Polish release-facing wording and tighten checksum/derivative verification (v1.1.0)

.well-known/agent-cards-v1.1.0.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/agent-cards/v1.1.0",
   "name": "CommandLayer Agent Cards Registry Descriptor (v1.1.0)",
-  "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate line.",
+  "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

.well-known/agent.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/agent-cards/v1.1.0",
   "name": "CommandLayer Agent Cards Registry",
-  "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate line.",
+  "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate repository line.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

CHANGELOG.md

@@ -6,7 +6,7 @@ This changelog records release-line differences that are visible in the checked-
 
 ### Summary
 
-`v1.1.0` is the current canonical Agent Cards line. It replaces the older `v1.0.0` working shape with a flatter current-line structure, direct schema bindings, and release validation centered on canonical root artifacts plus a reproducible derivative publish bundle.
+`v1.1.0` is the current release-candidate Agent Cards line and the canonical repository line under review for tagging. It replaces the older `v1.0.0` working shape with a flatter current-line structure, direct schema bindings, and release validation centered on canonical root artifacts plus a reproducible derivative publish bundle.
 
 ### Removed from the current line
 
@@ -19,7 +19,7 @@ This changelog records release-line differences that are visible in the checked-
 - `v1.1.0` cards are flat and live directly under `agents/v1.1.0/`.
 - Current cards bind directly to tagged Commons and Commercial schema URLs plus explicit `commandlayer.org` mirror URLs.
 - Root repository artifacts are the authority surface for the current line, while `dist-pin/agent-cards/v1.1.0/` is a committed derivative bundle that must remain reproducible from the root.
-- Validation for the current line includes schema/card integrity, manifest alignment, checksums, and release reproducibility.
+- Validation for the current line includes schema/card integrity, manifest alignment, canonical root checksum coverage, and derivative-bundle reproducibility.
 
 ### Legacy status
 
@@ -29,7 +29,7 @@ This changelog records release-line differences that are visible in the checked-
 
 ### Migration implications
 
-- Treat `v1.1.0` as the authoritative release line for current integrations and validation.
+- Treat `v1.1.0` as the authoritative repository line for current integrations and validation; publication claims still wait on release validation.
 - Update tooling that expected `v1.0.0` shared schema paths, broader descriptive card fields, or older descriptor-led publication layout.
 - Expect current cards to expose only the minimal binding fields required by the `v1.1.0` schema.
 - Use the root package commands, especially `npm run validate` and `npm run validate:release`, when reviewing or publishing the current line.

ONBOARDING.md

@@ -7,7 +7,7 @@ Agent Cards v1.1.0 is the current release-candidate line. Root repository artifa
 - root `agents/v1.1.0/`, `meta/`, `.well-known/`, and `schemas/v1.1.0/` are canonical
 - `meta/manifest.json` is the registry index
 - `.well-known/` is discovery
-- `checksums.txt` proves integrity for both the authoritative root artifacts and the committed derivative `dist-pin/` bundle in-repo; release publication claims still wait on `validate:release`
+- `checksums.txt` is the canonical checksum record for the authoritative root artifacts; the committed derivative `dist-pin/` bundle is verified separately by reproducible rebuild, and publication claims still wait on `validate:release`
 - `agents/v1.0.0/` and `schemas/v1.0.0/` are archival legacy
 - `dist-pin/agent-cards/v1.1.0/` is a committed generated derivative current-line bundle reproducible from the repository root
 
@@ -44,12 +44,12 @@ Use the supported root package scripts and current commands instead: `npm run va
 6. update `RESOLUTION.md`
 7. run `npm run validate`
 8. run `npm run validate:release`
-9. `validate` checks local structure and checksums; `validate:release` adds external URL resolution and derivative-bundle reproducibility before publication claims
+9. `validate` checks local structure and canonical root checksum coverage; `validate:release` adds external URL resolution and derivative-bundle reproducibility before publication claims
 10. after review, have a maintainer create or move the release tag on the exact validated commit; the release snapshot is the tagged commit plus `checksums.txt`
 
 ## Release procedure
 
-- Root artifacts are canonical.
+- Root artifacts are canonical for the `v1.1.0` line.
 - `dist-pin/agent-cards/v1.1.0/` is committed to git, reproducible from the repository root, always rebuilt from the canonical root artifacts, and never an independent authority surface.
 - `.well-known/` is discovery-only.
 - A maintainer must create or move any release tag after validation; this repo does not imply that an unreleased tag already exists.

