery.json\",\n \"bytes\": 8354,\n \"sha256\": \"cc5c14058c9e547748f5af54cf88e5ae437f940a672d1e99bb2df6f50101ae4b\"\n },\n {\n \"path\": \"schemas/domain-list.json\",\n \"bytes\": 969,\n \"sha256\": \"54f355edb61c12c58a74e1ce7dd4ed8e68c632a7b3b74a3a78081c1c77b9dda0\"\n },\n {\n \"path\": \"schemas/encrypted-export-header.json\",\n \"bytes\": 1483,\n \"sha256\": \"afe883537c1eca113b1e09fc9d5b4287c4e80f182e784acb522fe38aac600807\"\n },\n {\n \"path\": \"schemas/entry.json\",\n \"bytes\": 9175,\n \"sha256\": \"243372aa44c7cbeb5f0992b3d5142e0638e64b877a1b8ae6ebf5ffbaad236853\"\n },\n {\n \"path\": \"schemas/export.json\",\n \"bytes\": 56184,\n \"sha256\": \"9335145c701397076697e43e6d7c9704f9200ee77aa087ffff702bbd4f6ee6ed\"\n },\n {\n \"path\": \"schemas/grant-offer-redemption.json\",\n \"bytes\": 492,\n \"sha256\": \"79151d99e0f1e518f37926880337930ae70de0848b9905e61605125287efa205\"\n },\n {\n \"path\": \"schemas/grant-offer-request.json\",\n \"bytes\": 1469,\n \"sha256\": \"accdedb6082794d177ef38d681c2b405d4b9c5c7b6771745ccd1a3e84a3c1972\"\n },\n {\n \"path\": \"schemas/grant-offer.json\",\n \"bytes\": 624,\n \"sha256\": \"f7b75ee17488db7d00864bbe62b98e19953a98eb38b74e8d01e5a80eb62920c6\"\n },\n {\n \"path\": \"schemas/grant.json\",\n \"bytes\": 9490,\n \"sha256\": \"b48ec34d3aac4a9a93cb96784530e4ed5174bab8224a99c82224aaf0925775f5\"\n },\n {\n \"path\": \"schemas/health.json\",\n \"bytes\": 240,\n \"sha256\": \"8e86172164016a4516804fe6244ba5bd6ae524630771d13e7446489f54d12b26\"\n },\n {\n \"path\": \"schemas/identifier.json\",\n \"bytes\": 1491,\n \"sha256\": \"c5c240831edd2426c484952d2b550cc32b56c0effdd5d1de989c84734ea3e431\"\n },\n {\n \"path\": \"schemas/key-set.json\",\n \"bytes\": 1384,\n \"sha256\": \"10b8fb6fec2808b842b5b4613b97ac8a85506523c3ff53a9bd8754c62b60d9cf\"\n },\n {\n \"path\": \"schemas/lifecycle-request.json\",\n \"bytes\": 451,\n \"sha256\": \"db03d3ab49ef4529e73aebafcba5a44df729be2233be7c3bdabfce71405a85e7\"\n },\n {\n \"path\": \"schemas/lifecycle-token-claims.json\",\n \"bytes\": 3251,\n \"sha256\": \"f0d241cc57d5f89f525c3cedc8bdff2b95974ff10d8c94a396bce16a3c43dd22\"\n },\n {\n \"path\": \"schemas/log-event.json\",\n \"bytes\": 2871,\n \"sha256\": \"15264077de10e32e855fab7aa46eecf5f81b38fbdd18b87542996154a3173c0d\"\n },\n {\n \"path\": \"schemas/problem.json\",\n \"bytes\": 25993,\n \"sha256\": \"bd3e114d00577d47940d2d7fc66613162f213af6c6c5869ea0b1f958ddda024b\"\n },\n {\n \"path\": \"schemas/proposal-status.json\",\n \"bytes\": 956,\n \"sha256\": \"45ddc4d9c8c5438e83e736cff5f15157bee43df6f355311242f473eb176502f9\"\n },\n {\n \"path\": \"schemas/purge-ack.json\",\n \"bytes\": 1714,\n \"sha256\": \"ff795d418b0f7d16df09ad4bf1db4b2559f02beeaa69611e603b534f266bca9d\"\n },\n {\n \"path\": \"schemas/purge-instruction.json\",\n \"bytes\": 1585,\n \"sha256\": \"b8bb7a1dbfce37ad1f7aa3d51feeca8dcb30dcad65ca58ccf9e121c907b9c16b\"\n },\n {\n \"path\": \"schemas/purge-list.json\",\n \"bytes\": 377,\n \"sha256\": \"b17bd41c7a5376a885c6460d13d8526026057d867fdca95fe6dfd3602ef4a608\"\n },\n {\n \"path\": \"schemas/readiness.json\",\n \"bytes\": 243,\n \"sha256\": \"08d0bde8aa63ae5925d68db6cd27e754ff65619b5623d575087bff524420f7ea\"\n },\n {\n \"path\": \"schemas/receipt.json\",\n \"bytes\": 4802,\n \"sha256\": \"19b1a72885a072a6348720b190ae7875752c4c475968b6b30e560f9e35b62577\"\n },\n {\n \"path\": \"schemas/scope-token.json\",\n \"bytes\": 1042,\n \"sha256\": \"4455b6699ff4c792a41cbc46c0bc37f14aee49bebe29801a225bc04545cb7bb0\"\n },\n {\n \"path\": \"schemas/temporal.json\",\n \"bytes\": 1145,\n \"sha256\": \"8b3661ffe0b1ebfdb378c59995291dc3738ca86124c0b0b603f265cc935c5077\"\n },\n {\n \"path\": \"schemas/tombstone.json\",\n \"bytes\": 1129,\n \"sha256\": \"7394046045f7a0975889722e1d27980f2f01f119e422a896ee73401e6da1b728\"\n },\n {\n \"path\": \"schemas/withdrawal.json\",\n \"bytes\": 294,\n \"sha256\": \"827d9f7a795263b0bd8663eb537ccc8ff63a0fdf0f5a4c1c108e5c0494308c5c\"\n },\n {\n \"path\": \"scopes.json\",\n \"bytes\": 2065,\n \"sha256\": \"d5ec9587868f43d303c01ae6ebf1bc73b1712ed64184c0523a56e8e40cd35a36\"\n },\n {\n \"path\": \"section-map.json\",\n \"bytes\": 17854,\n \"sha256\": \"f8e930164a5188638ce342a217b11a783bb1294c37a5636cf564d5d99bc5666d\"\n },\n {\n \"path\": \"vocabulary/README.md\",\n \"bytes\": 6742,\n \"sha256\": \"bcc02bade4053a1c352f6c0647e0f2a206721a1f19e7554469eec46a8eb46061\"\n },\n {\n \"path\": \"vocabulary/core.json\",\n \"bytes\": 39260,\n \"sha256\": \"5cf7e6bc7ac91aefbef702141e3b5aa0769b5d71dc8b51ff11215ad87e828b39\"\n }\n ]\n}\n", "mcp/tools.json": "{\n \"autonym_version\": \"1.0\",\n \"specification_revision\": \"2026-07-28\",\n \"status\": \"specified-not-implemented\",\n \"tools\": [\n {\n \"name\": \"get_grant\",\n \"description\": \"Describe only the authenticated current grant.\",\n \"inputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {},\n \"additionalProperties\": false\n },\n \"outputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"read\"\n },\n \"read\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n {\n \"type\": \"string\",\n \"const\": \"*\"\n }\n ]\n },\n \"keys\": {\n \"anyOf\": [\n {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"max_level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"max_reads\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"reads_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"allow_delegation\": {\n \"type\": \"boolean\"\n },\n \"onward_share\": {\n \"type\": \"boolean\",\n \"const\": false\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"read\",\n \"declared_only\",\n \"min_confidence\",\n \"max_reads\",\n \"reads_used\",\n \"persist_until\",\n \"allow_delegation\",\n \"onward_share\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"events_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"contribute\",\n \"max_events\",\n \"events_used\",\n \"allow_confirmation\",\n \"stream_id\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"$id\": \"urn:autonym:schema:grant:1.0:1.0-draft-1\"\n },\n \"annotations\": {\n \"readOnlyHint\": true,\n \"destructiveHint\": false,\n \"openWorldHint\": false\n }\n },\n {\n \"name\": \"list_domains\",\n \"description\": \"List eligible granted domains and keys without hidden counts.\",\n \"inputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {},\n \"additionalProperties\": false\n },\n \"outputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"max_level\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"domains\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:domain-list:1.0:1.0-draft-1\"\n },\n \"annotations\": {\n \"readOnlyHint\": true,\n \"destructiveHint\": false,\n \"openWorldHint\": false\n }\n },\n {\n \"name\": \"get_context\",\n \"description\": \"Read the permitted context in one counted transaction.\",\n \"inputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"since\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"domains\"\n ],\n \"additionalProperties\": false\n },\n \"outputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"provider\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"audience\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant_revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"read_id\": {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"valid_until\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"ttl_seconds\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 300\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"entries\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^rent_[a-z2-7]{52}$\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"safety_critical\": {\n \"type\": \"boolean\"\n },\n \"provenance\": {\n \"type\": \"object\",\n \"properties\": {\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"declared\",\n \"observed\",\n \"derived\",\n \"attested\"\n ]\n },\n \"confirmed\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"kind\",\n \"confirmed\"\n ],\n \"additionalProperties\": false\n },\n \"stale\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"domain\",\n \"key\",\n \"level\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"safety_critical\",\n \"provenance\",\n \"stale\"\n ],\n \"additionalProperties\": false\n }\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"autonym_version\",\n \"provider\",\n \"audience\",\n \"client_id\",\n \"handle\",\n \"grant_id\",\n \"grant_revision\",\n \"read_id\",\n \"purpose\",\n \"issued_at\",\n \"valid_until\",\n \"ttl_seconds\",\n \"persist_until\",\n \"entries\",\n \"proof\"\n ],\n \"additionalProperties\": false,\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n },\n \"$id\": \"urn:autonym:schema:disclosure:1.0:1.0-draft-1\"\n },\n \"annotations\": {\n \"readOnlyHint\": true,\n \"destructiveHint\": false,\n \"openWorldHint\": false\n }\n },\n {\n \"name\": \"propose_entry\",\n \"description\": \"Submit one idempotent event under a separate contribution grant.\",\n \"inputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"create\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"correct\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"withdraw\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n }\n },\n \"outputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"ingested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"pending\",\n \"accepted\",\n \"rejected\",\n \"withdrawn\"\n ]\n }\n },\n \"required\": [\n \"proposal_id\",\n \"event_id\",\n \"ingested_at\",\n \"status\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:proposal-status:1.0:1.0-draft-1\"\n },\n \"annotations\": {\n \"readOnlyHint\": false,\n \"destructiveHint\": true,\n \"openWorldHint\": false\n }\n },\n {\n \"name\": \"confirm_entry\",\n \"description\": \"Request exact-statement confirmation or first-party app review.\",\n \"inputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"proposal_id\"\n ],\n \"additionalProperties\": false\n },\n \"outputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"status\": {\n \"type\": \"string\",\n \"const\": \"review_required\"\n },\n \"review_url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"status\",\n \"review_url\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:confirmation-result:1.0:1.0-draft-1\"\n },\n \"annotations\": {\n \"readOnlyHint\": false,\n \"destructiveHint\": true,\n \"openWorldHint\": false\n }\n },\n {\n \"name\": \"withdraw_proposal\",\n \"description\": \"Withdraw only the authenticated contributor’s own proposal.\",\n \"inputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"proposal_id\"\n ],\n \"additionalProperties\": false\n },\n \"outputSchema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"ingested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"pending\",\n \"accepted\",\n \"rejected\",\n \"withdrawn\"\n ]\n }\n },\n \"required\": [\n \"proposal_id\",\n \"event_id\",\n \"ingested_at\",\n \"status\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:proposal-status:1.0:1.0-draft-1\"\n },\n \"annotations\": {\n \"readOnlyHint\": false,\n \"destructiveHint\": true,\n \"openWorldHint\": false\n }\n }\n ]\n}\n", "openapi/autonym-v1.yaml": "{\n \"openapi\": \"3.1.0\",\n \"info\": {\n \"title\": \"Autonym recipient API\",\n \"version\": \"1.0-draft-1\",\n \"description\": \"Draft wire version 1.0. No recipient runtime is claimed. Every access token is DPoP-bound: no Bearer token is issued or accepted (A6.3).\"\n },\n \"servers\": [\n {\n \"url\": \"https://autonym.example\"\n }\n ],\n \"x-implementation-status\": \"not-implemented\",\n \"paths\": {\n \"/.well-known/autonym\": {\n \"get\": {\n \"operationId\": \"discover\",\n \"security\": [],\n \"parameters\": [],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/discovery\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/grant\": {\n \"get\": {\n \"operationId\": \"getGrant\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/grant\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/domains\": {\n \"get\": {\n \"operationId\": \"listDomains\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/domain-list\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/context\": {\n \"get\": {\n \"operationId\": \"getContext\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [\n {\n \"name\": \"domains\",\n \"in\": \"query\",\n \"required\": true,\n \"style\": \"form\",\n \"explode\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n {\n \"name\": \"max_level\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n {\n \"name\": \"keys\",\n \"in\": \"query\",\n \"required\": false,\n \"style\": \"form\",\n \"explode\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n {\n \"name\": \"declared_only\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"boolean\"\n }\n },\n {\n \"name\": \"min_confidence\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n }\n },\n {\n \"name\": \"since\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/disclosure\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/context/{domain}\": {\n \"get\": {\n \"operationId\": \"getDomainContext\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [\n {\n \"name\": \"domain\",\n \"in\": \"path\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n },\n {\n \"name\": \"max_level\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n {\n \"name\": \"keys\",\n \"in\": \"query\",\n \"required\": false,\n \"style\": \"form\",\n \"explode\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n {\n \"name\": \"declared_only\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"boolean\"\n }\n },\n {\n \"name\": \"min_confidence\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n }\n },\n {\n \"name\": \"since\",\n \"in\": \"query\",\n \"required\": false,\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n {\n \"name\": \"If-None-Match\",\n \"in\": \"header\",\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/disclosure\"\n }\n }\n }\n },\n \"304\": {\n \"description\": \"Authorised, still-valid previous envelope; logged but not a new read.\"\n },\n \"default\": {\n \"description\": \"Error\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/proposals\": {\n \"post\": {\n \"operationId\": \"proposeEntry\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [],\n \"requestBody\": {\n \"required\": true,\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/contribution-event\"\n }\n }\n }\n },\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/proposal-status\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/proposals/{id}\": {\n \"get\": {\n \"operationId\": \"getProposal\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [\n {\n \"name\": \"id\",\n \"in\": \"path\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/proposal-status\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n },\n \"delete\": {\n \"operationId\": \"withdrawProposal\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [\n {\n \"name\": \"id\",\n \"in\": \"path\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/proposal-status\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/proposals/{id}/confirm\": {\n \"post\": {\n \"operationId\": \"confirmEntry\",\n \"security\": [\n {\n \"OAuth\": [],\n \"DPoP\": []\n }\n ],\n \"parameters\": [\n {\n \"name\": \"id\",\n \"in\": \"path\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"requestBody\": {\n \"required\": true,\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/confirmation\"\n }\n }\n }\n },\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/confirmation-result\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/purge-instructions\": {\n \"get\": {\n \"operationId\": \"listPurgeInstructions\",\n \"security\": [\n {\n \"LifecycleOAuth\": [\n \"autonym:lifecycle:purge\"\n ],\n \"DPoP\": []\n }\n ],\n \"parameters\": [],\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"instructions\": {\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.[A-Za-z0-9_-]+\\\\.[A-Za-z0-9_-]+$\"\n }\n }\n },\n \"required\": [\n \"instructions\"\n ],\n \"additionalProperties\": false\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n },\n \"/v1/purge-instructions/{jti}/ack\": {\n \"post\": {\n \"operationId\": \"acknowledgePurge\",\n \"security\": [\n {\n \"LifecycleOAuth\": [\n \"autonym:lifecycle:purge\"\n ],\n \"DPoP\": []\n }\n ],\n \"parameters\": [\n {\n \"name\": \"jti\",\n \"in\": \"path\",\n \"required\": true,\n \"schema\": {\n \"type\": \"string\"\n }\n }\n ],\n \"requestBody\": {\n \"required\": true,\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/purge-ack\"\n }\n }\n }\n },\n \"responses\": {\n \"200\": {\n \"description\": \"Success. This is a specified contract, not an implemented endpoint.\",\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/purge-ack\"\n }\n }\n }\n },\n \"default\": {\n \"description\": \"RFC 9457 error; OAuth errors follow OAuth.\",\n \"content\": {\n \"application/problem+json\": {\n \"schema\": {\n \"$ref\": \"#/components/schemas/problem\"\n }\n }\n }\n }\n }\n }\n }\n },\n \"components\": {\n \"schemas\": {\n \"entry\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"provenance\": {\n \"type\": \"object\",\n \"properties\": {\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"declared\",\n \"observed\",\n \"derived\",\n \"attested\"\n ]\n },\n \"source_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"source_event_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 128\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"recorded_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"occurred_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confidence\": {\n \"anyOf\": [\n {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confirmed_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"derived_from\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"fields\": {\n \"minItems\": 1,\n \"maxItems\": 64,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"maxLength\": 256\n }\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\",\n \"fields\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"kind\",\n \"source_client_id\",\n \"source_event_id\",\n \"recorded_at\",\n \"occurred_at\",\n \"confidence\",\n \"confirmed_at\",\n \"evidence_refs\",\n \"derived_from\"\n ],\n \"additionalProperties\": false\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"overlay\": {\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"target_entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"enabled\": {\n \"type\": \"boolean\"\n },\n \"selected\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"target_entry_id\",\n \"enabled\",\n \"selected\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"rendering_overrides\": {\n \"type\": \"object\",\n \"properties\": {\n \"L1\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"additionalProperties\": false\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"superseded\",\n \"archived\"\n ]\n },\n \"created_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"updated_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"origin_host\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"provenance\",\n \"temporal\",\n \"overlay\",\n \"rendering_overrides\",\n \"status\",\n \"created_at\",\n \"updated_at\",\n \"origin_host\"\n ],\n \"additionalProperties\": false,\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n },\n \"$id\": \"urn:autonym:schema:entry:1.0:1.0-draft-1\"\n },\n \"temporal\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:temporal:1.0:1.0-draft-1\"\n },\n \"grant\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"read\"\n },\n \"read\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n {\n \"type\": \"string\",\n \"const\": \"*\"\n }\n ]\n },\n \"keys\": {\n \"anyOf\": [\n {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"max_level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"max_reads\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"reads_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"allow_delegation\": {\n \"type\": \"boolean\"\n },\n \"onward_share\": {\n \"type\": \"boolean\",\n \"const\": false\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"read\",\n \"declared_only\",\n \"min_confidence\",\n \"max_reads\",\n \"reads_used\",\n \"persist_until\",\n \"allow_delegation\",\n \"onward_share\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"events_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"contribute\",\n \"max_events\",\n \"events_used\",\n \"allow_confirmation\",\n \"stream_id\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"$id\": \"urn:autonym:schema:grant:1.0:1.0-draft-1\"\n },\n \"context-request\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"since\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"domains\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:context-request:1.0:1.0-draft-1\"\n },\n \"disclosure\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"provider\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"audience\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant_revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"read_id\": {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"valid_until\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"ttl_seconds\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 300\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"entries\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^rent_[a-z2-7]{52}$\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"safety_critical\": {\n \"type\": \"boolean\"\n },\n \"provenance\": {\n \"type\": \"object\",\n \"properties\": {\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"declared\",\n \"observed\",\n \"derived\",\n \"attested\"\n ]\n },\n \"confirmed\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"kind\",\n \"confirmed\"\n ],\n \"additionalProperties\": false\n },\n \"stale\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"domain\",\n \"key\",\n \"level\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"safety_critical\",\n \"provenance\",\n \"stale\"\n ],\n \"additionalProperties\": false\n }\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"autonym_version\",\n \"provider\",\n \"audience\",\n \"client_id\",\n \"handle\",\n \"grant_id\",\n \"grant_revision\",\n \"read_id\",\n \"purpose\",\n \"issued_at\",\n \"valid_until\",\n \"ttl_seconds\",\n \"persist_until\",\n \"entries\",\n \"proof\"\n ],\n \"additionalProperties\": false,\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n },\n \"$id\": \"urn:autonym:schema:disclosure:1.0:1.0-draft-1\"\n },\n \"contribution-event\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"create\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"correct\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"withdraw\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n },\n \"$id\": \"urn:autonym:schema:contribution-event:1.0:1.0-draft-1\"\n },\n \"proposal-status\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"ingested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"pending\",\n \"accepted\",\n \"rejected\",\n \"withdrawn\"\n ]\n }\n },\n \"required\": [\n \"proposal_id\",\n \"event_id\",\n \"ingested_at\",\n \"status\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:proposal-status:1.0:1.0-draft-1\"\n },\n \"confirmation\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"proposal_id\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:confirmation:1.0:1.0-draft-1\"\n },\n \"confirmation-result\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"status\": {\n \"type\": \"string\",\n \"const\": \"review_required\"\n },\n \"review_url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"status\",\n \"review_url\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:confirmation-result:1.0:1.0-draft-1\"\n },\n \"domain-list\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"max_level\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"domains\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:domain-list:1.0:1.0-draft-1\"\n },\n \"receipt\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"provider\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"read_id\": {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"surface\": {\n \"type\": \"string\",\n \"enum\": [\n \"rest\",\n \"mcp_tool\",\n \"mcp_resource\",\n \"mcp_briefing\"\n ]\n },\n \"request\": {\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"since\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"domains\",\n \"max_level\",\n \"declared_only\",\n \"min_confidence\"\n ],\n \"additionalProperties\": false\n },\n \"returned\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"response_hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"event_id\",\n \"provider\",\n \"read_id\",\n \"grant_id\",\n \"client_id\",\n \"at\",\n \"purpose\",\n \"surface\",\n \"request\",\n \"returned\",\n \"response_hash\",\n \"prev_hash\",\n \"hash\",\n \"proof\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:receipt:1.0:1.0-draft-1\"\n },\n \"log-event\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"grant_created\",\n \"grant_revoked\",\n \"grant_expired\",\n \"rule_applied\",\n \"delegation_redeemed\",\n \"proposal_decided\",\n \"overlay_enabled\",\n \"overlay_disabled\",\n \"overlay_selected\",\n \"read_not_modified\",\n \"purge_issued\",\n \"purge_acknowledged\",\n \"operator_action\",\n \"migration_imported\"\n ]\n },\n \"actor_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"subject_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n },\n \"details\": {\n \"type\": \"object\",\n \"properties\": {\n \"decision\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"enum\": [\n \"approved\",\n \"rejected\",\n \"enabled\",\n \"disabled\",\n \"selected\",\n \"unchanged\",\n \"completed\",\n \"failed\"\n ]\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"ids\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"response_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"decision\",\n \"ids\",\n \"response_hash\"\n ],\n \"additionalProperties\": false\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"at\",\n \"kind\",\n \"actor_client_id\",\n \"subject_id\",\n \"details\",\n \"prev_hash\",\n \"hash\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:log-event:1.0:1.0-draft-1\"\n },\n \"purge-instruction\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"iss\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"sub\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"aud\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"jti\": {\n \"type\": \"string\",\n \"pattern\": \"^pi_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"iat\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"exp\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"autonym_grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"reason\": {\n \"type\": \"string\",\n \"const\": \"grant_ended\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"const\": \"all\"\n },\n \"deadline\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"iss\",\n \"sub\",\n \"aud\",\n \"jti\",\n \"iat\",\n \"exp\",\n \"autonym_grant_id\",\n \"reason\",\n \"scope\",\n \"deadline\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:purge-instruction:1.0:1.0-draft-1\"\n },\n \"purge-ack\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"instruction_id\": {\n \"type\": \"string\",\n \"pattern\": \"^pi_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"attestation\": {\n \"type\": \"string\",\n \"enum\": [\n \"purged\",\n \"not_held\",\n \"legal_hold\"\n ]\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"note\": {\n \"type\": \"string\",\n \"maxLength\": 2048\n },\n \"proof\": {\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"instruction_id\",\n \"attestation\",\n \"at\",\n \"note\",\n \"proof\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:purge-ack:1.0:1.0-draft-1\"\n },\n \"capability-claim\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"provider\"\n },\n \"capabilities\": {\n \"maxItems\": 4,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Core\",\n \"Write\",\n \"Portable\",\n \"Delegated\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"recipient\"\n },\n \"capabilities\": {\n \"maxItems\": 3,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Read\",\n \"Contribute\",\n \"Reciprocal\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"$id\": \"urn:autonym:schema:capability-claim:1.0:1.0-draft-1\"\n },\n \"discovery\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"issuer\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"authorization_server\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"jwks_uri\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"rest_endpoint\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"mcp_endpoint\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"capabilities\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"provider\"\n },\n \"capabilities\": {\n \"maxItems\": 4,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Core\",\n \"Write\",\n \"Portable\",\n \"Delegated\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"recipient\"\n },\n \"capabilities\": {\n \"maxItems\": 3,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Read\",\n \"Contribute\",\n \"Reciprocal\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n }\n ]\n }\n },\n \"required\": [\n \"autonym_version\",\n \"issuer\",\n \"authorization_server\",\n \"jwks_uri\",\n \"rest_endpoint\",\n \"mcp_endpoint\",\n \"capabilities\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:discovery:1.0:1.0-draft-1\"\n },\n \"export\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"format\": {\n \"type\": \"string\",\n \"const\": \"autonym-export/1.0\"\n },\n \"exported_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"origin_host\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"history_mode\": {\n \"type\": \"string\",\n \"enum\": [\n \"current\",\n \"all_retained\"\n ]\n },\n \"partitions\": {\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"label\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"id\",\n \"label\"\n ],\n \"additionalProperties\": false\n }\n },\n \"entries\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"provenance\": {\n \"type\": \"object\",\n \"properties\": {\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"declared\",\n \"observed\",\n \"derived\",\n \"attested\"\n ]\n },\n \"source_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"source_event_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 128\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"recorded_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"occurred_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confidence\": {\n \"anyOf\": [\n {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confirmed_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"derived_from\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"fields\": {\n \"minItems\": 1,\n \"maxItems\": 64,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"maxLength\": 256\n }\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\",\n \"fields\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"kind\",\n \"source_client_id\",\n \"source_event_id\",\n \"recorded_at\",\n \"occurred_at\",\n \"confidence\",\n \"confirmed_at\",\n \"evidence_refs\",\n \"derived_from\"\n ],\n \"additionalProperties\": false\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"overlay\": {\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"target_entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"enabled\": {\n \"type\": \"boolean\"\n },\n \"selected\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"target_entry_id\",\n \"enabled\",\n \"selected\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"rendering_overrides\": {\n \"type\": \"object\",\n \"properties\": {\n \"L1\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"additionalProperties\": false\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"superseded\",\n \"archived\"\n ]\n },\n \"created_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"updated_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"origin_host\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"provenance\",\n \"temporal\",\n \"overlay\",\n \"rendering_overrides\",\n \"status\",\n \"created_at\",\n \"updated_at\",\n \"origin_host\"\n ],\n \"additionalProperties\": false\n }\n },\n \"tombstones\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"deleted_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"deleted_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"grants_history\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"read\"\n },\n \"read\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n {\n \"type\": \"string\",\n \"const\": \"*\"\n }\n ]\n },\n \"keys\": {\n \"anyOf\": [\n {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"max_level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"max_reads\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"reads_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"allow_delegation\": {\n \"type\": \"boolean\"\n },\n \"onward_share\": {\n \"type\": \"boolean\",\n \"const\": false\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"read\",\n \"declared_only\",\n \"min_confidence\",\n \"max_reads\",\n \"reads_used\",\n \"persist_until\",\n \"allow_delegation\",\n \"onward_share\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"events_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"contribute\",\n \"max_events\",\n \"events_used\",\n \"allow_confirmation\",\n \"stream_id\"\n ],\n \"additionalProperties\": false\n }\n ]\n }\n },\n \"required\": [\n \"profile_id\",\n \"grant\"\n ],\n \"additionalProperties\": false\n }\n },\n \"receipts\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"receipt\": {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"provider\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"read_id\": {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"surface\": {\n \"type\": \"string\",\n \"enum\": [\n \"rest\",\n \"mcp_tool\",\n \"mcp_resource\",\n \"mcp_briefing\"\n ]\n },\n \"request\": {\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"since\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"domains\",\n \"max_level\",\n \"declared_only\",\n \"min_confidence\"\n ],\n \"additionalProperties\": false\n },\n \"returned\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"response_hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"event_id\",\n \"provider\",\n \"read_id\",\n \"grant_id\",\n \"client_id\",\n \"at\",\n \"purpose\",\n \"surface\",\n \"request\",\n \"returned\",\n \"response_hash\",\n \"prev_hash\",\n \"hash\",\n \"proof\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"profile_id\",\n \"receipt\"\n ],\n \"additionalProperties\": false\n }\n },\n \"log_events\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event\": {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"grant_created\",\n \"grant_revoked\",\n \"grant_expired\",\n \"rule_applied\",\n \"delegation_redeemed\",\n \"proposal_decided\",\n \"overlay_enabled\",\n \"overlay_disabled\",\n \"overlay_selected\",\n \"read_not_modified\",\n \"purge_issued\",\n \"purge_acknowledged\",\n \"operator_action\",\n \"migration_imported\"\n ]\n },\n \"actor_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"subject_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n },\n \"details\": {\n \"type\": \"object\",\n \"properties\": {\n \"decision\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"enum\": [\n \"approved\",\n \"rejected\",\n \"enabled\",\n \"disabled\",\n \"selected\",\n \"unchanged\",\n \"completed\",\n \"failed\"\n ]\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"ids\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"response_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"decision\",\n \"ids\",\n \"response_hash\"\n ],\n \"additionalProperties\": false\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"at\",\n \"kind\",\n \"actor_client_id\",\n \"subject_id\",\n \"details\",\n \"prev_hash\",\n \"hash\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"profile_id\",\n \"event\"\n ],\n \"additionalProperties\": false\n }\n },\n \"public_keys\": {\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"kty\": {\n \"type\": \"string\",\n \"const\": \"EC\"\n },\n \"crv\": {\n \"type\": \"string\",\n \"const\": \"P-256\"\n },\n \"x\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"y\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"use\": {\n \"type\": \"string\",\n \"const\": \"sig\"\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 253402300799\n }\n },\n \"required\": [\n \"kty\",\n \"crv\",\n \"x\",\n \"y\",\n \"kid\",\n \"alg\",\n \"use\"\n ],\n \"additionalProperties\": false\n }\n },\n \"policy_history\": {\n \"maxItems\": 10000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n },\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"rule\",\n \"delegation\"\n ]\n },\n \"executable\": {\n \"type\": \"boolean\",\n \"const\": false\n },\n \"description\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n },\n \"related_grant_ids\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n }\n },\n \"required\": [\n \"profile_id\",\n \"id\",\n \"kind\",\n \"executable\",\n \"description\",\n \"related_grant_ids\"\n ],\n \"additionalProperties\": false\n }\n },\n \"proposals\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"source_client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"event\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"create\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"correct\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"withdraw\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n }\n ]\n },\n \"acknowledgement\": {\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"ingested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"pending\",\n \"accepted\",\n \"rejected\",\n \"withdrawn\"\n ]\n }\n },\n \"required\": [\n \"proposal_id\",\n \"event_id\",\n \"ingested_at\",\n \"status\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"profile_id\",\n \"source_client_id\",\n \"event\",\n \"acknowledgement\"\n ],\n \"additionalProperties\": false\n }\n },\n \"unsupported\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"reason\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"reason\"\n ],\n \"additionalProperties\": false\n }\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"format\",\n \"exported_at\",\n \"origin_host\",\n \"history_mode\",\n \"partitions\",\n \"entries\",\n \"tombstones\",\n \"grants_history\",\n \"receipts\",\n \"log_events\",\n \"public_keys\",\n \"policy_history\",\n \"proposals\",\n \"unsupported\",\n \"proof\"\n ],\n \"additionalProperties\": false,\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n },\n \"$id\": \"urn:autonym:schema:export:1.0:1.0-draft-1\"\n },\n \"tombstone\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"deleted_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"deleted_at\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:tombstone:1.0:1.0-draft-1\"\n },\n \"withdrawal\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"proposal_id\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:withdrawal:1.0:1.0-draft-1\"\n },\n \"purge-list\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"instructions\": {\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.[A-Za-z0-9_-]+\\\\.