diff --git a/.well-known/agent-cards-v1.1.0.json b/.well-known/agent-cards-v1.1.0.json index de482d5..47cb22a 100644 --- a/.well-known/agent-cards-v1.1.0.json +++ b/.well-known/agent-cards-v1.1.0.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/agent-cards/v1.1.0", "name": "CommandLayer Agent Cards Registry Descriptor (v1.1.0)", - "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate line.", + "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/.well-known/agent.json b/.well-known/agent.json index 07ff7af..8665a29 100644 --- a/.well-known/agent.json +++ b/.well-known/agent.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/agent-cards/v1.1.0", "name": "CommandLayer Agent Cards Registry", - "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate line.", + "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate repository line.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/CHANGELOG.md b/CHANGELOG.md index 7da4ba4..8a52394 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,7 +6,7 @@ This changelog records release-line differences that are visible in the checked- ### Summary -`v1.1.0` is the current canonical Agent Cards line. It replaces the older `v1.0.0` working shape with a flatter current-line structure, direct schema bindings, and release validation centered on canonical root artifacts plus a reproducible derivative publish bundle. +`v1.1.0` is the current release-candidate Agent Cards line and the canonical repository line under review for tagging. It replaces the older `v1.0.0` working shape with a flatter current-line structure, direct schema bindings, and release validation centered on canonical root artifacts plus a reproducible derivative publish bundle. ### Removed from the current line @@ -19,7 +19,7 @@ This changelog records release-line differences that are visible in the checked- - `v1.1.0` cards are flat and live directly under `agents/v1.1.0/`. - Current cards bind directly to tagged Commons and Commercial schema URLs plus explicit `commandlayer.org` mirror URLs. - Root repository artifacts are the authority surface for the current line, while `dist-pin/agent-cards/v1.1.0/` is a committed derivative bundle that must remain reproducible from the root. -- Validation for the current line includes schema/card integrity, manifest alignment, checksums, and release reproducibility. +- Validation for the current line includes schema/card integrity, manifest alignment, canonical root checksum coverage, and derivative-bundle reproducibility. ### Legacy status @@ -29,7 +29,7 @@ This changelog records release-line differences that are visible in the checked- ### Migration implications -- Treat `v1.1.0` as the authoritative release line for current integrations and validation. +- Treat `v1.1.0` as the authoritative repository line for current integrations and validation; publication claims still wait on release validation. - Update tooling that expected `v1.0.0` shared schema paths, broader descriptive card fields, or older descriptor-led publication layout. - Expect current cards to expose only the minimal binding fields required by the `v1.1.0` schema. - Use the root package commands, especially `npm run validate` and `npm run validate:release`, when reviewing or publishing the current line. diff --git a/ONBOARDING.md b/ONBOARDING.md index 41044f8..5bc16ba 100644 --- a/ONBOARDING.md +++ b/ONBOARDING.md @@ -7,7 +7,7 @@ Agent Cards v1.1.0 is the current release-candidate line. Root repository artifa - root `agents/v1.1.0/`, `meta/`, `.well-known/`, and `schemas/v1.1.0/` are canonical - `meta/manifest.json` is the registry index - `.well-known/` is discovery -- `checksums.txt` proves integrity for both the authoritative root artifacts and the committed derivative `dist-pin/` bundle in-repo; release publication claims still wait on `validate:release` +- `checksums.txt` is the canonical checksum record for the authoritative root artifacts; the committed derivative `dist-pin/` bundle is verified separately by reproducible rebuild, and publication claims still wait on `validate:release` - `agents/v1.0.0/` and `schemas/v1.0.0/` are archival legacy - `dist-pin/agent-cards/v1.1.0/` is a committed generated derivative current-line bundle reproducible from the repository root @@ -44,12 +44,12 @@ Use the supported root package scripts and current commands instead: `npm run va 6. update `RESOLUTION.md` 7. run `npm run validate` 8. run `npm run validate:release` -9. `validate` checks local structure and checksums; `validate:release` adds external URL resolution and derivative-bundle reproducibility before publication claims +9. `validate` checks local structure and canonical root checksum coverage; `validate:release` adds external URL resolution and derivative-bundle reproducibility before publication claims 10. after review, have a maintainer create or move the release tag on the exact validated commit; the release snapshot is the tagged commit plus `checksums.txt` ## Release procedure -- Root artifacts are canonical. +- Root artifacts are canonical for the `v1.1.0` line. - `dist-pin/agent-cards/v1.1.0/` is committed to git, reproducible from the repository root, always rebuilt from the canonical root artifacts, and never an independent authority surface. - `.well-known/` is discovery-only. - A maintainer must create or move any release tag after validation; this repo does not imply that an unreleased tag already exists. diff --git a/POLICY.md b/POLICY.md index 3c4bd08..48b11fa 100644 --- a/POLICY.md +++ b/POLICY.md @@ -3,7 +3,7 @@ ## Release policy - `v1.1.0` is the current release-candidate Agent Cards line. -- Root repository artifacts for `v1.1.0` are the source of truth. +- Root repository artifacts for `v1.1.0` are canonical. - `v1.0.0` is superseded and retained only as an archival compatibility line. - Current v1.1.0 work must stay flat and self-contained. - Current v1.1.0 work must not reintroduce `_shared`. @@ -12,7 +12,7 @@ - `meta/manifest.json` is the canonical registry index. - `.well-known/` files are discovery pointers only. -- `dist-pin/agent-cards/v1.1.0/` is a derivative current-line bundle for pinning/repinning. +- `dist-pin/agent-cards/v1.1.0/` is a derivative current-line bundle for pinning/repinning and reproducible verification. - No surface other than the root `v1.1.0` artifacts may be treated as co-equal authority. ## Binding policy @@ -23,4 +23,4 @@ ## Release integrity -Canonical cards, canonical schemas, manifest, discovery pointers, checksums, and the derivative dist-pin bundle must move together. +Canonical cards, canonical schemas, manifest, discovery pointers, root checksum records, and the derivative dist-pin bundle verification target must move together. diff --git a/README.md b/README.md index 6c329a3..4e2175d 100644 --- a/README.md +++ b/README.md @@ -167,7 +167,7 @@ agent-cards/ - `node scripts/build-dist-pin.mjs` — rebuild the committed derivative publish bundle from canonical root files - `npm run validate:release` — the canonical release validation entrypoint; it runs `npm run validate` first and then: - confirms `meta/manifest.json` matches every current card binding - - confirms `dist-pin/agent-cards/v1.1.0/` matches a freshly generated derivative bundle + - confirms `dist-pin/agent-cards/v1.1.0/` matches a freshly generated derivative bundle built from the canonical root files - resolves every upstream tagged schema URL over the network - optionally resolves mirrors when run with `--require-mirrors` @@ -184,7 +184,7 @@ The current release review checks: - direct `commandlayer.org` mirror URL patterns - exact manifest/card cross-validation for indexed current-line entries - entry URI correctness -- checksum determinism across authoritative root artifacts and the derivative dist-pin bundle so both surfaces can be reviewed independently +- checksum determinism across authoritative root artifacts, plus separate derivative-bundle verification for `dist-pin/`, so each release surface can be reviewed without blurring authority ## Release procedure @@ -221,6 +221,6 @@ This keeps the trust story narrow: root artifacts are canonical, `dist-pin/` is - `meta/manifest.json` — canonical