Separate VerifyAgent from agent-cards (remove product/demo artifacts & update docs)

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## [Unreleased]
+
+- Separated VerifyAgent into its own public Commons/MIT repository. Agent Cards documentation now focuses on identity, capability, endpoint, verb, and signer metadata. Public receipt verification is handled externally by VerifyAgent.
+
 ## [1.1.0]
 
 ### Normalization changes

ONBOARDING.md

@@ -23,6 +23,16 @@ Archival-only surfaces:
 - `schemas/v1.0.0/`
 - `dist-pin/agent-cards/v1.0.0/`
 
+
+## Product boundaries
+
+- Agent Cards describe identity metadata, capability metadata, endpoint discovery, supported verbs/actions, and signer/receipt metadata references.
+- CommandLayer receipts provide signed execution proof.
+- VerifyAgent is an external verifier for receipt validity checks.
+- CommandLayer Commercial provides hosted runtime, paid API, x402, indexing, dashboards, and support.
+
+For public receipt verification, see https://github.com/commandlayer/verifyagent.
+
 ## Editing rules
 
 1. Keep `$schema`, `$id`, `version`, `schemas`, and `entry` aligned.

README.md

@@ -44,6 +44,27 @@ This repo does not define x402 itself. See `https://docs.x402.org/` for the exte
 
 The repository root is authoritative. The `dist-pin/` bundle is reproducible and committed for distribution convenience, but it is not a co-equal source of truth.
 
+
+## Architecture boundaries
+
+Agent Cards answer:
+
+- “What is this agent, what can it do, and where are its endpoints?”
+
+CommandLayer receipts answer:
+
+- “What did this agent actually do?”
+
+VerifyAgent answers:
+
+- “Is this receipt valid or invalid?”
+
+CommandLayer Commercial answers:
+
+- “How do teams run, verify, index, and monitor receipts at scale?”
+
+For public receipt verification, see https://github.com/commandlayer/verifyagent.
+
 ## Current card shape
 
 A current card publishes only binding facts:

RESOLUTION.md

@@ -22,3 +22,10 @@ This log records formal repository-level decisions that affect the canonical Age
 - **Decision:** Normalize all commons cards to the canonical runtime execute entry, preserve x402 routing only for commercial cards, and enforce the split in schemas, validation, manifests, dist-pin artifacts, and repository documentation.
 - **Rationale:** The repository should publish one coherent invocation model: commons are runtime-first and non-x402 at entry, while commercial cards remain payment-aware and x402-routed. Leaving mixed semantics in cards, docs, or validators would make the release contract misleading.
 - **Affected artifacts:** `agents/v1.0.0/commons/*.json`, `agents/v1.1.0/commons/*.json`, `schemas/v1.0.0/_shared/agent.card.base.schema.json`, `schemas/v1.1.0/agent.card.schema.json`, `scripts/validate-cards.mjs`, `meta/manifest.json`, `meta/commons-agent.json`, `meta/commercial-agent.json`, `README.md`, `SPEC.md`, `ONBOARDING.md`, `CHANGELOG.md`, `checksums.txt`, `dist-pin/agent-cards/v1.1.0/**`.
+
+### 2026-04-28 — VerifyAgent separated from Agent Cards repository scope
+
+- **Decision:** Remove VerifyAgent-specific product/demo artifacts from Agent Cards publication surfaces and treat VerifyAgent as an external public verifier.
+- **Rationale:** Agent Cards should stay focused on identity, capabilities, endpoint discovery, verbs, and signer metadata references; public receipt validation belongs in the dedicated VerifyAgent repository.
+- **Affected artifacts:** `agents/v1.0.0/commercial/verifyagent.eth.json`, `agents/v1.1.0/commercial/verifyagent.eth.json`, `meta/manifest.json`, `scripts/validate-cards.mjs`, `README.md`, `SPEC.md`, `ONBOARDING.md`, `CHANGELOG.md`, `SECURITY_PROVENANCE.md`, `checksums.txt`, `dist-pin/agent-cards/v1.1.0/**`.
+

SECURITY_PROVENANCE.md

@@ -8,3 +8,5 @@ CommandLayer Agent Cards prove identity and routing intent. They do not prove ex
 - direct commandlayer.org canonical hosted schema URLs
 - deterministic repo checksums
 - derivative current-line bundle under `dist-pin/agent-cards/v1.1.0/`, regenerated from the canonical root artifacts
+
+For public receipt verification, see https://github.com/commandlayer/verifyagent.