[A-Za-z0-9_-]+$\"\n }\n }\n },\n \"required\": [\n \"instructions\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:purge-list:1.0:1.0-draft-1\"\n },\n \"grant-offer-request\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"grant_type\": {\n \"type\": \"string\",\n \"const\": \"urn:ietf:params:oauth:grant-type:token-exchange\"\n },\n \"subject_token\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 16384\n },\n \"subject_token_type\": {\n \"type\": \"string\",\n \"const\": \"urn:ietf:params:oauth:token-type:access_token\"\n },\n \"requested_token_type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:params:oauth:token-type:grant-offer\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 8192\n },\n \"resource\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"autonym_recipient\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"autonym_purpose_text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n },\n \"autonym_expires_in\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"autonym_max_reads\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n }\n },\n \"required\": [\n \"grant_type\",\n \"subject_token\",\n \"subject_token_type\",\n \"requested_token_type\",\n \"scope\",\n \"resource\",\n \"autonym_recipient\",\n \"autonym_purpose_text\",\n \"autonym_expires_in\",\n \"autonym_max_reads\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:grant-offer-request:1.0:1.0-draft-1\"\n },\n \"grant-offer\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"access_token\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{43,512}$\"\n },\n \"issued_token_type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:params:oauth:token-type:grant-offer\"\n },\n \"token_type\": {\n \"type\": \"string\",\n \"const\": \"N_A\"\n },\n \"expires_in\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 300\n }\n },\n \"required\": [\n \"access_token\",\n \"issued_token_type\",\n \"token_type\",\n \"expires_in\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:grant-offer:1.0:1.0-draft-1\"\n },\n \"grant-offer-redemption\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"grant_type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:params:oauth:grant-type:grant-offer\"\n },\n \"grant_code\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{43,512}$\"\n },\n \"resource\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"grant_type\",\n \"grant_code\",\n \"resource\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:grant-offer-redemption:1.0:1.0-draft-1\"\n },\n \"encrypted-export-header\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"dir\"\n },\n \"enc\": {\n \"type\": \"string\",\n \"const\": \"A256GCM\"\n },\n \"typ\": {\n \"type\": \"string\",\n \"const\": \"autonym-export+jwe\"\n },\n \"cty\": {\n \"type\": \"string\",\n \"const\": \"application/autonym-export+json\"\n },\n \"crit\": {\n \"type\": \"array\",\n \"prefixItems\": [\n {\n \"type\": \"string\",\n \"const\": \"autonym_kdf\"\n }\n ],\n \"items\": false,\n \"minItems\": 1,\n \"maxItems\": 1\n },\n \"autonym_kdf\": {\n \"type\": \"object\",\n \"properties\": {\n \"name\": {\n \"type\": \"string\",\n \"const\": \"argon2id\"\n },\n \"v\": {\n \"type\": \"number\",\n \"const\": 19\n },\n \"m\": {\n \"type\": \"number\",\n \"const\": 65536\n },\n \"t\": {\n \"type\": \"number\",\n \"const\": 3\n },\n \"p\": {\n \"type\": \"number\",\n \"const\": 4\n },\n \"salt\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{22}$\"\n }\n },\n \"required\": [\n \"name\",\n \"v\",\n \"m\",\n \"t\",\n \"p\",\n \"salt\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"alg\",\n \"enc\",\n \"typ\",\n \"cty\",\n \"crit\",\n \"autonym_kdf\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:encrypted-export-header:1.0:1.0-draft-1\"\n },\n \"lifecycle-request\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"grant_type\": {\n \"type\": \"string\",\n \"const\": \"client_credentials\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"const\": \"autonym:lifecycle:purge\"\n },\n \"resource\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"grant_type\",\n \"scope\",\n \"resource\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:lifecycle-request:1.0:1.0-draft-1\"\n },\n \"key-set\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"kty\": {\n \"type\": \"string\",\n \"const\": \"EC\"\n },\n \"crv\": {\n \"type\": \"string\",\n \"const\": \"P-256\"\n },\n \"x\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"y\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"use\": {\n \"type\": \"string\",\n \"const\": \"sig\"\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 253402300799\n }\n },\n \"required\": [\n \"kty\",\n \"crv\",\n \"x\",\n \"y\",\n \"kid\",\n \"alg\",\n \"use\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"keys\"\n ],\n \"additionalProperties\": false,\n \"$id\": \"urn:autonym:schema:key-set:1.0:1.0-draft-1\"\n },\n \"problem\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:invalid_scope\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Invalid scope\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"invalid_scope\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:purpose_missing\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Purpose is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"purpose_missing\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:invalid_request\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Invalid request\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"invalid_request\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:not_found\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Not found\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 404\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"not_found\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:idempotency_conflict\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Idempotency key already used\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 409\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"idempotency_conflict\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:payload_too_large\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Request too large\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 413\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"payload_too_large\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:rate_limited\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Try again later\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 429\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"rate_limited\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:internal_error\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Request could not be completed\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 500\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"internal_error\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:not_ready\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Service is not ready\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 503\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"not_ready\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:domain_not_granted\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Domain is not granted\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"domain_not_granted\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:grant_revoked\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Grant is no longer active\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"grant_revoked\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:grant_expired\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Grant has expired\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"grant_expired\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:grant_exhausted\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Grant limit reached\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"grant_exhausted\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:dpop_required\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sender proof is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 401\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"dpop_required\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:dpop_invalid\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sender proof is invalid\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 401\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"dpop_invalid\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:safety_write_forbidden\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"First-party confirmation is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"safety_write_forbidden\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:inference_forbidden\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Inference is not permitted\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"inference_forbidden\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:proposal_not_found\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Proposal was not found\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 404\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"proposal_not_found\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:proposal_decided\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Proposal has already been decided\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 409\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"proposal_decided\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:value_rejected\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Value does not match the vocabulary\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 422\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"value_rejected\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:capability_not_granted\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Capability is not granted\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"capability_not_granted\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:advertising_ineligible\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Advertising permission is unavailable\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"advertising_ineligible\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:client_suspended\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Client is suspended\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"client_suspended\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:entry_limit_reached\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Entry limit reached\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 409\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"entry_limit_reached\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:session_required\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sign-in is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 401\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"session_required\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:csrf_invalid\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Request could not be verified\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"csrf_invalid\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:reauthentication_required\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Recent sign-in is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"reauthentication_required\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:signup_unavailable\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sign-up is not available\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"signup_unavailable\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:sign_in_failed\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sign-in failed\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"sign_in_failed\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"$id\": \"urn:autonym:schema:problem:1.0:1.0-draft-1\"\n }\n },\n \"securitySchemes\": {\n \"LifecycleOAuth\": {\n \"type\": \"oauth2\",\n \"flows\": {\n \"clientCredentials\": {\n \"tokenUrl\": \"https://autonym.example/oauth/token\",\n \"scopes\": {\n \"autonym:lifecycle:purge\": \"Only this registered client’s outstanding purge lifecycle\"\n }\n }\n }\n },\n \"OAuth\": {\n \"type\": \"http\",\n \"scheme\": \"DPoP\",\n \"bearerFormat\": \"JWT\"\n },\n \"DPoP\": {\n \"type\": \"apiKey\",\n \"in\": \"header\",\n \"name\": \"DPoP\"\n }\n }\n }\n}\n", "schemas/access-token-claims.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"iss\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)*(?![\\\\s\\\\S])\"\n },\n \"aud\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)*(?![\\\\s\\\\S])\"\n },\n \"sub\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^cl_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\\\.)*(?!(?:[0-9]+|0x[0-9a-f]*)(?![a-z0-9-]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/(?!(?:\\\\.|%2[eE]){1,2}(?:[/?]|(?![\\\\s\\\\S])))[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)+(?:\\\\?[\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n ]\n },\n \"jti\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{16,128}(?![\\\\s\\\\S])\"\n },\n \"iat\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 253402300799\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 253402300799\n },\n \"cnf\": {\n \"type\": \"object\",\n \"properties\": {\n \"jkt\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n }\n },\n \"required\": [\n \"jkt\"\n ],\n \"additionalProperties\": false\n },\n \"autonym_grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"autonym_purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"act\": {\n \"type\": \"object\",\n \"properties\": {\n \"client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^cl_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\\\.)*(?!(?:[0-9]+|0x[0-9a-f]*)(?![a-z0-9-]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/(?!(?:\\\\.|%2[eE]){1,2}(?:[/?]|(?![\\\\s\\\\S])))[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)+(?:\\\\?[\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n ]\n }\n },\n \"required\": [\n \"client_id\"\n ],\n \"additionalProperties\": false\n },\n \"scope\": {\n \"type\": \"string\",\n \"maxLength\": 16384,\n \"pattern\": \"^[\\\\x21\\\\x23-\\\\x5b\\\\x5d-\\\\x7e]+(?: [\\\\x21\\\\x23-\\\\x5b\\\\x5d-\\\\x7e]+)*(?![\\\\s\\\\S])\"\n },\n \"authorization_details\": {\n \"minItems\": 1,\n \"maxItems\": 4,\n \"type\": \"array\",\n \"items\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:authorization-details:contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"type\",\n \"contribute\",\n \"max_events\",\n \"allow_confirmation\"\n ],\n \"additionalProperties\": false,\n \"description\": \"The RFC 9396 authorization_details entry that requests a contribution grant (A6.2). Domains are unique, and so are the keys of each domain.\"\n }\n ]\n }\n }\n },\n \"required\": [\n \"iss\",\n \"aud\",\n \"sub\",\n \"client_id\",\n \"jti\",\n \"iat\",\n \"exp\",\n \"cnf\",\n \"autonym_grant_id\",\n \"autonym_purpose\",\n \"scope\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"iss\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)*(?![\\\\s\\\\S])\"\n },\n \"aud\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)*(?![\\\\s\\\\S])\"\n },\n \"sub\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^cl_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\\\.)*(?!(?:[0-9]+|0x[0-9a-f]*)(?![a-z0-9-]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/(?!(?:\\\\.|%2[eE]){1,2}(?:[/?]|(?![\\\\s\\\\S])))[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)+(?:\\\\?[\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n ]\n },\n \"jti\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{16,128}(?![\\\\s\\\\S])\"\n },\n \"iat\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 253402300799\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 253402300799\n },\n \"cnf\": {\n \"type\": \"object\",\n \"properties\": {\n \"jkt\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n }\n },\n \"required\": [\n \"jkt\"\n ],\n \"additionalProperties\": false\n },\n \"autonym_grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"autonym_purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"act\": {\n \"type\": \"object\",\n \"properties\": {\n \"client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^cl_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\\\.)*(?!(?:[0-9]+|0x[0-9a-f]*)(?![a-z0-9-]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/(?!(?:\\\\.|%2[eE]){1,2}(?:[/?]|(?![\\\\s\\\\S])))[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)+(?:\\\\?[\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n ]\n }\n },\n \"required\": [\n \"client_id\"\n ],\n \"additionalProperties\": false\n },\n \"authorization_details\": {\n \"minItems\": 1,\n \"maxItems\": 4,\n \"type\": \"array\",\n \"items\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:authorization-details:contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"type\",\n \"contribute\",\n \"max_events\",\n \"allow_confirmation\"\n ],\n \"additionalProperties\": false,\n \"description\": \"The RFC 9396 authorization_details entry that requests a contribution grant (A6.2). Domains are unique, and so are the keys of each domain.\"\n }\n ]\n }\n }\n },\n \"required\": [\n \"iss\",\n \"aud\",\n \"sub\",\n \"client_id\",\n \"jti\",\n \"iat\",\n \"exp\",\n \"cnf\",\n \"autonym_grant_id\",\n \"autonym_purpose\",\n \"authorization_details\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"description\": \"RFC 9068 access-token claims of a record grant (A6.3). exp is after iat by at most 3,600 seconds, and never after the grant expires.\"\n}\n", "schemas/capability-claim.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"provider\"\n },\n \"capabilities\": {\n \"maxItems\": 4,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Core\",\n \"Write\",\n \"Portable\",\n \"Delegated\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"recipient\"\n },\n \"capabilities\": {\n \"maxItems\": 3,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Read\",\n \"Contribute\",\n \"Reciprocal\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n }\n ]\n}\n", "schemas/client-metadata-document.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"client_id\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\\\.)*(?!(?:[0-9]+|0x[0-9a-f]*)(?![a-z0-9-]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/(?!(?:\\\\.|%2[eE]){1,2}(?:[/?]|(?![\\\\s\\\\S])))[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)+(?:\\\\?[\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"redirect_uris\": {\n \"minItems\": 1,\n \"maxItems\": 16,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"(?:^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S]))|(?:^http:\\\\/\\\\/(?:127\\\\.0\\\\.0\\\\.1|\\\\[::1\\\\]|localhost)(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S]))\"\n }\n },\n \"token_endpoint_auth_method\": {\n \"type\": \"string\",\n \"enum\": [\n \"none\",\n \"private_key_jwt\"\n ]\n },\n \"grant_types\": {\n \"minItems\": 1,\n \"maxItems\": 5,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"authorization_code\",\n \"refresh_token\",\n \"client_credentials\",\n \"urn:ietf:params:oauth:grant-type:token-exchange\",\n \"urn:autonym:params:oauth:grant-type:grant-offer\"\n ]\n }\n },\n \"response_types\": {\n \"maxItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"const\": \"code\"\n }\n },\n \"client_name\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n },\n \"client_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"logo_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"tos_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"policy_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"maxLength\": 16384,\n \"pattern\": \"^[\\\\x21\\\\x23-\\\\x5b\\\\x5d-\\\\x7e]+(?: [\\\\x21\\\\x23-\\\\x5b\\\\x5d-\\\\x7e]+)*(?![\\\\s\\\\S])\"\n },\n \"contacts\": {\n \"minItems\": 1,\n \"maxItems\": 10,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 320,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n }\n },\n \"jwks\": {\n \"type\": \"object\",\n \"properties\": {\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"kty\": {\n \"type\": \"string\",\n \"const\": \"EC\"\n },\n \"crv\": {\n \"type\": \"string\",\n \"const\": \"P-256\"\n },\n \"x\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"y\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"use\": {\n \"type\": \"string\",\n \"const\": \"sig\"\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 253402300799\n }\n },\n \"required\": [\n \"kty\",\n \"crv\",\n \"x\",\n \"y\",\n \"kid\",\n \"alg\",\n \"use\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"keys\"\n ],\n \"additionalProperties\": false\n },\n \"software_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 255,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n },\n \"software_version\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 255,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n },\n \"dpop_bound_access_tokens\": {\n \"type\": \"boolean\",\n \"const\": true\n },\n \"autonym_purge_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"client_id\",\n \"token_endpoint_auth_method\"\n ],\n \"additionalProperties\": false,\n \"description\": \"A client ID metadata document a provider accepts (A6.1): the registration metadata and the client_id, which equals the URL the document was fetched from. Omitted grant_types and response_types are authorization_code and code (RFC 7591 section 2). Rules between members, which the schema itself does not state: private_key_jwt needs jwks; client_credentials only with private_key_jwt; urn:autonym:params:oauth:grant-type:grant-offer only with private_key_jwt; refresh_token only with authorization_code; authorization_code goes with the code response type and at least one redirect URI. Redirect URIs, grant types and key IDs are each unique, and each key's kid is its RFC 7638 thumbprint and its coordinates a point on P-256.