POLICY.md

@@ -3,7 +3,7 @@
 ## Release policy
 
 - `v1.1.0` is the current release-candidate Agent Cards line.
-- Root repository artifacts for `v1.1.0` are the source of truth.
+- Root repository artifacts for `v1.1.0` are canonical.
 - `v1.0.0` is superseded and retained only as an archival compatibility line.
 - Current v1.1.0 work must stay flat and self-contained.
 - Current v1.1.0 work must not reintroduce `_shared`.
@@ -12,7 +12,7 @@
 
 - `meta/manifest.json` is the canonical registry index.
 - `.well-known/` files are discovery pointers only.
-- `dist-pin/agent-cards/v1.1.0/` is a derivative current-line bundle for pinning/repinning.
+- `dist-pin/agent-cards/v1.1.0/` is a derivative current-line bundle for pinning/repinning and reproducible verification.
 - No surface other than the root `v1.1.0` artifacts may be treated as co-equal authority.
 
 ## Binding policy
@@ -23,4 +23,4 @@
 
 ## Release integrity
 
-Canonical cards, canonical schemas, manifest, discovery pointers, checksums, and the derivative dist-pin bundle must move together.
+Canonical cards, canonical schemas, manifest, discovery pointers, root checksum records, and the derivative dist-pin bundle verification target must move together.

README.md

@@ -167,7 +167,7 @@ agent-cards/
 - `node scripts/build-dist-pin.mjs` — rebuild the committed derivative publish bundle from canonical root files
 - `npm run validate:release` — the canonical release validation entrypoint; it runs `npm run validate` first and then:
   - confirms `meta/manifest.json` matches every current card binding
-  - confirms `dist-pin/agent-cards/v1.1.0/` matches a freshly generated derivative bundle
+  - confirms `dist-pin/agent-cards/v1.1.0/` matches a freshly generated derivative bundle built from the canonical root files
   - resolves every upstream tagged schema URL over the network
   - optionally resolves mirrors when run with `--require-mirrors`
 
@@ -184,7 +184,7 @@ The current release review checks:
 - direct `commandlayer.org` mirror URL patterns
 - exact manifest/card cross-validation for indexed current-line entries
 - entry URI correctness
-- checksum determinism across authoritative root artifacts and the derivative dist-pin bundle so both surfaces can be reviewed independently
+- checksum determinism across authoritative root artifacts, plus separate derivative-bundle verification for `dist-pin/`, so each release surface can be reviewed without blurring authority
 
 ## Release procedure
 
@@ -221,6 +221,6 @@ This keeps the trust story narrow: root artifacts are canonical, `dist-pin/` is
 - `meta/manifest.json` — canonical registry index for the release
 - `.well-known/agent.json` — current discovery pointer to the canonical registry metadata
 - `.well-known/agent-cards-v1.1.0.json` — immutable versioned discovery descriptor for `v1.1.0`
-- `dist-pin/agent-cards/v1.1.0/` — committed derivative published bundle copied from canonical root artifacts for pinning/repinning and reproducible from the repository root
+- `dist-pin/agent-cards/v1.1.0/` — committed derivative published bundle copied from canonical root artifacts for pinning/repinning and verified by rebuild, not by co-equal authority
 - `agents/v1.0.0/`, `schemas/v1.0.0/`, and `dist-pin/agent-cards/v1.0.0/` — archival compatibility surfaces only
-- `checksums.txt` — deterministic artifact digests across the authoritative root release set and the committed derivative publish bundle
+- `checksums.txt` — deterministic artifact digests for the authoritative root release set; the derivative publish bundle is verified separately by reproducible rebuild

SPEC.md

@@ -28,7 +28,7 @@ They do not define semantic meaning, feature behavior, or implementation detail.
 - `checksums.txt` covers both the authoritative root artifacts and the derived `dist-pin/` bundle so reviewers can verify source and derivative release surfaces independently.
 - `v1.0.0` is superseded and retained only for archival compatibility. Legacy `v1.0.0` references may still rely on IPFS-era addressing and must be read as archival material, not the current authority path.
 
-## 3. Current schema files
+## 3. Legacy schema files
 
 The current line uses exactly these repository-owned schema files:
 
@@ -37,7 +37,7 @@ The current line uses exactly these repository-owned schema files:
 
 Legacy schema files under `schemas/v1.0.0/` remain in-tree only to preserve the archived `v1.0.0` line. They are not part of the current authority model.
 
-## 4. Required card fields
+## 5. Required card fields
 
 Every canonical v1.1.0 card MUST satisfy the current schema and include the current-line publication fields.
 
@@ -60,9 +60,9 @@ The v1.1.0 JSON Schema requires 14 top-level fields. That count does not include
 
 The schema also requires `schemas.request`, `schemas.receipt`, `schemas_mirror.request`, and `schemas_mirror.receipt`.
 