SPEC.md

@@ -120,3 +120,16 @@ A repository state is conformant when:
 - all commercial cards use the x402 entry pattern
 - docs, manifests, examples, and validation agree with the implementation
 - `npm run validate` passes
+
+## 10. Responsibility boundaries
+
+Agent Cards answer: “What is this agent, what can it do, and where are its endpoints?”
+
+CommandLayer receipts answer: “What did this agent actually do?”
+
+VerifyAgent answers: “Is this receipt valid or invalid?”
+
+CommandLayer Commercial answers: “How do teams run, verify, index, and monitor receipts at scale?”
+
+For public receipt verification, see https://github.com/commandlayer/verifyagent.
+

checksums.txt

@@ -4,7 +4,6 @@ f7cffcc154397cb4b5c37c05944cdf75c292b2f994d0affda500711b61d33811  .well-known/ag
 696590db0df149c123ebe3df5c12cf435f8ba630dac59c0c1b638af7ef9039b9  agents/v1.0.0/commercial/checkoutagent.eth.json
 abe8b96917ff4d082d7b860b019d9600c212c02a7998351b19177424b4c88259  agents/v1.0.0/commercial/purchaseagent.eth.json
 3973cb8d54a83873b303de5cc4a3af68160ced90f4f04831a9af94a370d5685f  agents/v1.0.0/commercial/shipagent.eth.json
-b25ed6dac3d90d9cb3fbf814b7488429c96501d987ee69255ae5cbe72f8dd191  agents/v1.0.0/commercial/verifyagent.eth.json
 432e5c08eb8157b7ca752fbe35ac05870f58b8f943641382043a064ff86690e2  agents/v1.0.0/commons/analyzeagent.eth.json
 edcfccc885c88a84202465b58e2b6801cb339a2c9124ee39369d86256ff6066f  agents/v1.0.0/commons/classifyagent.eth.json
 ff0ee81ec6c1aa04b139837aaabc84a273d8de4f7578987e6bb48cae7e7aaa7e  agents/v1.0.0/commons/cleanagent.eth.json
@@ -19,7 +18,6 @@ fae679cdadd05a614a0e7dda645b7b86d17270b2fa37ffd470e288e2507f0bc9  agents/v1.0.0/
 67225e8c0c4498a5b344022689d42d6fd7274013a375bf5cfcd7ecd43bab7390  agents/v1.1.0/commercial/checkoutagent.eth.json
 fa3f32eeb942c8145b568a33c99fc4bbae4dab8ac323816ffaf678e5c24af59b  agents/v1.1.0/commercial/purchaseagent.eth.json
 df8947532ccbe6f0516f8e576ef8849cb8b3a479ddf6b42b96b63f6f6e79b394  agents/v1.1.0/commercial/shipagent.eth.json
-25792c8aaec5bee55b6a64363e1f2f28246560645f62bd926f70147eaa44f1de  agents/v1.1.0/commercial/verifyagent.eth.json
 faceed0281aaf0f4333616a2e81a9345d6e28668a046e1ebb3a539050adb5721  agents/v1.1.0/commons/analyzeagent.eth.json
 b36dce8ae75b2bb8bcbcc2cadc51bfe43f7fbd41dcb68ba0993d144d00ed4bb3  agents/v1.1.0/commons/classifyagent.eth.json
 23c9b0531feaf585dbca9c705fa52de49d96242ebc1ff557f2b1f78931bc351a  agents/v1.1.0/commons/cleanagent.eth.json
@@ -34,7 +32,7 @@ e97c5cc4267a8b5ac5ab7795b1da57f5ca5516f7760464d02af2aca1ffed03e8  agents/v1.1.0/
 d9fbd6adc82e9b69f72507472a0dead801a245ae97b764a8e1f857ad22a0000c  dist-pin/agent-cards/v1.0.0/ARCHIVE_NOTICE.md
 6cc84041df17bd0c2d43d1a65d3d10e605598638921bc22d47e24c29c612c550  dist-pin/agent-cards/v1.0.0/meta/commercial-agent.json
 abca8c9bb27e93c285df17848e1fdd65a3ba7c7002a9bc866799a78b46e7504a  dist-pin/agent-cards/v1.0.0/meta/commons-agent.json
-da6eb3c33dbc93060ef43194b4f3326fcf401f113e2b4e44b3a8a1e921452664  dist-pin/agent-cards/v1.0.0/meta/manifest.json
+f936634dbefec30fa056d25af064301898bd33535fa878036345a760a569d124  dist-pin/agent-cards/v1.0.0/meta/manifest.json