\"\n}\n", "schemas/client-metadata.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"redirect_uris\": {\n \"minItems\": 1,\n \"maxItems\": 16,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"(?:^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S]))|(?:^http:\\\\/\\\\/(?:127\\\\.0\\\\.0\\\\.1|\\\\[::1\\\\]|localhost)(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S]))\"\n }\n },\n \"token_endpoint_auth_method\": {\n \"type\": \"string\",\n \"enum\": [\n \"none\",\n \"private_key_jwt\"\n ]\n },\n \"grant_types\": {\n \"minItems\": 1,\n \"maxItems\": 5,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"authorization_code\",\n \"refresh_token\",\n \"client_credentials\",\n \"urn:ietf:params:oauth:grant-type:token-exchange\",\n \"urn:autonym:params:oauth:grant-type:grant-offer\"\n ]\n }\n },\n \"response_types\": {\n \"maxItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"const\": \"code\"\n }\n },\n \"client_name\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n },\n \"client_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"logo_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"tos_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"policy_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"maxLength\": 16384,\n \"pattern\": \"^[\\\\x21\\\\x23-\\\\x5b\\\\x5d-\\\\x7e]+(?: [\\\\x21\\\\x23-\\\\x5b\\\\x5d-\\\\x7e]+)*(?![\\\\s\\\\S])\"\n },\n \"contacts\": {\n \"minItems\": 1,\n \"maxItems\": 10,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 320,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n }\n },\n \"jwks\": {\n \"type\": \"object\",\n \"properties\": {\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"kty\": {\n \"type\": \"string\",\n \"const\": \"EC\"\n },\n \"crv\": {\n \"type\": \"string\",\n \"const\": \"P-256\"\n },\n \"x\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"y\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"use\": {\n \"type\": \"string\",\n \"const\": \"sig\"\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 253402300799\n }\n },\n \"required\": [\n \"kty\",\n \"crv\",\n \"x\",\n \"y\",\n \"kid\",\n \"alg\",\n \"use\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"keys\"\n ],\n \"additionalProperties\": false\n },\n \"software_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 255,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n },\n \"software_version\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 255,\n \"pattern\": \"^[^\\\\u034f\\\\u17b4\\\\u17b5\\\\u180b-\\\\u180f\\\\ufe00-\\\\ufe0f\\\\x00-\\\\x1f\\\\x7f-\\\\x9f\\\\xad\\\\u061c\\\\u115f\\\\u1160\\\\u200b-\\\\u200f\\\\u2028-\\\\u202e\\\\u2060-\\\\u206f\\\\u3164\\\\ufeff\\\\uffa0\\\\ufff0-\\\\ufffb\\\\ud800-\\\\udfff]+(?![\\\\s\\\\S])\",\n \"description\": \"Display text: no control, bidirectional formatting, default-ignorable or interlinear annotation character, no line or paragraph separator, and no character outside the Basic Multilingual Plane (above U+FFFF), which a validator reading this pattern by code point rather than by UTF-16 code unit must refuse separately.\"\n },\n \"dpop_bound_access_tokens\": {\n \"type\": \"boolean\",\n \"const\": true\n },\n \"autonym_purge_uri\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:[/?][\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"token_endpoint_auth_method\"\n ],\n \"additionalProperties\": false,\n \"description\": \"Client metadata a provider accepts at its RFC 7591 registration endpoint (A6.1). Any other member is refused: jwks_uri, sector_identifier_uri, a software statement and client secrets among them. Omitted grant_types and response_types are authorization_code and code (RFC 7591 section 2). Rules between members, which the schema itself does not state: private_key_jwt needs jwks; client_credentials only with private_key_jwt; urn:autonym:params:oauth:grant-type:grant-offer only with private_key_jwt; refresh_token only with authorization_code; authorization_code goes with the code response type and at least one redirect URI. Redirect URIs, grant types and key IDs are each unique, and each key's kid is its RFC 7638 thumbprint and its coordinates a point on P-256.\"\n}\n", "schemas/confirmation-result.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"status\": {\n \"type\": \"string\",\n \"const\": \"review_required\"\n },\n \"review_url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"status\",\n \"review_url\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/confirmation.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"proposal_id\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/context-request.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"since\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"domains\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/contribution-detail.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:authorization-details:contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"type\",\n \"contribute\",\n \"max_events\",\n \"allow_confirmation\"\n ],\n \"additionalProperties\": false,\n \"description\": \"The RFC 9396 authorization_details entry that requests a contribution grant (A6.2). Domains are unique, and so are the keys of each domain.\"\n}\n", "schemas/contribution-event.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"create\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"correct\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"withdraw\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n }\n ],\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n }\n}\n", "schemas/disclosure.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"provider\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"audience\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant_revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"read_id\": {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"valid_until\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"ttl_seconds\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 300\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"entries\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^rent_[a-z2-7]{52}$\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"safety_critical\": {\n \"type\": \"boolean\"\n },\n \"provenance\": {\n \"type\": \"object\",\n \"properties\": {\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"declared\",\n \"observed\",\n \"derived\",\n \"attested\"\n ]\n },\n \"confirmed\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"kind\",\n \"confirmed\"\n ],\n \"additionalProperties\": false\n },\n \"stale\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"domain\",\n \"key\",\n \"level\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"safety_critical\",\n \"provenance\",\n \"stale\"\n ],\n \"additionalProperties\": false\n }\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"autonym_version\",\n \"provider\",\n \"audience\",\n \"client_id\",\n \"handle\",\n \"grant_id\",\n \"grant_revision\",\n \"read_id\",\n \"purpose\",\n \"issued_at\",\n \"valid_until\",\n \"ttl_seconds\",\n \"persist_until\",\n \"entries\",\n \"proof\"\n ],\n \"additionalProperties\": false,\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n }\n}\n", "schemas/discovery.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"issuer\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"authorization_server\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"jwks_uri\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"rest_endpoint\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"mcp_endpoint\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"capabilities\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"provider\"\n },\n \"capabilities\": {\n \"maxItems\": 4,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Core\",\n \"Write\",\n \"Portable\",\n \"Delegated\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"autonym_version\": {\n \"type\": \"string\",\n \"const\": \"1.0\"\n },\n \"document_version\": {\n \"type\": \"string\",\n \"const\": \"1.0-draft-1\"\n },\n \"categories\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"directions\": {\n \"minItems\": 1,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"read\",\n \"contribute\",\n \"export\",\n \"import\"\n ]\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"directions\"\n ],\n \"additionalProperties\": false\n }\n },\n \"limitations\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"assurance\": {\n \"type\": \"string\",\n \"const\": \"self-declared\"\n },\n \"evidence\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"check_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 64\n },\n \"url\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"tested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"check_id\",\n \"url\",\n \"tested_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"role\": {\n \"type\": \"string\",\n \"const\": \"recipient\"\n },\n \"capabilities\": {\n \"maxItems\": 3,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"Read\",\n \"Contribute\",\n \"Reciprocal\"\n ]\n }\n }\n },\n \"required\": [\n \"autonym_version\",\n \"document_version\",\n \"categories\",\n \"limitations\",\n \"assurance\",\n \"evidence\",\n \"role\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n }\n ]\n }\n },\n \"required\": [\n \"autonym_version\",\n \"issuer\",\n \"authorization_server\",\n \"jwks_uri\",\n \"rest_endpoint\",\n \"mcp_endpoint\",\n \"capabilities\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/domain-list.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"max_level\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"domains\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/encrypted-export-header.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"dir\"\n },\n \"enc\": {\n \"type\": \"string\",\n \"const\": \"A256GCM\"\n },\n \"typ\": {\n \"type\": \"string\",\n \"const\": \"autonym-export+jwe\"\n },\n \"cty\": {\n \"type\": \"string\",\n \"const\": \"application/autonym-export+json\"\n },\n \"crit\": {\n \"type\": \"array\",\n \"prefixItems\": [\n {\n \"type\": \"string\",\n \"const\": \"autonym_kdf\"\n }\n ],\n \"items\": false,\n \"minItems\": 1,\n \"maxItems\": 1\n },\n \"autonym_kdf\": {\n \"type\": \"object\",\n \"properties\": {\n \"name\": {\n \"type\": \"string\",\n \"const\": \"argon2id\"\n },\n \"v\": {\n \"type\": \"number\",\n \"const\": 19\n },\n \"m\": {\n \"type\": \"number\",\n \"const\": 65536\n },\n \"t\": {\n \"type\": \"number\",\n \"const\": 3\n },\n \"p\": {\n \"type\": \"number\",\n \"const\": 4\n },\n \"salt\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{22}$\"\n }\n },\n \"required\": [\n \"name\",\n \"v\",\n \"m\",\n \"t\",\n \"p\",\n \"salt\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"alg\",\n \"enc\",\n \"typ\",\n \"cty\",\n \"crit\",\n \"autonym_kdf\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/entry.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"provenance\": {\n \"type\": \"object\",\n \"properties\": {\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"declared\",\n \"observed\",\n \"derived\",\n \"attested\"\n ]\n },\n \"source_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"source_event_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 128\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"recorded_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"occurred_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confidence\": {\n \"anyOf\": [\n {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confirmed_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"derived_from\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"fields\": {\n \"minItems\": 1,\n \"maxItems\": 64,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"maxLength\": 256\n }\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\",\n \"fields\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"kind\",\n \"source_client_id\",\n \"source_event_id\",\n \"recorded_at\",\n \"occurred_at\",\n \"confidence\",\n \"confirmed_at\",\n \"evidence_refs\",\n \"derived_from\"\n ],\n \"additionalProperties\": false\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"overlay\": {\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"target_entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"enabled\": {\n \"type\": \"boolean\"\n },\n \"selected\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"target_entry_id\",\n \"enabled\",\n \"selected\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"rendering_overrides\": {\n \"type\": \"object\",\n \"properties\": {\n \"L1\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"additionalProperties\": false\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"superseded\",\n \"archived\"\n ]\n },\n \"created_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"updated_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"origin_host\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"provenance\",\n \"temporal\",\n \"overlay\",\n \"rendering_overrides\",\n \"status\",\n \"created_at\",\n \"updated_at\",\n \"origin_host\"\n ],\n \"additionalProperties\": false,\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n }\n}\n", "schemas/export.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"format\": {\n \"type\": \"string\",\n \"const\": \"autonym-export/1.0\"\n },\n \"exported_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"origin_host\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"history_mode\": {\n \"type\": \"string\",\n \"enum\": [\n \"current\",\n \"all_retained\"\n ]\n },\n \"partitions\": {\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"label\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"id\",\n \"label\"\n ],\n \"additionalProperties\": false\n }\n },\n \"entries\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"provenance\": {\n \"type\": \"object\",\n \"properties\": {\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"declared\",\n \"observed\",\n \"derived\",\n \"attested\"\n ]\n },\n \"source_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"source_event_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 128\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"recorded_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"occurred_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confidence\": {\n \"anyOf\": [\n {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"confirmed_at\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"derived_from\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"fields\": {\n \"minItems\": 1,\n \"maxItems\": 64,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"maxLength\": 256\n }\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\",\n \"fields\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"kind\",\n \"source_client_id\",\n \"source_event_id\",\n \"recorded_at\",\n \"occurred_at\",\n \"confidence\",\n \"confirmed_at\",\n \"evidence_refs\",\n \"derived_from\"\n ],\n \"additionalProperties\": false\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"overlay\": {\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"target_entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"enabled\": {\n \"type\": \"boolean\"\n },\n \"selected\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"target_entry_id\",\n \"enabled\",\n \"selected\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"rendering_overrides\": {\n \"type\": \"object\",\n \"properties\": {\n \"L1\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"additionalProperties\": false\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"superseded\",\n \"archived\"\n ]\n },\n \"created_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"updated_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"origin_host\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"provenance\",\n \"temporal\",\n \"overlay\",\n \"rendering_overrides\",\n \"status\",\n \"created_at\",\n \"updated_at\",\n \"origin_host\"\n ],\n \"additionalProperties\": false\n }\n },\n \"tombstones\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"deleted_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"deleted_at\"\n ],\n \"additionalProperties\": false\n }\n },\n \"grants_history\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"read\"\n },\n \"read\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n {\n \"type\": \"string\",\n \"const\": \"*\"\n }\n ]\n },\n \"keys\": {\n \"anyOf\": [\n {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"max_level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"max_reads\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"reads_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"allow_delegation\": {\n \"type\": \"boolean\"\n },\n \"onward_share\": {\n \"type\": \"boolean\",\n \"const\": false\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"read\",\n \"declared_only\",\n \"min_confidence\",\n \"max_reads\",\n \"reads_used\",\n \"persist_until\",\n \"allow_delegation\",\n \"onward_share\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"events_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"contribute\",\n \"max_events\",\n \"events_used\",\n \"allow_confirmation\",\n \"stream_id\"\n ],\n \"additionalProperties\": false\n }\n ]\n }\n },\n \"required\": [\n \"profile_id\",\n \"grant\"\n ],\n \"additionalProperties\": false\n }\n },\n \"receipts\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"receipt\": {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"provider\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"read_id\": {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"surface\": {\n \"type\": \"string\",\n \"enum\": [\n \"rest\",\n \"mcp_tool\",\n \"mcp_resource\",\n \"mcp_briefing\"\n ]\n },\n \"request\": {\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"since\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"domains\",\n \"max_level\",\n \"declared_only\",\n \"min_confidence\"\n ],\n \"additionalProperties\": false\n },\n \"returned\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"response_hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"event_id\",\n \"provider\",\n \"read_id\",\n \"grant_id\",\n \"client_id\",\n \"at\",\n \"purpose\",\n \"surface\",\n \"request\",\n \"returned\",\n \"response_hash\",\n \"prev_hash\",\n \"hash\",\n \"proof\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"profile_id\",\n \"receipt\"\n ],\n \"additionalProperties\": false\n }\n },\n \"log_events\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event\": {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"grant_created\",\n \"grant_revoked\",\n \"grant_expired\",\n \"rule_applied\",\n \"delegation_redeemed\",\n \"proposal_decided\",\n \"overlay_enabled\",\n \"overlay_disabled\",\n \"overlay_selected\",\n \"read_not_modified\",\n \"purge_issued\",\n \"purge_acknowledged\",\n \"operator_action\",\n \"migration_imported\"\n ]\n },\n \"actor_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"subject_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n },\n \"details\": {\n \"type\": \"object\",\n \"properties\": {\n \"decision\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"enum\": [\n \"approved\",\n \"rejected\",\n \"enabled\",\n \"disabled\",\n \"selected\",\n \"unchanged\",\n \"completed\",\n \"failed\"\n ]\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"ids\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"response_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"decision\",\n \"ids\",\n \"response_hash\"\n ],\n \"additionalProperties\": false\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"at\",\n \"kind\",\n \"actor_client_id\",\n \"subject_id\",\n \"details\",\n \"prev_hash\",\n \"hash\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"profile_id\",\n \"event\"\n ],\n \"additionalProperties\": false\n }\n },\n \"public_keys\": {\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"kty\": {\n \"type\": \"string\",\n \"const\": \"EC\"\n },\n \"crv\": {\n \"type\": \"string\",\n \"const\": \"P-256\"\n },\n \"x\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"y\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"use\": {\n \"type\": \"string\",\n \"const\": \"sig\"\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 253402300799\n }\n },\n \"required\": [\n \"kty\",\n \"crv\",\n \"x\",\n \"y\",\n \"kid\",\n \"alg\",\n \"use\"\n ],\n \"additionalProperties\": false\n }\n },\n \"policy_history\": {\n \"maxItems\": 10000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n },\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"rule\",\n \"delegation\"\n ]\n },\n \"executable\": {\n \"type\": \"boolean\",\n \"const\": false\n },\n \"description\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n },\n \"related_grant_ids\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n }\n },\n \"required\": [\n \"profile_id\",\n \"id\",\n \"kind\",\n \"executable\",\n \"description\",\n \"related_grant_ids\"\n ],\n \"additionalProperties\": false\n }\n },\n \"proposals\": {\n \"maxItems\": 100000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"source_client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"event\": {\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"create\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"value_type\": {\n \"type\": \"string\",\n \"enum\": [\n \"text\",\n \"number\",\n \"boolean\",\n \"enum\",\n \"list\",\n \"coded\",\n \"coded_list\",\n \"date\",\n \"date_range\",\n \"age_band\",\n \"person_ref\",\n \"structured\",\n \"credential\"\n ]\n },\n \"value\": {\n \"$ref\": \"#/$defs/__schema0\"\n },\n \"context_kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"fact\",\n \"preference\",\n \"state\"\n ]\n },\n \"temporal\": {\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n },\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"user_supplied\",\n \"activity\",\n \"observation\",\n \"inference\"\n ]\n },\n \"evidence_refs\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"correct\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"domain\",\n \"key\",\n \"value_type\",\n \"value\",\n \"context_kind\",\n \"temporal\",\n \"category\",\n \"evidence_refs\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n },\n \"operation\": {\n \"type\": \"string\",\n \"const\": \"withdraw\"\n },\n \"predecessor_event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"occurred_at\",\n \"stream_id\",\n \"operation\",\n \"predecessor_event_id\"\n ],\n \"additionalProperties\": false\n }\n ]\n },\n \"acknowledgement\": {\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"ingested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"pending\",\n \"accepted\",\n \"rejected\",\n \"withdrawn\"\n ]\n }\n },\n \"required\": [\n \"proposal_id\",\n \"event_id\",\n \"ingested_at\",\n \"status\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"profile_id\",\n \"source_client_id\",\n \"event\",\n \"acknowledgement\"\n ],\n \"additionalProperties\": false\n }\n },\n \"unsupported\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"reason\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"reason\"\n ],\n \"additionalProperties\": false\n }\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"format\",\n \"exported_at\",\n \"origin_host\",\n \"history_mode\",\n \"partitions\",\n \"entries\",\n \"tombstones\",\n \"grants_history\",\n \"receipts\",\n \"log_events\",\n \"public_keys\",\n \"policy_history\",\n \"proposals\",\n \"unsupported\",\n \"proof\"\n ],\n \"additionalProperties\": false,\n \"$defs\": {\n \"__schema0\": {\n \"anyOf\": [\n {\n \"type\": \"string\"\n },\n {\n \"type\": \"number\"\n },\n {\n \"type\": \"boolean\"\n },\n {\n \"type\": \"null\"\n },\n {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n },\n {\n \"type\": \"object\",\n \"propertyNames\": {\n \"type\": \"string\"\n },\n \"additionalProperties\": {\n \"$ref\": \"#/$defs/__schema0\"\n }\n }\n ]\n }\n }\n}\n", "schemas/grant-offer-redemption.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"grant_type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:params:oauth:grant-type:grant-offer\"\n },\n \"grant_code\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{43,512}$\"\n },\n \"resource\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"grant_type\",\n \"grant_code\",\n \"resource\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/grant-offer-request.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"grant_type\": {\n \"type\": \"string\",\n \"const\": \"urn:ietf:params:oauth:grant-type:token-exchange\"\n },\n \"subject_token\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 16384\n },\n \"subject_token_type\": {\n \"type\": \"string\",\n \"const\": \"urn:ietf:params:oauth:token-type:access_token\"\n },\n \"requested_token_type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:params:oauth:token-type:grant-offer\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 8192\n },\n \"resource\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"autonym_recipient\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"autonym_purpose_text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n },\n \"autonym_expires_in\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"autonym_max_reads\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n }\n },\n \"required\": [\n \"grant_type\",\n \"subject_token\",\n \"subject_token_type\",\n \"requested_token_type\",\n \"scope\",\n \"resource\",\n \"autonym_recipient\",\n \"autonym_purpose_text\",\n \"autonym_expires_in\",\n \"autonym_max_reads\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/grant-offer.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"access_token\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{43,512}$\"\n },\n \"issued_token_type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:params:oauth:token-type:grant-offer\"\n },\n \"token_type\": {\n \"type\": \"string\",\n \"const\": \"N_A\"\n },\n \"expires_in\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 300\n }\n },\n \"required\": [\n \"access_token\",\n \"issued_token_type\",\n \"token_type\",\n \"expires_in\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/grant.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"oneOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"read\"\n },\n \"read\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n {\n \"type\": \"string\",\n \"const\": \"*\"\n }\n ]\n },\n \"keys\": {\n \"anyOf\": [\n {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"domain\",\n \"keys\",\n \"max_level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"max_reads\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"reads_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"persist_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"allow_delegation\": {\n \"type\": \"boolean\"\n },\n \"onward_share\": {\n \"type\": \"boolean\",\n \"const\": false\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"read\",\n \"declared_only\",\n \"min_confidence\",\n \"max_reads\",\n \"reads_used\",\n \"persist_until\",\n \"allow_delegation\",\n \"onward_share\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"revision\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"handle\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"purpose\": {\n \"type\": \"object\",\n \"properties\": {\n \"category\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"text\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 4096\n }\n },\n \"required\": [\n \"category\",\n \"text\"\n ],\n \"additionalProperties\": false\n },\n \"issued_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"expires_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"active\",\n \"revoked\",\n \"expired\"\n ]\n },\n \"kind\": {\n \"type\": \"string\",\n \"const\": \"contribute\"\n },\n \"contribute\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n }\n },\n \"required\": [\n \"domain\",\n \"keys\"\n ],\n \"additionalProperties\": false\n }\n },\n \"max_events\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 100000\n },\n \"events_used\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"allow_confirmation\": {\n \"type\": \"boolean\"\n },\n \"stream_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$\"\n }\n },\n \"required\": [\n \"id\",\n \"revision\",\n \"handle\",\n \"client_id\",\n \"purpose\",\n \"issued_at\",\n \"expires_at\",\n \"status\",\n \"kind\",\n \"contribute\",\n \"max_events\",\n \"events_used\",\n \"allow_confirmation\",\n \"stream_id\"\n ],\n \"additionalProperties\": false\n }\n ]\n}\n", "schemas/health.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"status\": {\n \"type\": \"string\",\n \"const\": \"ok\"\n }\n },\n \"required\": [\n \"status\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/identifier.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^acc_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^rec_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^cl_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^pi_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^rule_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^dp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^imp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"pattern\": \"^exp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n ]\n}\n", "schemas/key-set.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"kty\": {\n \"type\": \"string\",\n \"const\": \"EC\"\n },\n \"crv\": {\n \"type\": \"string\",\n \"const\": \"P-256\"\n },\n \"x\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"y\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"use\": {\n \"type\": \"string\",\n \"const\": \"sig\"\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 1,\n \"maximum\": 253402300799\n }\n },\n \"required\": [\n \"kty\",\n \"crv\",\n \"x\",\n \"y\",\n \"kid\",\n \"alg\",\n \"use\"\n ],\n \"additionalProperties\": false\n }\n }\n },\n \"required\": [\n \"keys\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/lifecycle-request.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"grant_type\": {\n \"type\": \"string\",\n \"const\": \"client_credentials\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"const\": \"autonym:lifecycle:purge\"\n },\n \"resource\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n }\n },\n \"required\": [\n \"grant_type\",\n \"scope\",\n \"resource\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/lifecycle-token-claims.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"autonym_token_kind\": {\n \"type\": \"string\",\n \"const\": \"lifecycle\"\n },\n \"iss\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)*(?![\\\\s\\\\S])\"\n },\n \"aud\": {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)*(?![\\\\s\\\\S])\"\n },\n \"sub\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^cl_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\\\.)*(?!(?:[0-9]+|0x[0-9a-f]*)(?![a-z0-9-]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/(?!(?:\\\\.|%2[eE]){1,2}(?:[/?]|(?![\\\\s\\\\S])))[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)+(?:\\\\?[\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n ]\n },\n \"client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^cl_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"maxLength\": 2048,\n \"pattern\": \"^https:\\\\/\\\\/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\\\.)*(?!(?:[0-9]+|0x[0-9a-f]*)(?![a-z0-9-]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?::(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{0,3}))?(?:\\\\/(?!(?:\\\\.|%2[eE]){1,2}(?:[/?]|(?![\\\\s\\\\S])))[\\\\x21\\\\x22\\\\x24-\\\\x2e\\\\x30-\\\\x3e\\\\x40-\\\\x5b\\\\x5d-\\\\x7e]*)+(?:\\\\?[\\\\x21\\\\x22\\\\x24-\\\\x5b\\\\x5d-\\\\x7e]*)?(?![\\\\s\\\\S])\"\n }\n ]\n },\n \"scope\": {\n \"type\": \"string\",\n \"const\": \"autonym:lifecycle:purge\"\n },\n \"jti\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{16,128}(?![\\\\s\\\\S])\"\n },\n \"iat\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 253402300799\n },\n \"exp\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 253402300799\n },\n \"cnf\": {\n \"type\": \"object\",\n \"properties\": {\n \"jkt\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n }\n },\n \"required\": [\n \"jkt\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"autonym_token_kind\",\n \"iss\",\n \"aud\",\n \"sub\",\n \"client_id\",\n \"scope\",\n \"jti\",\n \"iat\",\n \"exp\",\n \"cnf\"\n ],\n \"additionalProperties\": false,\n \"description\": \"Claims of an A6.6 client lifecycle token. exp is after iat by at most 300 seconds, sub equals client_id, and the audience is the provider's REST resource: the issuer's origin followed by /v1.\"\n}\n", "schemas/log-event.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"kind\": {\n \"type\": \"string\",\n \"enum\": [\n \"grant_created\",\n \"grant_revoked\",\n \"grant_expired\",\n \"rule_applied\",\n \"delegation_redeemed\",\n \"proposal_decided\",\n \"overlay_enabled\",\n \"overlay_disabled\",\n \"overlay_selected\",\n \"read_not_modified\",\n \"purge_issued\",\n \"purge_acknowledged\",\n \"operator_action\",\n \"migration_imported\"\n ]\n },\n \"actor_client_id\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"subject_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n },\n \"details\": {\n \"type\": \"object\",\n \"properties\": {\n \"decision\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"enum\": [\n \"approved\",\n \"rejected\",\n \"enabled\",\n \"disabled\",\n \"selected\",\n \"unchanged\",\n \"completed\",\n \"failed\"\n ]\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"ids\": {\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 256\n }\n },\n \"response_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"decision\",\n \"ids\",\n \"response_hash\"\n ],\n \"additionalProperties\": false\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n }\n },\n \"required\": [\n \"event_id\",\n \"at\",\n \"kind\",\n \"actor_client_id\",\n \"subject_id\",\n \"details\",\n \"prev_hash\",\n \"hash\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/problem.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:invalid_scope\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Invalid scope\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"invalid_scope\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:purpose_missing\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Purpose is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"purpose_missing\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:invalid_request\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Invalid request\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"invalid_request\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:not_found\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Not found\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 404\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"not_found\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:idempotency_conflict\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Idempotency key already used\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 409\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"idempotency_conflict\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:payload_too_large\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Request too large\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 413\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"payload_too_large\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:rate_limited\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Try again later\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 429\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"rate_limited\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:internal_error\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Request could not be completed\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 500\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"internal_error\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:not_ready\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Service is not ready\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 503\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"not_ready\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:domain_not_granted\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Domain is not granted\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"domain_not_granted\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:grant_revoked\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Grant is no longer active\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"grant_revoked\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:grant_expired\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Grant has expired\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"grant_expired\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:grant_exhausted\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Grant limit reached\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"grant_exhausted\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:dpop_required\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sender proof is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 401\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"dpop_required\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:dpop_invalid\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sender proof is invalid\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 401\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"dpop_invalid\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:safety_write_forbidden\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"First-party confirmation is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"safety_write_forbidden\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:inference_forbidden\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Inference is not permitted\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"inference_forbidden\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:proposal_not_found\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Proposal