registry index for the release - `.well-known/agent.json` — current discovery pointer to the canonical registry metadata - `.well-known/agent-cards-v1.1.0.json` — immutable versioned discovery descriptor for `v1.1.0` -- `dist-pin/agent-cards/v1.1.0/` — committed derivative published bundle copied from canonical root artifacts for pinning/repinning and reproducible from the repository root +- `dist-pin/agent-cards/v1.1.0/` — committed derivative published bundle copied from canonical root artifacts for pinning/repinning and verified by rebuild, not by co-equal authority - `agents/v1.0.0/`, `schemas/v1.0.0/`, and `dist-pin/agent-cards/v1.0.0/` — archival compatibility surfaces only -- `checksums.txt` — deterministic artifact digests across the authoritative root release set and the committed derivative publish bundle +- `checksums.txt` — deterministic artifact digests for the authoritative root release set; the derivative publish bundle is verified separately by reproducible rebuild diff --git a/SPEC.md b/SPEC.md index 080286c..3e3024d 100644 --- a/SPEC.md +++ b/SPEC.md @@ -28,7 +28,7 @@ They do not define semantic meaning, feature behavior, or implementation detail. - `checksums.txt` covers both the authoritative root artifacts and the derived `dist-pin/` bundle so reviewers can verify source and derivative release surfaces independently. - `v1.0.0` is superseded and retained only for archival compatibility. Legacy `v1.0.0` references may still rely on IPFS-era addressing and must be read as archival material, not the current authority path. -## 3. Current schema files +## 3. Legacy schema files The current line uses exactly these repository-owned schema files: @@ -37,7 +37,7 @@ The current line uses exactly these repository-owned schema files: Legacy schema files under `schemas/v1.0.0/` remain in-tree only to preserve the archived `v1.0.0` line. They are not part of the current authority model. -## 4. Required card fields +## 5. Required card fields Every canonical v1.1.0 card MUST satisfy the current schema and include the current-line publication fields. @@ -60,9 +60,9 @@ The v1.1.0 JSON Schema requires 14 top-level fields. That count does not include The schema also requires `schemas.request`, `schemas.receipt`, `schemas_mirror.request`, and `schemas_mirror.receipt`. -`$schema` and `$id` are defined properties and current-line repo publication fields, but they are not schema-required fields. +`$schema` and `$id` are defined properties and current-line publication fields, but they are not schema-required fields. -## 5. Versioning rules +## 6. Versioning rules - v1.1.0 cards live under `agents/v1.1.0/` - `version` MUST equal `1.1.0` @@ -73,9 +73,9 @@ The schema also requires `schemas.request`, `schemas.receipt`, `schemas_mirror.r - Commercial artifacts MAY include x402-aligned payment proof or settlement references where applicable. The x402 protocol is external to this specification and should be treated as its own canonical protocol surface at `https://docs.x402.org/`. - v1.0.0 MAY remain in the repository only as a legacy archival compatibility surface -## 6. Binding rules +## 7. Binding rules -### 6.1 Commons +### 7.1 Commons A Commons v1.1.0 card MUST bind directly to: @@ -84,7 +84,7 @@ A Commons v1.1.0 card MUST bind directly to: - mirror request URL: `https://commandlayer.org/schemas/v1.1.0/commons//.request.schema.json` - mirror receipt URL: `https://commandlayer.org/schemas/v1.1.0/commons//.receipt.schema.json` -### 6.2 Commercial +### 7.2 Commercial A Commercial v1.1.0 card MUST bind directly to: @@ -95,7 +95,7 @@ A Commercial v1.1.0 card MUST bind directly to: Commercial v1.1.0 is flat in the same style as Commons v1.1.0. -## 7. Descriptor rules +## 8. Descriptor rules Current discovery descriptors MUST validate under `schemas/v1.1.0/agent.descriptor.schema.json` and point at: @@ -105,7 +105,7 @@ Current discovery descriptors MUST validate under `schemas/v1.1.0/agent.descript Discovery descriptors are pointers. They are not the canonical registry index. -## 8. Conformance +## 9. Conformance A repo state is