-`$schema` and `$id` are defined properties and current-line repo publication fields, but they are not schema-required fields.
+`$schema` and `$id` are defined properties and current-line publication fields, but they are not schema-required fields.
 
-## 5. Versioning rules
+## 6. Versioning rules
 
 - v1.1.0 cards live under `agents/v1.1.0/`
 - `version` MUST equal `1.1.0`
@@ -73,9 +73,9 @@ The schema also requires `schemas.request`, `schemas.receipt`, `schemas_mirror.r
 - Commercial artifacts MAY include x402-aligned payment proof or settlement references where applicable. The x402 protocol is external to this specification and should be treated as its own canonical protocol surface at `https://docs.x402.org/`.
 - v1.0.0 MAY remain in the repository only as a legacy archival compatibility surface
 
-## 6. Binding rules
+## 7. Binding rules
 
-### 6.1 Commons
+### 7.1 Commons
 
 A Commons v1.1.0 card MUST bind directly to:
 
@@ -84,7 +84,7 @@ A Commons v1.1.0 card MUST bind directly to:
 - mirror request URL: `https://commandlayer.org/schemas/v1.1.0/commons/<verb>/<verb>.request.schema.json`
 - mirror receipt URL: `https://commandlayer.org/schemas/v1.1.0/commons/<verb>/<verb>.receipt.schema.json`
 
-### 6.2 Commercial
+### 7.2 Commercial
 
 A Commercial v1.1.0 card MUST bind directly to:
 
@@ -95,7 +95,7 @@ A Commercial v1.1.0 card MUST bind directly to:
 
 Commercial v1.1.0 is flat in the same style as Commons v1.1.0.
 
-## 7. Descriptor rules
+## 8. Descriptor rules
 
 Current discovery descriptors MUST validate under `schemas/v1.1.0/agent.descriptor.schema.json` and point at:
 
@@ -105,7 +105,7 @@ Current discovery descriptors MUST validate under `schemas/v1.1.0/agent.descript
 
 Discovery descriptors are pointers. They are not the canonical registry index.
 
-## 8. Conformance
+## 9. Conformance
 
 A repo state is conformant when:
 
@@ -114,6 +114,6 @@ A repo state is conformant when:
 - current cards contain only the minimal canonical binding fields
 - cards point at direct source URLs and intended `commandlayer.org` mirrors for release validation
 - `meta/manifest.json` describes the same current release line as the discovery descriptors
-- the derivative `dist-pin/agent-cards/v1.1.0/` bundle matches the canonical root release artifacts
+- the derivative `dist-pin/agent-cards/v1.1.0/` bundle matches a reproducible rebuild from the canonical root release artifacts
 - `checksums.txt` matches repo contents
 - `npm run validate` passes

checksums.txt

@@ -1,5 +1,5 @@
-0e71d19605b66d56ef412d84e28cd97404d35b0aaa9819cf8f8eafda1679a203  .well-known/agent-cards-v1.1.0.json
-28fbc1f9f2c4640966498935d874d96c4e5d3041356901dc27314e44720d88dc  .well-known/agent.json
+f7cffcc154397cb4b5c37c05944cdf75c292b2f994d0affda500711b61d33811  .well-known/agent-cards-v1.1.0.json
+8bafbd3c62d16d447a2a8835ac3693e407469f611368672dbbccf624522fbc03  .well-known/agent.json
 b7d185443a2efcf37f760f687b38963558dc82899fa249f6b0a43a6631ebb717  agents/v1.0.0/commercial/authorizeagent.eth.json
 864bfc0467080e4ff6c1514f044449eed79790a5cab420588c052e6ff77c47aa  agents/v1.0.0/commercial/checkoutagent.eth.json
 0f718f2125c5e6b792c56156f7312e98b8ec7b6e53df24436423135f6ae4abca  agents/v1.0.0/commercial/purchaseagent.eth.json

dist-pin/agent-cards/v1.1.0/.well-known/agent-cards-v1.1.0.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/agent-cards/v1.1.0",
   "name": "CommandLayer Agent Cards Registry Descriptor (v1.1.0)",
-  "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate line.",
+  "description": "Versioned discovery descriptor for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

dist-pin/agent-cards/v1.1.0/.well-known/agent.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/agent-cards/v1.1.0",
   "name": "CommandLayer Agent Cards Registry",
-  "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate line.",
+  "description": "Well-known discovery pointer for the current CommandLayer Agent Cards v1.1.0 release-candidate repository line.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

dist-pin/agent-cards/v1.1.0/meta/commercial-agent.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/commercial-agent/v1.1.0",
   "name": "CommandLayer Commercial Agent Registry",
-  "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate bindings.",
+  "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate repository bindings.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