was not found\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 404\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"proposal_not_found\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:proposal_decided\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Proposal has already been decided\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 409\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"proposal_decided\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:value_rejected\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Value does not match the vocabulary\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 422\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"value_rejected\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:capability_not_granted\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Capability is not granted\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"capability_not_granted\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:advertising_ineligible\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Advertising permission is unavailable\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"advertising_ineligible\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:client_suspended\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Client is suspended\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"client_suspended\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:entry_limit_reached\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Entry limit reached\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 409\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"entry_limit_reached\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:session_required\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sign-in is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 401\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"session_required\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:csrf_invalid\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Request could not be verified\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"csrf_invalid\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:reauthentication_required\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Recent sign-in is required\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"reauthentication_required\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:signup_unavailable\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sign-up is not available\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 403\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"signup_unavailable\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"urn:autonym:error:sign_in_failed\"\n },\n \"title\": {\n \"type\": \"string\",\n \"const\": \"Sign-in failed\"\n },\n \"status\": {\n \"type\": \"number\",\n \"const\": 400\n },\n \"code\": {\n \"type\": \"string\",\n \"const\": \"sign_in_failed\"\n },\n \"request_id\": {\n \"type\": \"string\",\n \"format\": \"uuid\",\n \"pattern\": \"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$\"\n }\n },\n \"required\": [\n \"type\",\n \"title\",\n \"status\",\n \"code\",\n \"request_id\"\n ],\n \"additionalProperties\": false\n }\n ]\n}\n", "schemas/proposal-status.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{1,128}$\"\n },\n \"ingested_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"status\": {\n \"type\": \"string\",\n \"enum\": [\n \"pending\",\n \"accepted\",\n \"rejected\",\n \"withdrawn\"\n ]\n }\n },\n \"required\": [\n \"proposal_id\",\n \"event_id\",\n \"ingested_at\",\n \"status\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/purge-ack.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"instruction_id\": {\n \"type\": \"string\",\n \"pattern\": \"^pi_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"attestation\": {\n \"type\": \"string\",\n \"enum\": [\n \"purged\",\n \"not_held\",\n \"legal_hold\"\n ]\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"note\": {\n \"type\": \"string\",\n \"maxLength\": 2048\n },\n \"proof\": {\n \"anyOf\": [\n {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"instruction_id\",\n \"attestation\",\n \"at\",\n \"note\",\n \"proof\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/purge-instruction.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"iss\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"sub\": {\n \"type\": \"string\",\n \"maxLength\": 294,\n \"pattern\": \"^autonym:[a-z2-7]{32}@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$\"\n },\n \"aud\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"jti\": {\n \"type\": \"string\",\n \"pattern\": \"^pi_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"iat\": {\n \"type\": \"integer\",\n \"minimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"exp\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"autonym_grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"reason\": {\n \"type\": \"string\",\n \"const\": \"grant_ended\"\n },\n \"scope\": {\n \"type\": \"string\",\n \"const\": \"all\"\n },\n \"deadline\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"iss\",\n \"sub\",\n \"aud\",\n \"jti\",\n \"iat\",\n \"exp\",\n \"autonym_grant_id\",\n \"reason\",\n \"scope\",\n \"deadline\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/purge-list.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"instructions\": {\n \"maxItems\": 100,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.[A-Za-z0-9_-]+\\\\.[A-Za-z0-9_-]+$\"\n }\n }\n },\n \"required\": [\n \"instructions\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/readiness.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"status\": {\n \"type\": \"string\",\n \"const\": \"ready\"\n }\n },\n \"required\": [\n \"status\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/receipt.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"event_id\": {\n \"type\": \"string\",\n \"pattern\": \"^evt_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"provider\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"read_id\": {\n \"type\": \"string\",\n \"pattern\": \"^rd_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"grant_id\": {\n \"type\": \"string\",\n \"pattern\": \"^gr_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"client_id\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 2048\n },\n \"at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"purpose\": {\n \"type\": \"string\",\n \"enum\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ]\n },\n \"surface\": {\n \"type\": \"string\",\n \"enum\": [\n \"rest\",\n \"mcp_tool\",\n \"mcp_resource\",\n \"mcp_briefing\"\n ]\n },\n \"request\": {\n \"type\": \"object\",\n \"properties\": {\n \"domains\": {\n \"minItems\": 1,\n \"maxItems\": 32,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"max_level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n },\n \"keys\": {\n \"minItems\": 1,\n \"maxItems\": 128,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n }\n },\n \"declared_only\": {\n \"type\": \"boolean\"\n },\n \"min_confidence\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"maximum\": 1\n },\n \"since\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"domains\",\n \"max_level\",\n \"declared_only\",\n \"min_confidence\"\n ],\n \"additionalProperties\": false\n },\n \"returned\": {\n \"maxItems\": 1000,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"entry_id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"level\": {\n \"type\": \"string\",\n \"enum\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ]\n }\n },\n \"required\": [\n \"entry_id\",\n \"version\",\n \"level\"\n ],\n \"additionalProperties\": false\n }\n },\n \"response_hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"prev_hash\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"hash\": {\n \"type\": \"string\",\n \"pattern\": \"^sha256:[a-f0-9]{64}$\"\n },\n \"proof\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\",\n \"const\": \"jws\"\n },\n \"alg\": {\n \"type\": \"string\",\n \"const\": \"ES256\"\n },\n \"kid\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$\"\n },\n \"jws\": {\n \"type\": \"string\",\n \"pattern\": \"^[A-Za-z0-9_-]+\\\\.\\\\.[A-Za-z0-9_-]+$\"\n }\n },\n \"required\": [\n \"type\",\n \"alg\",\n \"kid\",\n \"jws\"\n ],\n \"additionalProperties\": false\n }\n },\n \"required\": [\n \"event_id\",\n \"provider\",\n \"read_id\",\n \"grant_id\",\n \"client_id\",\n \"at\",\n \"purpose\",\n \"surface\",\n \"request\",\n \"returned\",\n \"response_hash\",\n \"prev_hash\",\n \"hash\",\n \"proof\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/scope-token.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"pattern\": \"^autonym:read:(?:[A-Za-z0-9_.-]{1,128}:L[0-3]|\\\\*:L0)(?::declared)?(?![\\\\s\\\\S])\"\n },\n {\n \"type\": \"string\",\n \"enum\": [\n \"autonym:propose\",\n \"autonym:confirm\",\n \"autonym:confirm:safety\",\n \"autonym:write:declared\",\n \"autonym:persist\",\n \"autonym:delegate\",\n \"autonym:log:read\",\n \"autonym:manage\"\n ]\n },\n {\n \"type\": \"string\",\n \"enum\": [\n \"autonym:purpose:booking\",\n \"autonym:purpose:recommendation\",\n \"autonym:purpose:safety\",\n \"autonym:purpose:fulfilment\",\n \"autonym:purpose:personalisation\",\n \"autonym:purpose:research\",\n \"autonym:purpose:care\",\n \"autonym:purpose:medical\",\n \"autonym:purpose:employment\",\n \"autonym:purpose:advertising\"\n ]\n }\n ],\n \"description\": \"One scope token. A grant scope set also requires parseScopes semantic validation.\"\n}\n", "schemas/temporal.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"valid_from\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n },\n \"valid_until\": {\n \"anyOf\": [\n {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n {\n \"type\": \"null\"\n }\n ]\n }\n },\n \"required\": [\n \"valid_from\",\n \"valid_until\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/tombstone.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"pattern\": \"^ent_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"version\": {\n \"type\": \"integer\",\n \"exclusiveMinimum\": 0,\n \"maximum\": 9007199254740991\n },\n \"profile_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prf_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n },\n \"domain\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"key\": {\n \"type\": \"string\",\n \"pattern\": \"^[a-z][a-z0-9_.-]{0,63}$\"\n },\n \"deleted_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n }\n },\n \"required\": [\n \"id\",\n \"version\",\n \"profile_id\",\n \"domain\",\n \"key\",\n \"deleted_at\"\n ],\n \"additionalProperties\": false\n}\n", "schemas/withdrawal.json": "{\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"proposal_id\": {\n \"type\": \"string\",\n \"pattern\": \"^prp_[0-7][0-9A-HJKMNP-TV-Z]{25}(?![\\\\s\\\\S])\"\n }\n },\n \"required\": [\n \"proposal_id\"\n ],\n \"additionalProperties\": false\n}\n", "scopes.json": "{\n \"scope\": \"grammar-and-meanings\",\n \"purposes\": [\n \"booking\",\n \"recommendation\",\n \"safety\",\n \"fulfilment\",\n \"personalisation\",\n \"research\",\n \"care\",\n \"medical\",\n \"employment\",\n \"advertising\"\n ],\n \"capabilities\": [\n \"autonym:propose\",\n \"autonym:confirm\",\n \"autonym:confirm:safety\",\n \"autonym:write:declared\",\n \"autonym:persist\",\n \"autonym:delegate\",\n \"autonym:log:read\",\n \"autonym:manage\"\n ],\n \"levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"wildcard_max_level\": \"L0\",\n \"limits\": {\n \"bytes\": 16384,\n \"tokens\": 128,\n \"domain\": 128\n },\n \"semantic_contract\": \"scopes.md\",\n \"recipient_endpoints_implemented\": false,\n \"purpose_codes\": [\n \"urn:autonym:purpose:booking\",\n \"urn:autonym:purpose:recommendation\",\n \"urn:autonym:purpose:safety\",\n \"urn:autonym:purpose:fulfilment\",\n \"urn:autonym:purpose:personalisation\",\n \"urn:autonym:purpose:research\",\n \"urn:autonym:purpose:care\",\n \"urn:autonym:purpose:medical\",\n \"urn:autonym:purpose:employment\",\n \"urn:autonym:purpose:advertising\"\n ],\n \"capability_meanings\": {\n \"autonym:propose\": {\n \"holder\": \"third_party\",\n \"grant_kind\": \"contribute\",\n \"sets\": null\n },\n \"autonym:confirm\": {\n \"holder\": \"third_party\",\n \"grant_kind\": \"contribute\",\n \"sets\": \"allow_confirmation\"\n },\n \"autonym:persist\": {\n \"holder\": \"third_party\",\n \"grant_kind\": \"read\",\n \"sets\": \"persist_until\"\n },\n \"autonym:delegate\": {\n \"holder\": \"third_party\",\n \"grant_kind\": \"read\",\n \"sets\": \"allow_delegation\"\n },\n \"autonym:confirm:safety\": {\n \"holder\": \"first_party\",\n \"grant_kind\": null,\n \"sets\": null\n },\n \"autonym:write:declared\": {\n \"holder\": \"first_party\",\n \"grant_kind\": null,\n \"sets\": null\n },\n \"autonym:log:read\": {\n \"holder\": \"first_party\",\n \"grant_kind\": null,\n \"sets\": null\n },\n \"autonym:manage\": {\n \"holder\": \"first_party\",\n \"grant_kind\": null,\n \"sets\": null\n }\n }\n}\n", "section-map.json": "{\n \"from_document_version\": \"0.2-draft\",\n \"to_document_version\": \"1.0-draft-1\",\n \"note\": \"Every heading of the previous edition and where its text now lives. Paths are relative to spec/. A section split between core and a binding has one row per destination. The operational and application-shell pages described the reference implementation, not the standard, and are no longer part of the specification; their rows point at the implementation status page.\",\n \"moves\": [\n {\n \"section\": \"terminology\",\n \"from\": \"00-terminology.md#terminology\",\n \"to\": \"core/terminology.md#terminology\"\n },\n {\n \"section\": \"A1\",\n \"from\": \"01-scope-and-layering.md#a1-scope-status-and-layering\",\n \"to\": \"core/a01-scope-and-layering.md#a1-scope-status-and-layering\"\n },\n {\n \"section\": \"A1\",\n \"from\": \"01-scope-and-layering.md#a11-normative-material\",\n \"to\": \"core/a01-scope-and-layering.md#a11-normative-material\"\n },\n {\n \"section\": \"A1\",\n \"from\": \"01-scope-and-layering.md#a12-layers-and-release-boundary\",\n \"to\": \"core/a01-scope-and-layering.md#a12-layers-and-release-boundary\"\n },\n {\n \"section\": \"A1\",\n \"from\": \"01-scope-and-layering.md#a13-existing-standards\",\n \"to\": \"core/a01-scope-and-layering.md#a13-existing-standards\"\n },\n {\n \"section\": \"A2\",\n \"from\": \"02-actors-and-trust.md#a2-actors-and-trust-model\",\n \"to\": \"core/a02-actors-and-trust.md#a2-actors-and-trust-model\"\n },\n {\n \"section\": \"A3\",\n \"from\": \"03-identifiers-and-resolution.md#a3-identifiers-handles-and-resolution\",\n \"to\": \"core/a03-identifiers-and-resolution.md#a3-identifiers-handles-and-resolution\"\n },\n {\n \"section\": \"A3\",\n \"from\": \"03-identifiers-and-resolution.md#a31-owner-and-recipient-identifiers\",\n \"to\": \"core/a03-identifiers-and-resolution.md#a31-owner-and-recipient-identifiers\"\n },\n {\n \"section\": \"A3\",\n \"from\": \"03-identifiers-and-resolution.md#a32-pairwise-handles-and-entry-aliases\",\n \"to\": \"core/a03-identifiers-and-resolution.md#a32-pairwise-handles-and-entry-aliases\"\n },\n {\n \"section\": \"A3\",\n \"from\": \"03-identifiers-and-resolution.md#a33-discovery\",\n \"to\": \"core/a03-identifiers-and-resolution.md#a33-discovery\"\n },\n {\n \"section\": \"A3\",\n \"from\": \"03-identifiers-and-resolution.md#a34-migration\",\n \"to\": \"core/a03-identifiers-and-resolution.md#a34-migration\"\n },\n {\n \"section\": \"A4\",\n \"from\": \"04-data-model.md#a4-data-model\",\n \"to\": \"core/a04-data-model.md#a4-data-model\"\n },\n {\n \"section\": \"A4\",\n \"from\": \"04-data-model.md#a41-entries-and-vocabulary\",\n \"to\": \"core/a04-data-model.md#a41-entries-and-vocabulary\"\n },\n {\n \"section\": \"A4\",\n \"from\": \"04-data-model.md#a42-provenance\",\n \"to\": \"core/a04-data-model.md#a42-provenance\"\n },\n {\n \"section\": \"A4\",\n \"from\": \"04-data-model.md#a43-temporal-intervals\",\n \"to\": \"core/a04-data-model.md#a43-temporal-intervals\"\n },\n {\n \"section\": \"A4\",\n \"from\": \"04-data-model.md#a44-baselines-and-temporary-overlays\",\n \"to\": \"core/a04-data-model.md#a44-baselines-and-temporary-overlays\"\n },\n {\n \"section\": \"A4\",\n \"from\": \"04-data-model.md#a45-derivations\",\n \"to\": \"core/a04-data-model.md#a45-derivations\"\n },\n {\n \"section\": \"A5\",\n \"from\": \"05-disclosure.md#a5-disclosure-and-the-compiler\",\n \"to\": \"core/a05-disclosure.md#a5-disclosure-and-the-compiler\"\n },\n {\n \"section\": \"A5\",\n \"from\": \"05-disclosure.md#a51-levels\",\n \"to\": \"core/a05-disclosure.md#a51-levels\"\n },\n {\n \"section\": \"A5\",\n \"from\": \"05-disclosure.md#a52-one-compiler-and-transaction\",\n \"to\": \"core/a05-disclosure.md#a52-one-compiler-and-transaction\"\n },\n {\n \"section\": \"A5\",\n \"from\": \"05-disclosure.md#a53-signed-disclosure\",\n \"to\": \"core/a05-disclosure.md#a53-signed-disclosure\"\n },\n {\n \"section\": \"A5\",\n \"from\": \"05-disclosure.md#a54-signature-representation\",\n \"to\": \"core/a05-disclosure.md#a54-signature-representation\"\n },\n {\n \"section\": \"A6\",\n \"from\": \"06-authorisation.md#a6-authorisation\",\n \"to\": \"core/a06-authorisation.md#a6-authorisation\"\n },\n {\n \"section\": \"A6\",\n \"from\": \"06-authorisation.md#a61-discovery-and-registration\",\n \"to\": \"core/a06-authorisation.md#a61-discovery-and-registration\"\n },\n {\n \"section\": \"A6\",\n \"from\": \"06-authorisation.md#a62-scopes-and-separate-grants\",\n \"to\": \"core/a06-authorisation.md#a62-scopes-and-separate-grants\"\n },\n {\n \"section\": \"A6\",\n \"from\": \"06-authorisation.md#a63-consent-and-tokens\",\n \"to\": \"core/a06-authorisation.md#a63-consent-and-tokens\"\n },\n {\n \"section\": \"A6\",\n \"from\": \"06-authorisation.md#a64-standing-rules-and-delegation\",\n \"to\": \"core/a06-authorisation.md#a64-standing-rules-and-delegation\"\n },\n {\n \"section\": \"A6\",\n \"from\": \"06-authorisation.md#a65-revocation\",\n \"to\": \"core/a06-authorisation.md#a65-revocation\"\n },\n {\n \"section\": \"A6\",\n \"from\": \"06-authorisation.md#a66-client-lifecycle-credentials\",\n \"to\": \"core/a06-authorisation.md#a66-client-lifecycle-credentials\"\n },\n {\n \"section\": \"A7\",\n \"from\": \"07-mcp.md#a7-mcp-surface\",\n \"to\": \"bindings/B3-mcp.md#b31-transport\"\n },\n {\n \"section\": \"A7\",\n \"from\": \"07-mcp.md#a7-mcp-surface\",\n \"to\": \"core/a07-agent-surface.md#a7-agent-surface\"\n },\n {\n \"section\": \"A7.1\",\n \"from\": \"07-mcp.md#a71-tools\",\n \"to\": \"core/a07-agent-surface.md#a71-operations\"\n },\n {\n \"section\": \"A7.1\",\n \"from\": \"07-mcp.md#a71-tools\",\n \"to\": \"bindings/B3-mcp.md#b32-tools\"\n },\n {\n \"section\": \"A7.2\",\n \"from\": \"07-mcp.md#a72-confirmation\",\n \"to\": \"core/a07-agent-surface.md#a72-confirmation\"\n },\n {\n \"section\": \"A7.3\",\n \"from\": \"07-mcp.md#a73-resources-and-briefing\",\n \"to\": \"core/a07-agent-surface.md#a73-briefing\"\n },\n {\n \"section\": \"A7.3\",\n \"from\": \"07-mcp.md#a73-resources-and-briefing\",\n \"to\": \"bindings/B3-mcp.md#b33-resources-and-prompts\"\n },\n {\n \"section\": \"A8\",\n \"from\": \"08-rest.md#a8-rest-api\",\n \"to\": \"bindings/B4-rest.md#b41-contract-and-routes\"\n },\n {\n \"section\": \"A8\",\n \"from\": \"08-rest.md#a8-rest-api\",\n \"to\": \"core/a08-recipient-api.md#a8-recipient-api\"\n },\n {\n \"section\": \"A8.1\",\n \"from\": \"08-rest.md#a81-conditional-reads\",\n \"to\": \"bindings/B4-rest.md#b42-conditional-reads\"\n },\n {\n \"section\": \"A8.2\",\n \"from\": \"08-rest.md#a82-errors-and-limits\",\n \"to\": \"bindings/B4-rest.md#b43-errors-and-limits\"\n },\n {\n \"section\": \"A9\",\n \"from\": \"09-receipts-and-log.md#a9-read-receipts-and-the-log\",\n \"to\": \"core/a09-receipts-and-log.md#a9-read-receipts-and-the-log\"\n },\n {\n \"section\": \"A10\",\n \"from\": \"10-revocation-and-purge.md#a10-revocation-and-purge\",\n \"to\": \"core/a10-revocation-and-purge.md#a10-revocation-and-purge\"\n },\n {\n \"section\": \"A11\",\n \"from\": \"11-portability.md#a11-portability\",\n \"to\": \"core/a11-portability.md#a11-portability\"\n },\n {\n \"section\": \"A11\",\n \"from\": \"11-portability.md#a111-export-and-import\",\n \"to\": \"core/a11-portability.md#a111-export-and-import\"\n },\n {\n \"section\": \"A11\",\n \"from\": \"11-portability.md#a112-optional-encrypted-export\",\n \"to\": \"core/a11-portability.md#a112-optional-encrypted-export\"\n },\n {\n \"section\": \"A11\",\n \"from\": \"11-portability.md#a113-honest-portability\",\n \"to\": \"core/a11-portability.md#a113-honest-portability\"\n },\n {\n \"section\": \"A12\",\n \"from\": \"12-recipient-registry.md#a12-recipient-registry-and-trust\",\n \"to\": \"core/reserved/a12-recipient-registry.md#a12-recipient-registry-and-trust\"\n },\n {\n \"section\": \"A12\",\n \"from\": \"12-recipient-registry.md#a12-recipient-registry-and-trust\",\n \"to\": \"core/a02-actors-and-trust.md#a21-recipient-registries-and-trust-evidence\"\n },\n {\n \"section\": \"A12\",\n \"from\": \"12-recipient-registry.md#a12-recipient-registry-and-trust\",\n \"to\": \"core/a06-authorisation.md#a68-client-standing-and-safety-purposes\"\n },\n {\n \"section\": \"A12\",\n \"from\": \"12-recipient-registry.md#a12-recipient-registry-and-trust\",\n \"to\": \"core/a17-conformance-and-change.md#a176-self-declaration-and-reserved-capabilities\"\n },\n {\n \"section\": \"A13\",\n \"from\": \"13-emergency-card.md#a13-emergency-information\",\n \"to\": \"core/reserved/a13-emergency-information.md#a13-emergency-information\"\n },\n {\n \"section\": \"A13\",\n \"from\": \"13-emergency-card.md#a13-emergency-information\",\n \"to\": \"core/a06-authorisation.md#a68-client-standing-and-safety-purposes\"\n },\n {\n \"section\": \"A13\",\n \"from\": \"13-emergency-card.md#a13-emergency-information\",\n \"to\": \"core/a17-conformance-and-change.md#a176-self-declaration-and-reserved-capabilities\"\n },\n {\n \"section\": \"A14\",\n \"from\": \"14-connectors.md#a14-contributions-and-connectors\",\n \"to\": \"core/a14-contributions.md#a14-contributions\"\n },\n {\n \"section\": \"A14\",\n \"from\": \"14-connectors.md#a14-contributions-and-connectors\",\n \"to\": \"core/reserved/a14-connectors.md#continuous-connectors-reserved-from-a14\"\n },\n {\n \"section\": \"A14\",\n \"from\": \"14-connectors.md#a141-authority-and-transport\",\n \"to\": \"core/a14-contributions.md#a141-authority-and-transport\"\n },\n {\n \"section\": \"A14\",\n \"from\": \"14-connectors.md#a142-events-and-deduplication\",\n \"to\": \"core/a14-contributions.md#a142-events-and-deduplication\"\n },\n {\n \"section\": \"A14\",\n \"from\": \"14-connectors.md#a143-corrections-withdrawal-and-provenance\",\n \"to\": \"core/a14-contributions.md#a143-corrections-withdrawal-and-provenance\"\n },\n {\n \"section\": \"A14\",\n \"from\": \"14-connectors.md#a144-separation-of-history-and-preference\",\n \"to\": \"core/a14-contributions.md#a144-separation-of-history-and-preference\"\n },\n {\n \"section\": \"A15\",\n \"from\": \"15-security.md#a15-security-requirements\",\n \"to\": \"core/a15-security.md#a15-security-requirements\"\n },\n {\n \"section\": \"A15\",\n \"from\": \"15-security.md#a151-authority-and-isolation\",\n \"to\": \"core/a15-security.md#a151-authority-and-isolation\"\n },\n {\n \"section\": \"A15\",\n \"from\": \"15-security.md#a152-signed-objects\",\n \"to\": \"core/a15-security.md#a152-signed-objects\"\n },\n {\n \"section\": \"A15\",\n \"from\": \"15-security.md#a153-implementation-controls\",\n \"to\": \"core/a15-security.md#a153-implementation-controls\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a16-privacy-and-legal-mapping\",\n \"to\": \"core/a16-privacy-mapping.md#a16-privacy-and-legal-mapping\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a161-what-the-protocol-supports\",\n \"to\": \"core/a16-privacy-mapping.md#a161-what-the-protocol-supports\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a162-applicability-roles-and-lawful-processing\",\n \"to\": \"core/a16-privacy-mapping.md#a162-applicability-roles-and-lawful-processing\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a163-sensitive-data-necessity-and-further-use\",\n \"to\": \"core/a16-privacy-mapping.md#a163-sensitive-data-necessity-and-further-use\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a164-international-flows\",\n \"to\": \"core/a16-privacy-mapping.md#a164-international-flows\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a165-rights-retention-and-erasure\",\n \"to\": \"core/a16-privacy-mapping.md#a165-rights-retention-and-erasure\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a166-advertising-choices-and-children\",\n \"to\": \"core/a16-privacy-mapping.md#a166-advertising-choices-and-children\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a167-accountability-and-regulated-services\",\n \"to\": \"core/a16-privacy-mapping.md#a167-accountability-and-regulated-services\"\n },\n {\n \"section\": \"A16\",\n \"from\": \"16-privacy-mapping.md#a168-evidence-and-claims\",\n \"to\": \"core/a16-privacy-mapping.md#a168-evidence-and-claims\"\n },\n {\n \"section\": \"A17\",\n \"from\": \"17-conformance.md#a17-conformance-and-change-process\",\n \"to\": \"core/a17-conformance-and-change.md#a17-conformance-and-change-process\"\n },\n {\n \"section\": \"A17\",\n \"from\": \"17-conformance.md#a171-provider-and-recipient-roles\",\n \"to\": \"core/a17-conformance-and-change.md#a171-provider-and-recipient-roles\"\n },\n {\n \"section\": \"A17\",\n \"from\": \"17-conformance.md#a172-claims-and-evidence\",\n \"to\": \"core/a17-conformance-and-change.md#a172-claims-and-evidence\"\n },\n {\n \"section\": \"A17\",\n \"from\": \"17-conformance.md#a173-changes\",\n \"to\": \"core/a17-conformance-and-change.md#a173-changes\"\n },\n {\n \"section\": \"A18\",\n \"from\": \"18-scope-additions.md#a18-consent-temporary-context-and-reciprocal-portability\",\n \"to\": \"core/a06-authorisation.md#a67-consent-and-advertising\"\n },\n {\n \"section\": \"A18.1\",\n \"from\": \"18-scope-additions.md#a181-consent-and-advertising\",\n \"to\": \"core/a06-authorisation.md#a67-consent-and-advertising\"\n },\n {\n \"section\": \"A18.2\",\n \"from\": \"18-scope-additions.md#a182-temporary-context\",\n \"to\": \"core/a04-data-model.md#a46-temporary-context\"\n },\n {\n \"section\": \"A18.3\",\n \"from\": \"18-scope-additions.md#a183-contribution-and-reciprocal-portability\",\n \"to\": \"core/a14-contributions.md#a145-contribution-and-reciprocal-portability\"\n },\n {\n \"section\": \"A18.4\",\n \"from\": \"18-scope-additions.md#a184-capability-claims-and-acceptance\",\n \"to\": \"core/a17-conformance-and-change.md#a175-capability-claims-and-acceptance\"\n },\n {\n \"section\": \"A17.4\",\n \"from\": \"19-change-process.md#versioning-and-changes\",\n \"to\": \"core/a17-conformance-and-change.md#a174-versioning-and-editions\"\n },\n {\n \"section\": \"A17.4\",\n \"from\": \"19-change-process.md#draft-status\",\n \"to\": \"core/a17-conformance-and-change.md#draft-status\"\n },\n {\n \"section\": \"A17.4\",\n \"from\": \"19-change-process.md#reviewing-changes\",\n \"to\": \"core/a17-conformance-and-change.md#reviewing-changes\"\n },\n {\n \"section\": \"A17.4\",\n \"from\": \"19-change-process.md#compatibility\",\n \"to\": \"core/a17-conformance-and-change.md#compatibility\"\n },\n {\n \"section\": \"A17.4\",\n \"from\": \"19-change-process.md#published-editions\",\n \"to\": \"core/a17-conformance-and-change.md#published-editions\"\n },\n {\n \"section\": \"vocabulary\",\n \"from\": \"appendix-a-vocabulary.md#appendix-a-core-vocabulary\",\n \"to\": \"vocabulary/README.md#vocabulary-registry\"\n },\n {\n \"section\": \"vocabulary\",\n \"from\": \"appendix-a-vocabulary.md#vocabulary-11-additions\",\n \"to\": \"vocabulary/README.md#vocabulary-11-additions\"\n },\n {\n \"section\": \"vocabulary\",\n \"from\": \"vocab/README.md#core-vocabulary\",\n \"to\": \"vocabulary/README.md#vocabulary-registry\"\n },\n {\n \"section\": \"principles\",\n \"from\": \"appendix-b-resolved-questions.md#appendix-b-design-principles\",\n \"to\": \"core/principles.md#design-principles\"\n },\n {\n \"section\": \"A4.1\",\n \"from\": \"identifiers.md#typed-record-identifiers\",\n \"to\": \"core/identifiers.md#typed-record-identifiers\"\n },\n {\n \"section\": \"A6.2\",\n \"from\": \"scopes.md#scope-grammar-implementation\",\n \"to\": \"core/scopes.md#scope-grammar-implementation\"\n },\n {\n \"section\": \"A6.2\",\n \"from\": \"scopes.md#parsing-and-canonical-form\",\n \"to\": \"core/scopes.md#parsing-and-canonical-form\"\n },\n {\n \"section\": \"A6.2\",\n \"from\": \"scopes.md#advertising-purpose\",\n \"to\": \"core/scopes.md#advertising-purpose\"\n },\n {\n \"section\": \"A6.2\",\n \"from\": \"scopes.md#executable-checks\",\n \"to\": \"core/scopes.md#executable-checks\"\n },\n {\n \"section\": \"history\",\n \"from\": \"CHANGES-from-proposal.md#changes-from-the-recovered-proposal\",\n \"to\": \"history/CHANGES-from-proposal.md#changes-from-the-recovered-proposal\"\n },\n {\n \"section\": \"history\",\n \"from\": \"source-ambiguities.md#interpretation-notes\",\n \"to\": \"history/source-ambiguities.md#interpretation-notes\"\n },\n {\n \"section\": \"implementation\",\n \"from\": \"operations.md#operational-http-surface\",\n \"to\": \"conformance/README.md#implementation-and-conformance-status\"\n },\n {\n \"section\": \"implementation\",\n \"from\": \"operations.md#ops-01-response-boundary\",\n \"to\": \"conformance/README.md#implementation-and-conformance-status\"\n },\n {\n \"section\": \"implementation\",\n \"from\": \"operations.md#ops-02-health-and-readiness\",\n \"to\": \"conformance/README.md#implementation-and-conformance-status\"\n },\n {\n \"section\": \"implementation\",\n \"from\": \"operations.md#ops-03-logs-and-traces\",\n \"to\": \"conformance/README.md#implementation-and-conformance-status\"\n },\n {\n \"section\": \"implementation\",\n \"from\": \"operations.md#internal-development-helper\",\n \"to\": \"conformance/README.md#implementation-and-conformance-status\"\n },\n {\n \"section\": \"implementation\",\n \"from\": \"app-shell.md#first-party-application-shell\",\n \"to\": \"conformance/README.md#implementation-and-conformance-status\"\n }\n ]\n}\n", "vocabulary/README.md": "# Vocabulary registry\n\n**Status:** normative. Document version `1.0-draft-1`.\n\n[core.json](core.json) is generated from the schema package. It contains every admitted v1 key, its closed value schema, supported disclosure levels, renderer operations/examples and policy flags. This page explains the 30-key vocabulary 1.1 release boundary and its compatibility with the original 27 keys. Unknown and future candidate keys are rejected; there is no implicit free-text fallback.\n\nThe `viewing`, `reading` and `music` domains form the named group `media` (`groups.media` in [core.json](core.json)). The group is a label for documentation and the worked example; it adds no key, level or permission.\n\nThe normative [core vocabulary](core.json) version `1.1` contains 30 keys across 17 domains. Each key has a closed value schema, semantic kind, cardinality, supported levels, closed L0 category, safety/sensitivity/inference flags, advertising eligibility, label, explanation and example renderer output at every supported level.\n\n| Domain | Version 1 keys |\n| ------------- | -------------------------------------------------------------------- |\n| identity | `display_name`, `age_band`, `pronouns` |\n| contact | `email` |\n| household | `pets` |\n| dining | `diet`, `allergy`, `drink_preference`, `fasting`, `cuisine_affinity` |\n| health | `medical_alert` |\n| accessibility | `mobility_need` |\n| travel | `seat_preference`, `trip_context` |\n| viewing | `genre_affinity`, `watched_history` |\n| reading | `genres` |\n| music | `genres` |\n| shopping | `delivery_preference` |\n| home | `temperature_preference` |\n| work | `communication_style` |\n| finance | `currency` |\n| education | `learning_style` |\n| communication | `tone`, `preferred_language`, `spelling` |\n| agent | `verbosity`, `never_do`, `always_do`, `explanation_depth` |\n\nRenderer operations are closed: `category` emits only the L0 code; `identity` emits the already-validated value; `pick_first` emits only `first`; `approved_override_or_omit` emits the person's approved identifier-safe L1 rendering or omits the entry. L2 free text uses the same safe rendering. No generic redactor or language model supplies a substitute. Stored type describes the source; a rendered entry's type describes the actual rendering (for example `text` for L0 or an approved override).\n\nSafety and special-category values cannot be inferred. Advertising is limited to person-confirmed `viewing.genre_affinity`, `reading.genres` and `music.genres`, with the additional A6.7 controls. The vocabulary's closed lists deliberately exclude broad free text from that lane.\n\nAll other keys from earlier proposals, including clinical coding, account/loyalty details and arbitrary extensions, remain candidates outside this release. Import must report unsupported values before committing. This is an explicit first-release boundary, not a permissive catch-all schema. No semantic compatibility with IPS, SNOMED, ISO 24751 or other domain standards is claimed without a separately reviewed mapping.\n\nChecks: DISC-01, ADS-01, CONTRIB-01, PORT-01.\n\n## Vocabulary 1.1 additions\n\n`introduced_in` records the first vocabulary version containing each key. The original 27 keys remain version 1.0 keys with unchanged value and disclosure semantics. Vocabulary versions are independent of wire version 1.0 and document version 1.0-draft-1.\n\n- `agent.always_do` is a single preference containing 1-1024 characters of explicitly confirmed instruction text. It is not inferable. L0 is `agent_context`; L1/L2 require the person's approved identifier-safe rendering; L3 is the saved text. It grants no permission and cannot override safety rules or consent. Conflicting positive and negative instructions require the person's resolution; positive wording is not higher authority.\n- `agent.explanation_depth` has values `overview` (main point), `reasons` (main point and why) and `walkthrough` (explain the steps). It controls explanation depth/structure, while `agent.verbosity` controls length. It neither requests nor promises private model reasoning. L0 is `agent_context`; L1-L3 return the exact enum value.\n- `communication.spelling` has values `en-GB` and `en-US` and applies only to English replies. It explicitly overrides an English language tag's spelling convention; it does not choose the reply language. Without it, the language tag and recipient's ordinary conventions apply. It does not rewrite quotations, proper names or code. L0 is `communication_context`; L1-L3 return the exact enum value.\n\nAll three are single-cardinality ordinary preferences, support L0-L3 and ordinary temporal overlays, and are not safety-critical, special-category or advertising-eligible. The two enums are inferable under the existing provenance rules; `always_do` is not. Free text can nevertheless contain sensitive details or identifiers. Absence creates no default stored preference. Freshness follows A4.3's 365-day confirmation rule.\n\nA provider MUST NOT widen an existing grant merely because its vocabulary catalogue gains keys. It MUST retain the vocabulary version approved for that grant and the version supported by the recipient, and expose only their supported, authorised intersection. Missing version evidence means the original 1.0 key set. This restriction applies at every level, including L0, and to dependencies and temporal deadlines. Grant approval and recipient support for 1.1 must both be established before returning a new key. The reference library accepts these as trusted internal snapshot inputs; no new discovery or token field is implied. Runtime negotiation, consent persistence and cross-surface verification remain release gates.\n\nChecks: VOCAB-1.1-01 to VOCAB-1.1-09, DISC-01, TEMP-01 to TEMP-03. Synthetic entries are included under `pilot_vocabulary` in [protocol examples](../examples/protocol.json).\n", "vocabulary/core.json": "{\n \"version\": \"1.1\",\n \"status\": \"draft\",\n \"l0_categories\": [\n \"identity_context\",\n \"contact_context\",\n \"household_context\",\n \"dining_context\",\n \"health_context\",\n \"accessibility_context\",\n \"travel_context\",\n \"viewing_context\",\n \"reading_context\",\n \"music_context\",\n \"shopping_context\",\n \"home_context\",\n \"work_context\",\n \"finance_context\",\n \"education_context\",\n \"communication_context\",\n \"agent_context\"\n ],\n \"groups\": {\n \"media\": [\n \"viewing\",\n \"reading\",\n \"music\"\n ]\n },\n \"keys\": [\n {\n \"domain\": \"identity\",\n \"key\": \"display_name\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Display name\",\n \"explanation\": \"The name the person chooses to share\",\n \"value_type\": \"structured\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"identity_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"first\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 1024\n },\n \"full\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 1024\n }\n },\n \"required\": [\n \"first\",\n \"full\"\n ],\n \"additionalProperties\": false\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"identity_context\"\n },\n \"L2\": {\n \"operation\": \"pick_first\",\n \"example\": {\n \"first\": \"Alex\"\n }\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": {\n \"first\": \"Alex\",\n \"full\": \"Alex Example\"\n }\n }\n }\n },\n {\n \"domain\": \"identity\",\n \"key\": \"age_band\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Age band\",\n \"explanation\": \"A broad age range\",\n \"value_type\": \"age_band\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"identity_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"under_13\",\n \"13_17\",\n \"18_24\",\n \"25_34\",\n \"35_44\",\n \"45_54\",\n \"55_64\",\n \"65_plus\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"identity_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"35_44\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"35_44\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"35_44\"\n }\n }\n },\n {\n \"domain\": \"identity\",\n \"key\": \"pronouns\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Pronouns\",\n \"explanation\": \"How to refer to the person\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"identity_context\",\n \"safety_critical\": false,\n \"special_category\": true,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"they_them\",\n \"she_her\",\n \"he_him\",\n \"use_name\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"identity_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"they_them\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"they_them\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"they_them\"\n }\n }\n },\n {\n \"domain\": \"contact\",\n \"key\": \"email\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Email\",\n \"explanation\": \"An address explicitly selected for contact\",\n \"value_type\": \"text\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L3\"\n ],\n \"l0_category\": \"contact_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"maxLength\": 254,\n \"format\": \"email\",\n \"pattern\": \"^(?:[A-Za-z0-9_'+\\\\-]+\\\\.)*[A-Za-z0-9_'+\\\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\\\-]*\\\\.)