conformant when: @@ -114,6 +114,6 @@ A repo state is conformant when: - current cards contain only the minimal canonical binding fields - cards point at direct source URLs and intended `commandlayer.org` mirrors for release validation - `meta/manifest.json` describes the same current release line as the discovery descriptors -- the derivative `dist-pin/agent-cards/v1.1.0/` bundle matches the canonical root release artifacts +- the derivative `dist-pin/agent-cards/v1.1.0/` bundle matches a reproducible rebuild from the canonical root release artifacts - `checksums.txt` matches repo contents - `npm run validate` passes diff --git a/checksums.txt b/checksums.txt index 0947b5e..f8d3f52 100644 --- a/checksums.txt +++ b/checksums.txt @@ -1,5 +1,5 @@ -0e71d19605b66d56ef412d84e28cd97404d35b0aaa9819cf8f8eafda1679a203 .well-known/agent-cards-v1.1.0.json -28fbc1f9f2c4640966498935d874d96c4e5d3041356901dc27314e44720d88dc .well-known/agent.json +f7cffcc154397cb4b5c37c05944cdf75c292b2f994d0affda500711b61d33811 .well-known/agent-cards-v1.1.0.json +8bafbd3c62d16d447a2a8835ac3693e407469f611368672dbbccf624522fbc03 .well-known/agent.json b7d185443a2efcf37f760f687b38963558dc82899fa249f6b0a43a6631ebb717 agents/v1.0.0/commercial/authorizeagent.eth.json 864bfc0467080e4ff6c1514f044449eed79790a5cab420588c052e6ff77c47aa agents/v1.0.0/commercial/checkoutagent.eth.json 0f718f2125c5e6b792c56156f7312e98b8ec7b6e53df24436423135f6ae4abca agents/v1.0.0/commercial/purchaseagent.eth.json diff --git a/dist-pin/agent-cards/v1.1.0/.well-known/agent-cards-v1.1.0.json b/dist-pin/agent-cards/v1.1.0/.well-known/agent-cards-v1.1.0.json index de482d5..47cb22a 100644 --- a/dist-pin/agent-cards/v1.1.0/.well-known/agent-cards-v1.1.0.json +++ b/dist-pin/agent-cards/v1.1.0/.well-known/agent-cards-v1.1.0.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/agent-cards/v1.1.0", "name": "CommandLayer Agent Cards Registry Descriptor (v1.1.0)", - "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate line.", + "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/dist-pin/agent-cards/v1.1.0/.well-known/agent.json b/dist-pin/agent-cards/v1.1.0/.well-known/agent.json index 07ff7af..8665a29 100644 --- a/dist-pin/agent-cards/v1.1.0/.well-known/agent.json +++ b/dist-pin/agent-cards/v1.1.0/.well-known/agent.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/agent-cards/v1.1.0", "name": "CommandLayer Agent Cards Registry", - "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate line.", + "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate repository line.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/dist-pin/agent-cards/v1.1.0/meta/commercial-agent.json b/dist-pin/agent-cards/v1.1.0/meta/commercial-agent.json index a3af0a1..10d4999 100644 --- a/dist-pin/agent-cards/v1.1.0/meta/commercial-agent.json +++ b/dist-pin/agent-cards/v1.1.0/meta/commercial-agent.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/commercial-agent/v1.1.0", "name": "CommandLayer Commercial Agent Registry", - "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate bindings.", + "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate repository bindings.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/dist-pin/agent-cards/v1.1.0/meta/commons-agent.json b/dist-pin/agent-cards/v1.1.0/meta/commons-agent.json index 949ed23..dcd3044 100644 --- a/dist-pin/agent-cards/v1.1.0/meta/commons-agent.json +++ b/dist-pin/agent-cards/v1.1.0/meta/commons-agent.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/commons-agent/v1.1.0", "name": "CommandLayer Commons Agent Registry", - "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate bindings.", + "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate repository bindings.