dist-pin/agent-cards/v1.1.0/meta/commons-agent.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/commons-agent/v1.1.0",
   "name": "CommandLayer Commons Agent Registry",
-  "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate bindings.",
+  "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate repository bindings.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

dist-pin/agent-cards/v1.1.0/meta/manifest.json

@@ -1,7 +1,7 @@
 {
   "name": "@commandlayer/agent-cards",
   "version": "1.1.0",
-  "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate line.",
+  "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.",
   "repository": "https://github.com/commandlayer/agent-cards",
   "homepage": "https://commandlayer.org/agent-cards",
   "owner": "commandlayer.eth",
@@ -48,9 +48,9 @@
       "agents",
       "schemas",
       "meta",
-      ".well-known",
-      "dist-pin/agent-cards/v1.1.0"
-    ]
+      ".well-known"
+    ],
+    "derivative_verification": "dist-pin/agent-cards/v1.1.0 must match a rebuild from the canonical root artifacts"
   },
   "entries": [
     {
@@ -295,10 +295,10 @@
     }
   ],
   "surface_roles": {
-    "root": "canonical source of truth for Agent Cards v1.1.0",
+    "root": "canonical repository artifacts for Agent Cards v1.1.0",
     "meta_manifest": "canonical registry index",
     "well_known": "discovery pointers only",
-    "dist_pin": "derivative current-line bundle for pinning/repinning; not independent authority",
+    "dist_pin": "derivative current-line bundle for pinning/repinning and rebuild verification; not independent authority",
     "legacy_v1_0_0": "archival compatibility only"
   },
   "publication": {
@@ -307,6 +307,7 @@
     "discovery_role": ".well-known discovery pointers only",
     "derivative_bundle": "dist-pin/agent-cards/v1.1.0",
     "state": "release_candidate_pending_validation",
-    "external_bindings": "unconfirmed_until_validate_release_passes"
+    "external_bindings": "unconfirmed_until_validate_release_passes",
+    "checksum_scope": "checksums_txt_covers_root_release_surfaces_only"
   }
 }

meta/commercial-agent.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/commercial-agent/v1.1.0",
   "name": "CommandLayer Commercial Agent Registry",
-  "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate bindings.",
+  "description": "Registry descriptor pointer for CommandLayer Commercial Agent Cards v1.1.0 release-candidate repository bindings.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

meta/commons-agent.json

@@ -1,7 +1,7 @@
 {
   "id": "x402://commandlayer.eth/commons-agent/v1.1.0",
   "name": "CommandLayer Commons Agent Registry",
-  "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate bindings.",
+  "description": "Registry descriptor pointer for CommandLayer Commons Agent Cards v1.1.0 release-candidate repository bindings.",
   "owner": "commandlayer.eth",
   "ens": "commandlayer.eth",
   "version": "1.1.0",

meta/manifest.json

@@ -1,7 +1,7 @@
 {
   "name": "@commandlayer/agent-cards",
   "version": "1.1.0",
-  "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate line.",
+  "description": "Canonical registry index for the CommandLayer Agent Cards v1.1.0 release-candidate repository line.",
   "repository": "https://github.com/commandlayer/agent-cards",
   "homepage": "https://commandlayer.org/agent-cards",
   "owner": "commandlayer.eth",
@@ -48,9 +48,9 @@
       "agents",
       "schemas",
       "meta",
-      ".well-known",
-      "dist-pin/agent-cards/v1.1.0"
-    ]
+      ".well-known"
+    ],
+    "derivative_verification": "dist-pin/agent-cards/v1.1.0 must match a rebuild from the canonical root artifacts"
   },
   "entries": [
     {
@@ -295,10 +295,10 @@
     }
   ],
   "surface_roles": {
-    "root": "canonical source of truth for Agent Cards v1.1.0",
+    "root": "canonical repository artifacts for Agent Cards v1.1.0",
     "meta_manifest": "canonical registry index",
     "well_known": "discovery pointers only",
-    "dist_pin": "derivative current-line bundle for pinning/repinning; not independent authority",
+    "dist_pin": "derivative current-line bundle for pinning/repinning and rebuild verification; not independent authority",
     "legacy_v1_0_0": "archival compatibility only"
   },
   "publication": {
@@ -307,6 +307,7 @@
     "discovery_role": ".well-known discovery pointers only",
     "derivative_bundle": "dist-pin/agent-cards/v1.1.0",
     "state": "release_candidate_pending_validation",
-    "external_bindings": "unconfirmed_until_validate_release_passes"
+    "external_bindings": "unconfirmed_until_validate_release_passes",
+    "checksum_scope": "checksums_txt_covers_root_release_surfaces_only"
   }
 }