+[A-Za-z]{2,}$\"\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"contact_context\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"alex@example.invalid\"\n }\n }\n },\n {\n \"domain\": \"household\",\n \"key\": \"pets\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Pets\",\n \"explanation\": \"Animal categories relevant to a request\",\n \"value_type\": \"list\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"household_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 16,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"cat\",\n \"dog\",\n \"bird\",\n \"fish\",\n \"small_animal\",\n \"other\"\n ]\n }\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"household_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": [\n \"cat\"\n ]\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": [\n \"cat\"\n ]\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": [\n \"cat\"\n ]\n }\n }\n },\n {\n \"domain\": \"dining\",\n \"key\": \"diet\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Diet\",\n \"explanation\": \"A declared food preference without an inferred reason\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"dining_context\",\n \"safety_critical\": false,\n \"special_category\": true,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"no_preference\",\n \"vegetarian\",\n \"vegan\",\n \"pescatarian\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"dining_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"vegetarian\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"vegetarian\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"vegetarian\"\n }\n }\n },\n {\n \"domain\": \"dining\",\n \"key\": \"allergy\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Allergy\",\n \"explanation\": \"A confirmed allergen and severity\",\n \"value_type\": \"structured\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"many\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"dining_context\",\n \"safety_critical\": true,\n \"special_category\": true,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"allergen\": {\n \"type\": \"string\",\n \"enum\": [\n \"celery\",\n \"cereals_with_gluten\",\n \"crustaceans\",\n \"eggs\",\n \"fish\",\n \"lupin\",\n \"milk\",\n \"molluscs\",\n \"mustard\",\n \"peanuts\",\n \"sesame\",\n \"soybeans\",\n \"sulphites\",\n \"tree_nuts\"\n ]\n },\n \"severity\": {\n \"type\": \"string\",\n \"enum\": [\n \"mild\",\n \"moderate\",\n \"severe\",\n \"unknown\"\n ]\n }\n },\n \"required\": [\n \"allergen\",\n \"severity\"\n ],\n \"additionalProperties\": false\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"dining_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": {\n \"allergen\": \"tree_nuts\",\n \"severity\": \"severe\"\n }\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": {\n \"allergen\": \"tree_nuts\",\n \"severity\": \"severe\"\n }\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": {\n \"allergen\": \"tree_nuts\",\n \"severity\": \"severe\"\n }\n }\n }\n },\n {\n \"domain\": \"dining\",\n \"key\": \"drink_preference\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Drink preference\",\n \"explanation\": \"A drink choice, including a temporary period without alcohol\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"dining_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"no_preference\",\n \"no_alcohol\",\n \"water\",\n \"tea\",\n \"coffee\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"dining_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"no_alcohol\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"no_alcohol\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"no_alcohol\"\n }\n }\n },\n {\n \"domain\": \"dining\",\n \"key\": \"fasting\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Fasting\",\n \"explanation\": \"A person-declared current fasting period without its reason\",\n \"value_type\": \"boolean\",\n \"context_kind\": \"state\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"dining_context\",\n \"safety_critical\": false,\n \"special_category\": true,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"boolean\"\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"dining_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": true\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": true\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": true\n }\n }\n },\n {\n \"domain\": \"dining\",\n \"key\": \"cuisine_affinity\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Cuisine preference\",\n \"explanation\": \"Preferred broad cuisines\",\n \"value_type\": \"list\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"dining_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 16,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"japanese\",\n \"levantine\",\n \"italian\",\n \"indian\",\n \"mexican\",\n \"thai\",\n \"french\",\n \"other\"\n ]\n }\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"dining_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": [\n \"japanese\"\n ]\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": [\n \"japanese\"\n ]\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": [\n \"japanese\"\n ]\n }\n }\n },\n {\n \"domain\": \"health\",\n \"key\": \"medical_alert\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Medical alert\",\n \"explanation\": \"An exact person-confirmed statement for safety\",\n \"value_type\": \"text\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"many\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"health_context\",\n \"safety_critical\": true,\n \"special_category\": true,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 1024\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"health_context\"\n },\n \"L1\": {\n \"operation\": \"approved_override_or_omit\",\n \"example\": \"Synthetic medical alert\"\n },\n \"L2\": {\n \"operation\": \"approved_override_or_omit\",\n \"example\": \"Synthetic medical alert\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"Synthetic medical alert\"\n }\n }\n },\n {\n \"domain\": \"accessibility\",\n \"key\": \"mobility_need\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Mobility need\",\n \"explanation\": \"A confirmed accessibility requirement\",\n \"value_type\": \"enum\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"many\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"accessibility_context\",\n \"safety_critical\": true,\n \"special_category\": true,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"step_free\",\n \"wheelchair_space\",\n \"short_distances\",\n \"seated_waiting\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"accessibility_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"step_free\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"step_free\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"step_free\"\n }\n }\n },\n {\n \"domain\": \"travel\",\n \"key\": \"seat_preference\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Seat preference\",\n \"explanation\": \"Preferred seating where available\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"travel_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"no_preference\",\n \"aisle\",\n \"window\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"travel_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"aisle\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"aisle\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"aisle\"\n }\n }\n },\n {\n \"domain\": \"travel\",\n \"key\": \"trip_context\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Trip context\",\n \"explanation\": \"A bounded current travel situation without location\",\n \"value_type\": \"enum\",\n \"context_kind\": \"state\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"travel_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"holiday\",\n \"business\",\n \"family_visit\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"travel_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"holiday\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"holiday\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"holiday\"\n }\n }\n },\n {\n \"domain\": \"viewing\",\n \"key\": \"genre_affinity\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Viewing genres\",\n \"explanation\": \"Person-selected broad entertainment genres\",\n \"value_type\": \"list\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"viewing_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": true,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 16,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"comedy\",\n \"drama\",\n \"animation\",\n \"science_fiction\",\n \"documentary\",\n \"adventure\"\n ]\n }\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"viewing_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": [\n \"comedy\"\n ]\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": [\n \"comedy\"\n ]\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": [\n \"comedy\"\n ]\n }\n }\n },\n {\n \"domain\": \"viewing\",\n \"key\": \"watched_history\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Viewing activity\",\n \"explanation\": \"A single contributed viewing event kept separate from preferences\",\n \"value_type\": \"structured\",\n \"context_kind\": \"fact\",\n \"cardinality\": \"many\",\n \"supported_levels\": [\n \"L0\",\n \"L3\"\n ],\n \"l0_category\": \"viewing_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"object\",\n \"properties\": {\n \"title\": {\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 1024\n },\n \"occurred_at\": {\n \"type\": \"string\",\n \"format\": \"date-time\",\n \"pattern\": \"^(?:(?:\\\\d\\\\d[2468][048]|\\\\d\\\\d[13579][26]|\\\\d\\\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\\\d|30)|(?:02)-(?:0[1-9]|1\\\\d|2[0-8])))T(?:(?:[01]\\\\d|2[0-3]):[0-5]\\\\d:[0-5]\\\\d(?:\\\\.\\\\d+)?(?:Z))$\"\n },\n \"completed\": {\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"title\",\n \"occurred_at\",\n \"completed\"\n ],\n \"additionalProperties\": false\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"viewing_context\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": {\n \"title\": \"Synthetic programme\",\n \"occurred_at\": \"2026-09-21T00:00:00Z\",\n \"completed\": true\n }\n }\n }\n },\n {\n \"domain\": \"reading\",\n \"key\": \"genres\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Reading genres\",\n \"explanation\": \"Person-selected broad reading genres\",\n \"value_type\": \"list\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"reading_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": true,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 16,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"fiction\",\n \"mystery\",\n \"adventure\",\n \"science\",\n \"biography\"\n ]\n }\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"reading_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": [\n \"mystery\"\n ]\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": [\n \"mystery\"\n ]\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": [\n \"mystery\"\n ]\n }\n }\n },\n {\n \"domain\": \"music\",\n \"key\": \"genres\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Music genres\",\n \"explanation\": \"Person-selected broad music genres\",\n \"value_type\": \"list\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"music_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": true,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"minItems\": 1,\n \"maxItems\": 16,\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"enum\": [\n \"classical\",\n \"jazz\",\n \"rock\",\n \"electronic\",\n \"pop\",\n \"folk\"\n ]\n }\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"music_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": [\n \"jazz\"\n ]\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": [\n \"jazz\"\n ]\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": [\n \"jazz\"\n ]\n }\n }\n },\n {\n \"domain\": \"shopping\",\n \"key\": \"delivery_preference\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Delivery preference\",\n \"explanation\": \"A preferred delivery mode without an address\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"shopping_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"collection\",\n \"home_delivery\",\n \"no_preference\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"shopping_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"collection\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"collection\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"collection\"\n }\n }\n },\n {\n \"domain\": \"home\",\n \"key\": \"temperature_preference\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Temperature preference\",\n \"explanation\": \"Preferred temperature in degrees Celsius\",\n \"value_type\": \"number\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"home_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"number\",\n \"minimum\": 10,\n \"maximum\": 35\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"home_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": 20\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": 20\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": 20\n }\n }\n },\n {\n \"domain\": \"work\",\n \"key\": \"communication_style\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Work communication style\",\n \"explanation\": \"Preferred working communication\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"work_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"written\",\n \"spoken\",\n \"brief\",\n \"detailed\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"work_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"written\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"written\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"written\"\n }\n }\n },\n {\n \"domain\": \"finance\",\n \"key\": \"currency\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Currency\",\n \"explanation\": \"Preferred currency; no account or transaction information\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"finance_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"GBP\",\n \"EUR\",\n \"USD\",\n \"CAD\",\n \"AUD\",\n \"JPY\",\n \"CHF\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"finance_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"GBP\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"GBP\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"GBP\"\n }\n }\n },\n {\n \"domain\": \"education\",\n \"key\": \"learning_style\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Learning preference\",\n \"explanation\": \"The person’s preferred presentation, not a diagnostic claim\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"education_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"examples\",\n \"text\",\n \"audio\",\n \"diagrams\",\n \"practice\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"education_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"examples\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"examples\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"examples\"\n }\n }\n },\n {\n \"domain\": \"communication\",\n \"key\": \"tone\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Tone\",\n \"explanation\": \"Preferred conversational tone\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"communication_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"neutral\",\n \"formal\",\n \"informal\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"communication_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"neutral\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"neutral\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"neutral\"\n }\n }\n },\n {\n \"domain\": \"communication\",\n \"key\": \"preferred_language\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Preferred language\",\n \"explanation\": \"A language tag selected by the person\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"communication_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"en-GB\",\n \"en-US\",\n \"fr\",\n \"de\",\n \"es\",\n \"it\",\n \"ja\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"communication_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"en-GB\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"en-GB\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"en-GB\"\n }\n }\n },\n {\n \"domain\": \"agent\",\n \"key\": \"verbosity\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Verbosity\",\n \"explanation\": \"Preferred answer length\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"agent_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"brief\",\n \"balanced\",\n \"detailed\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"agent_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"brief\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"brief\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"brief\"\n }\n }\n },\n {\n \"domain\": \"agent\",\n \"key\": \"never_do\",\n \"introduced_in\": \"1.0\",\n \"label\": \"Never do\",\n \"explanation\": \"A person-confirmed instruction; recipient safety rules still apply\",\n \"value_type\": \"text\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"agent_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 1024\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"agent_context\"\n },\n \"L1\": {\n \"operation\": \"approved_override_or_omit\",\n \"example\": \"Ask before making a purchase\"\n },\n \"L2\": {\n \"operation\": \"approved_override_or_omit\",\n \"example\": \"Ask before making a purchase\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"Ask before making a purchase\"\n }\n }\n },\n {\n \"domain\": \"agent\",\n \"key\": \"always_do\",\n \"introduced_in\": \"1.1\",\n \"label\": \"Always do\",\n \"explanation\": \"An instruction you want the assistant to follow when relevant; its safety rules and your permissions still apply\",\n \"value_type\": \"text\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"agent_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": false,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"minLength\": 1,\n \"maxLength\": 1024\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"agent_context\"\n },\n \"L1\": {\n \"operation\": \"approved_override_or_omit\",\n \"example\": \"State assumptions before a recommendation\"\n },\n \"L2\": {\n \"operation\": \"approved_override_or_omit\",\n \"example\": \"State assumptions before a recommendation\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"State assumptions before a recommendation\"\n }\n }\n },\n {\n \"domain\": \"agent\",\n \"key\": \"explanation_depth\",\n \"introduced_in\": \"1.1\",\n \"label\": \"Explanation detail\",\n \"explanation\": \"How much explanation you want alongside an answer\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"agent_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"overview\",\n \"reasons\",\n \"walkthrough\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"agent_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"walkthrough\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"walkthrough\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"walkthrough\"\n }\n }\n },\n {\n \"domain\": \"communication\",\n \"key\": \"spelling\",\n \"introduced_in\": \"1.1\",\n \"label\": \"English spelling\",\n \"explanation\": \"The English spelling convention you prefer when the reply is in English\",\n \"value_type\": \"enum\",\n \"context_kind\": \"preference\",\n \"cardinality\": \"one\",\n \"supported_levels\": [\n \"L0\",\n \"L1\",\n \"L2\",\n \"L3\"\n ],\n \"l0_category\": \"communication_context\",\n \"safety_critical\": false,\n \"special_category\": false,\n \"inferable\": true,\n \"advertising_eligible\": false,\n \"value_schema\": {\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"type\": \"string\",\n \"enum\": [\n \"en-GB\",\n \"en-US\"\n ]\n },\n \"renderers\": {\n \"L0\": {\n \"operation\": \"category\",\n \"example\": \"communication_context\"\n },\n \"L1\": {\n \"operation\": \"identity\",\n \"example\": \"en-GB\"\n },\n \"L2\": {\n \"operation\": \"identity\",\n \"example\": \"en-GB\"\n },\n \"L3\": {\n \"operation\": \"identity\",\n \"example\": \"en-GB\"\n }\n }\n }\n ]\n}\n" } }