 ec6b2669daca50f99c9b8e04db7b8010169786788431cd74b68e547441216b8a  dist-pin/agent-cards/v1.0.0/schemas/v1.0.0/_shared/agent.card.base.schema.json
 c22100701ae9ebad97cfc1cb468a0369e424a0cdcec2d62968b848ef5d14369c  dist-pin/agent-cards/v1.0.0/schemas/v1.0.0/_shared/agent.descriptor.schema.json
 f7cffcc154397cb4b5c37c05944cdf75c292b2f994d0affda500711b61d33811  dist-pin/agent-cards/v1.1.0/.well-known/agent-cards-v1.1.0.json
@@ -43,7 +41,6 @@ f7cffcc154397cb4b5c37c05944cdf75c292b2f994d0affda500711b61d33811  dist-pin/agent
 67225e8c0c4498a5b344022689d42d6fd7274013a375bf5cfcd7ecd43bab7390  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commercial/checkoutagent.eth.json
 fa3f32eeb942c8145b568a33c99fc4bbae4dab8ac323816ffaf678e5c24af59b  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commercial/purchaseagent.eth.json
 df8947532ccbe6f0516f8e576ef8849cb8b3a479ddf6b42b96b63f6f6e79b394  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commercial/shipagent.eth.json
-25792c8aaec5bee55b6a64363e1f2f28246560645f62bd926f70147eaa44f1de  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commercial/verifyagent.eth.json
 faceed0281aaf0f4333616a2e81a9345d6e28668a046e1ebb3a539050adb5721  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commons/analyzeagent.eth.json
 b36dce8ae75b2bb8bcbcc2cadc51bfe43f7fbd41dcb68ba0993d144d00ed4bb3  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commons/classifyagent.eth.json
 23c9b0531feaf585dbca9c705fa52de49d96242ebc1ff557f2b1f78931bc351a  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commons/cleanagent.eth.json
@@ -56,12 +53,12 @@ e97c5cc4267a8b5ac5ab7795b1da57f5ca5516f7760464d02af2aca1ffed03e8  dist-pin/agent
 2b8ef717f1948f5e89c01a1e6bee442a69e830a7b82ce19a1a20c48be077f1a7  dist-pin/agent-cards/v1.1.0/agents/v1.1.0/commons/summarizeagent.eth.json
 677ae3df7a763cd00a009400f65466d44b0772586c37106de4b59783fea4af9b  dist-pin/agent-cards/v1.1.0/meta/commercial-agent.json
 2d9dff778fa401d7529652a0f7922a0242140bbffad7b1ac59d22c1c62202d27  dist-pin/agent-cards/v1.1.0/meta/commons-agent.json
-db7f23b61040f1b011c62b7395bfd209e3c5146a609342d8fe57dfff306c6e32  dist-pin/agent-cards/v1.1.0/meta/manifest.json
+26f22117e722bb7a0af2f705a5feeaa1414b850e45a4b8914e6a673d967397f9  dist-pin/agent-cards/v1.1.0/meta/manifest.json
 99475539b7f695f4ea788c2f3e5d3f8246fb7389162ada0410a0d905996226b2  dist-pin/agent-cards/v1.1.0/schemas/v1.1.0/agent.card.schema.json
 6e082c065b0ab5365b0fe3424062855587e6226a06b5ee092d77f91ea829afe2  dist-pin/agent-cards/v1.1.0/schemas/v1.1.0/agent.descriptor.schema.json
 677ae3df7a763cd00a009400f65466d44b0772586c37106de4b59783fea4af9b  meta/commercial-agent.json
 2d9dff778fa401d7529652a0f7922a0242140bbffad7b1ac59d22c1c62202d27  meta/commons-agent.json
-db7f23b61040f1b011c62b7395bfd209e3c5146a609342d8fe57dfff306c6e32  meta/manifest.json
+26f22117e722bb7a0af2f705a5feeaa1414b850e45a4b8914e6a673d967397f9  meta/manifest.json
 574647c82e141deb428fcab4f5ae484bde2752d4924eeec96433a15cd176a56a  schemas/v1.0.0/_shared/agent.card.base.schema.json
 c22100701ae9ebad97cfc1cb468a0369e424a0cdcec2d62968b848ef5d14369c  schemas/v1.0.0/_shared/agent.descriptor.schema.json
 99475539b7f695f4ea788c2f3e5d3f8246fb7389162ada0410a0d905996226b2  schemas/v1.1.0/agent.card.schema.json

