This repository maintains CommandLayer Agent Cards for the current v1.1.0 release line plus archival v1.0.0 material. Across the entire repo there is one canonical schema-binding pattern:
schemas.requestandschemas.receiptidentify hosted schemas athttps://commandlayer.org/schemas/...- GitHub is a source repository, not a protocol surface
- the legacy duplicate schema field is deprecated and removed
- Commons
entryishttps://runtime.commandlayer.org/execute - Commercial
entryisx402://<agent>/<verb>/v1.1.0
- Root repository artifacts are authoritative.
meta/manifest.jsonis the canonical registry index..well-known/files are discovery pointers only.dist-pin/agent-cards/v1.1.0/is a derivative distribution bundle, not a co-equal authority surface.v1.0.0remains only for archival compatibility.
CommandLayer schema identifiers are the hosted commandlayer.org URLs.
https://commandlayer.org/schemas/v1.1.0/commons/<verb>/<verb>.request.schema.jsonhttps://commandlayer.org/schemas/v1.1.0/commons/<verb>/<verb>.receipt.schema.json
https://commandlayer.org/schemas/v1.1.0/commercial/<verb>/<verb>.request.schema.jsonhttps://commandlayer.org/schemas/v1.1.0/commercial/<verb>/<verb>.receipt.schema.json
GitHub may host the source files that produce those schemas, but raw GitHub URLs are not valid published Agent Card schema bindings in this repository.
entry is the execution binding published by an Agent Card.
- Commons:
https://runtime.commandlayer.org/execute - Commercial:
x402://<agent>/<verb>/v1.1.0
The difference is normative:
- Commons discovery resolves to a shared runtime execution endpoint.
- Commercial discovery resolves to a payment-aware x402 route.
Validators MUST reject mixed entry behavior, such as x402 entries on commons cards or runtime entries on commercial cards.
Every canonical v1.1.0 card MUST include:
idownerensversionstatusclassimplementsschemasentrynetworkslicensecreated_atupdated_at
schemas MUST include:
schemas.requestschemas.receipt
$schema and $id are publication fields and must remain aligned with the card path and schema version.
- Current cards live under
agents/v1.1.0/ - Current card schema lives at
schemas/v1.1.0/agent.card.schema.json - Current descriptor schema lives at
schemas/v1.1.0/agent.descriptor.schema.json versionfor current cards MUST equal1.1.0$schemafor current cards MUST equalhttps://commandlayer.org/agent-cards/schemas/v1.1.0/agent.card.schema.json$idMUST match the canonical HTTPS path of the card file
A commons card MUST publish:
schemas.request = https://commandlayer.org/schemas/v1.1.0/commons/<verb>/<verb>.request.schema.jsonschemas.receipt = https://commandlayer.org/schemas/v1.1.0/commons/<verb>/<verb>.receipt.schema.jsonentry = https://runtime.commandlayer.org/execute
A commercial card MUST publish:
schemas.request = https://commandlayer.org/schemas/v1.1.0/commercial/<verb>/<verb>.request.schema.jsonschemas.receipt = https://commandlayer.org/schemas/v1.1.0/commercial/<verb>/<verb>.receipt.schema.jsonentry = x402://<agent>/<verb>/v1.1.0
The following are non-conformant in this repository:
- raw GitHub schema URLs in cards, manifests, docs, examples, fixtures, or validation logic
- the legacy duplicate schema field
- mixed commons/commercial entry semantics
- dual-source language that implies both GitHub and
commandlayer.orgare equivalent schema identifiers
A repository state is conformant when:
- zero raw GitHub schema URLs remain
- the legacy duplicate schema field is absent everywhere
- all cards publish
commandlayer.orgschema URLs throughschemas - all commons cards use the runtime execute entry
- all commercial cards use the x402 entry pattern
- docs, manifests, examples, and validation agree with the implementation
npm run validatepasses
Agent Cards answer: “What is this agent, what can it do, and where are its endpoints?”
CommandLayer receipts answer: “What did this agent actually do?”
VerifyAgent answers: “Is this receipt valid or invalid?”
CommandLayer Commercial answers: “How do teams run, verify, index, and monitor receipts at scale?”
For public receipt verification, see https://github.com/commandlayer/verifyagent.