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/dist-pin/agent-cards/v1.1.0/meta/manifest.json b/dist-pin/agent-cards/v1.1.0/meta/manifest.json index 65fd8d5..c3374cb 100644 --- a/dist-pin/agent-cards/v1.1.0/meta/manifest.json +++ b/dist-pin/agent-cards/v1.1.0/meta/manifest.json @@ -1,7 +1,7 @@ { "name": "@commandlayer/agent-cards", "version": "1.1.0", - "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate line.", + "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.", "repository": "https://github.com/commandlayer/agent-cards", "homepage": "https://commandlayer.org/agent-cards", "owner": "commandlayer.eth", @@ -48,9 +48,9 @@ "agents", "schemas", "meta", - ".well-known", - "dist-pin/agent-cards/v1.1.0" - ] + ".well-known" + ], + "derivative_verification": "dist-pin/agent-cards/v1.1.0 must match a rebuild from the canonical root artifacts" }, "entries": [ { @@ -295,10 +295,10 @@ } ], "surface_roles": { - "root": "canonical source of truth for Agent Cards v1.1.0", + "root": "canonical repository artifacts for Agent Cards v1.1.0", "meta_manifest": "canonical registry index", "well_known": "discovery pointers only", - "dist_pin": "derivative current-line bundle for pinning/repinning; not independent authority", + "dist_pin": "derivative current-line bundle for pinning/repinning and rebuild verification; not independent authority", "legacy_v1_0_0": "archival compatibility only" }, "publication": { @@ -307,6 +307,7 @@ "discovery_role": ".well-known discovery pointers only", "derivative_bundle": "dist-pin/agent-cards/v1.1.0", "state": "release_candidate_pending_validation", - "external_bindings": "unconfirmed_until_validate_release_passes" + "external_bindings": "unconfirmed_until_validate_release_passes", + "checksum_scope": "checksums_txt_covers_root_release_surfaces_only" } } diff --git a/meta/commercial-agent.json b/meta/commercial-agent.json index a3af0a1..10d4999 100644 --- a/meta/commercial-agent.json +++ b/meta/commercial-agent.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/commercial-agent/v1.1.0", "name": "CommandLayer Commercial Agent Registry", - "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate bindings.", + "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate repository bindings.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/meta/commons-agent.json b/meta/commons-agent.json index 949ed23..dcd3044 100644 --- a/meta/commons-agent.json +++ b/meta/commons-agent.json @@ -1,7 +1,7 @@ { "id": "x402://commandlayer.eth/commons-agent/v1.1.0", "name": "CommandLayer Commons Agent Registry", - "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate bindings.", + "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate repository bindings.", "owner": "commandlayer.eth", "ens": "commandlayer.eth", "version": "1.1.0", diff --git a/meta/manifest.json b/meta/manifest.json index 65fd8d5..c3374cb 100644 --- a/meta/manifest.json +++ b/meta/manifest.json @@ -1,7 +1,7 @@ { "name": "@commandlayer/agent-cards", "version": "1.1.0", - "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate line.", + "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.", "repository": "https://github.com/commandlayer/agent-cards", "homepage": "https://commandlayer.org/agent-cards", "owner": "commandlayer.eth", @@ -48,9 +48,9 @@ "agents", "schemas", "meta", - ".well-known", - "dist-pin/agent-cards/v1.1.0" - ] + ".well-known" + ], + "derivative_verification": "dist-pin/agent-cards/v1.1.0 must match a rebuild from the canonical root artifacts" }, "entries": [ { @@ -295,10 +295,10 @@ } ], "surface_roles": { - "root": "canonical source of truth for Agent Cards v1.1.0", + "root": "canonical repository artifacts for Agent Cards v1.1.0", "meta_manifest": "canonical registry index", "well_known": "discovery pointers only", - "dist_pin": "derivative current-line bundle for pinning/repinning; not independent authority", + "dist_pin": "derivative current-line bundle for pinning/repinning and rebuild verification; not independent authority", "legacy_v1_0_0": "archival compatibility only" }, "publication": { @@ -307,6 +307,7 @@ "discovery_role": ".well-known discovery pointers only", "derivative_bundle": "dist-pin/agent-cards/v1.1.0", "state": "release_candidate_pending_validation", - "external_bindings": "unconfirmed_until_validate_release_passes" + "external_bindings": "unconfirmed_until_validate_release_passes", + "checksum_scope": "checksums_txt_covers_root_release_surfaces_only" } }