dist-pin/agent-cards/v1.0.0/meta/manifest.json

@@ -175,18 +175,6 @@
       ],
       "agent_card": "https://commandlayer.org/agent-cards/agents/v1.0.0/commercial/shipagent.eth.json",
       "agent_card_ipfs": "ipfs://bafybeihwxbbslsmvdnt3qj6qg5e6uj44hokxgs4h6p43jdmjyghvzjz4l4/agents/v1.0.0/commercial/shipagent.eth.json"
-    },
-    {
-      "id": "verifyagent.eth",
-      "class": "commercial",
-      "ens": "verifyagent.eth",
-      "version": "1.0.0",
-      "status": "protocol_reference",
-      "networks": [
-        "eip155:1"
-      ],
-      "agent_card": "https://commandlayer.org/agent-cards/agents/v1.0.0/commercial/verifyagent.eth.json",
-      "agent_card_ipfs": "ipfs://bafybeihwxbbslsmvdnt3qj6qg5e6uj44hokxgs4h6p43jdmjyghvzjz4l4/agents/v1.0.0/commercial/verifyagent.eth.json"
     }
   ],
   "meta": {

dist-pin/agent-cards/v1.1.0/checksums.txt

@@ -4,7 +4,6 @@ f7cffcc154397cb4b5c37c05944cdf75c292b2f994d0affda500711b61d33811  .well-known/ag
 67225e8c0c4498a5b344022689d42d6fd7274013a375bf5cfcd7ecd43bab7390  agents/v1.1.0/commercial/checkoutagent.eth.json
 fa3f32eeb942c8145b568a33c99fc4bbae4dab8ac323816ffaf678e5c24af59b  agents/v1.1.0/commercial/purchaseagent.eth.json
 df8947532ccbe6f0516f8e576ef8849cb8b3a479ddf6b42b96b63f6f6e79b394  agents/v1.1.0/commercial/shipagent.eth.json
-25792c8aaec5bee55b6a64363e1f2f28246560645f62bd926f70147eaa44f1de  agents/v1.1.0/commercial/verifyagent.eth.json
 faceed0281aaf0f4333616a2e81a9345d6e28668a046e1ebb3a539050adb5721  agents/v1.1.0/commons/analyzeagent.eth.json
 b36dce8ae75b2bb8bcbcc2cadc51bfe43f7fbd41dcb68ba0993d144d00ed4bb3  agents/v1.1.0/commons/classifyagent.eth.json
 23c9b0531feaf585dbca9c705fa52de49d96242ebc1ff557f2b1f78931bc351a  agents/v1.1.0/commons/cleanagent.eth.json
@@ -17,6 +16,6 @@ e97c5cc4267a8b5ac5ab7795b1da57f5ca5516f7760464d02af2aca1ffed03e8  agents/v1.1.0/
 2b8ef717f1948f5e89c01a1e6bee442a69e830a7b82ce19a1a20c48be077f1a7  agents/v1.1.0/commons/summarizeagent.eth.json
 677ae3df7a763cd00a009400f65466d44b0772586c37106de4b59783fea4af9b  meta/commercial-agent.json
 2d9dff778fa401d7529652a0f7922a0242140bbffad7b1ac59d22c1c62202d27  meta/commons-agent.json
-db7f23b61040f1b011c62b7395bfd209e3c5146a609342d8fe57dfff306c6e32  meta/manifest.json
+26f22117e722bb7a0af2f705a5feeaa1414b850e45a4b8914e6a673d967397f9  meta/manifest.json
 99475539b7f695f4ea788c2f3e5d3f8246fb7389162ada0410a0d905996226b2  schemas/v1.1.0/agent.card.schema.json
 6e082c065b0ab5365b0fe3424062855587e6226a06b5ee092d77f91ea829afe2  schemas/v1.1.0/agent.descriptor.schema.json

dist-pin/agent-cards/v1.1.0/meta/manifest.json

@@ -37,7 +37,7 @@
       "source_repo": "https://github.com/commandlayer/protocol-commercial",
       "source_tag": "v1.1.0",
       "shape": "flat",
-      "count": 5,
+      "count": 4,
       "entry_pattern": "x402://<agent>/<verb>/v1.1.0",
       "schema_root": "https://commandlayer.org/schemas/v1.1.0/commercial"
     }
@@ -109,20 +109,6 @@
         "eip155:1"
       ]
     },
-    {
-      "id": "verifyagent.eth",
-      "class": "commercial",
-      "verb": "verify",
-      "version": "1.1.0",
-      "agent_card": "https://commandlayer.org/agent-cards/agents/v1.1.0/commercial/verifyagent.eth.json",
-      "schema_request": "https://commandlayer.org/schemas/v1.1.0/commercial/verify/verify.request.schema.json",
-      "schema_receipt": "https://commandlayer.org/schemas/v1.1.0/commercial/verify/verify.receipt.schema.json",
-      "entry": "x402://verifyagent.eth/verify/v1.1.0",
-      "status": "protocol_reference",
-      "networks": [
-        "eip155:1"
-      ]
-    },
     {
       "id": "analyzeagent.eth",
       "class": "commons",
@@ -276,8 +262,8 @@
     "canonical_root": "repository-root-artifacts",
     "discovery_role": ".well-known discovery pointers only",
     "derivative_bundle": "dist-pin/agent-cards/v1.1.0",
-    "state": "release_candidate_pending_validation",
-    "external_bindings": "unconfirmed_until_validate_release_passes",
+    "state": "published",
+    "external_bindings": "confirmed",
     "checksum_scope": "checksums_txt_covers_root_release_surfaces_only"
   }
 }

meta/manifest.json

@@ -37,7 +37,7 @@
       "source_repo": "https://github.com/commandlayer/protocol-commercial",
       "source_tag": "v1.1.0",
       "shape": "flat",
-      "count": 5,
+      "count": 4,
       "entry_pattern": "x402://<agent>/<verb>/v1.1.0",
       "schema_root": "https://commandlayer.org/schemas/v1.1.0/commercial"
     }
@@ -109,20 +109,6 @@
         "eip155:1"
       ]
     },
-    {
-      "id": "verifyagent.eth",
-      "class": "commercial",
-      "verb": "verify",
-      "version": "1.1.0",
-      "agent_card": "https://commandlayer.org/agent-cards/agents/v1.1.0/commercial/verifyagent.eth.json",
-      "schema_request": "https://commandlayer.org/schemas/v1.1.0/commercial/verify/verify.request.schema.json",
-      "schema_receipt": "https://commandlayer.org/schemas/v1.1.0/commercial/verify/verify.receipt.schema.json",
-      "entry": "x402://verifyagent.eth/verify/v1.1.0",
-      "status": "protocol_reference",
-      "networks": [
-        "eip155:1"
-      ]
-    },
     {
       "id": "analyzeagent.eth",
       "class": "commons",

scripts/validate-cards.mjs

@@ -16,7 +16,7 @@ const SCHEMA_ROOTS = {
 };
 
 const commonsVerbs = ["analyze", "classify", "clean", "convert", "describe", "explain", "fetch", "format", "parse", "summarize"];
-const commercialVerbs = ["authorize", "checkout", "purchase", "ship", "verify"];
+const commercialVerbs = ["authorize", "checkout", "purchase", "ship"];
 const expectedV11 = {
   commons: commonsVerbs.map((verb) => `${verb}agent.eth.json`),
   commercial: commercialVerbs.map((verb) => `${verb}agent.eth.json`)