{"ok":true,"schema":"aevesa-open-evidence/v1","phase":"q4-2026","category":"Agent Protocol of Record","verifyApiTier":{"headerName":"X-Aevesa-Verify-Key","tiers":{"public":40,"auditor":200,"enterprise":1000},"mintEndpoint":"/api/v1/apor/verify-keys","hostedOrigin":"https://verify.aevesa.com"},"endpoints":{"spec":{"method":"GET","path":"/api/v1/public/evidence/spec"},"entry":{"method":"GET","path":"/api/v1/public/evidence/entry/:entryHash"},"witnessCosign":{"method":"GET","path":"/api/v1/public/evidence/witness/:entryHash","schema":"aevesa.witness-cosign-verify/v1","note":"Phase 4.2.2 - independent witness cosign check for ledger entryHash"},"proveBundle":{"method":"POST","path":"/api/v1/public/evidence/prove-bundle","schema":"aevesa.prove-bundle-verify/v1","note":"P0 - gateway receipt + witness cosign single verify flow"},"proveBundleByHash":{"method":"GET","path":"/api/v1/public/evidence/prove-bundle/:entryHash","schema":"aevesa.prove-bundle-verify/v1","note":"Witness cosign + ledger hints for entryHash (POST receipt for full offline verify)"},"scittRefusalWitness":{"method":"GET","path":"/api/v1/public/evidence/scitt-refusal/:receiptDigest","schema":"aevesa.scitt-refusal-witness-verify/v1","note":"P2 - SCITT refusal-event witness check for DENIED receipt digest"},"guardianWitnessDemo":{"method":"GET","path":"/api/v1/public/evidence/guardian-demo","schema":"aevesa.guardian-witness-demo/v1","note":"Wave 1.1 - public Independent Guardian witness cosign demo (?seed=1 to anchor)"},"evidenceCustodianDemo":{"method":"GET","path":"/api/v1/public/evidence/custodian-demo","schema":"aevesa.evidence-custodian-verify/v1","note":"Wave 4 Track A - guardian attest + independent witness custodian profile (?seed=1 to anchor)"},"setCompletenessDemo":{"method":"GET","path":"/api/v1/public/evidence/set-completeness-demo","schema":"aevesa.set-completeness/v1","note":"Wave 4 Track D - session set-completeness manifest + terminal partial_path binding","openSpec":"spec/aevesa-set-completeness-v1.json"},"receiverNetworkDemo":{"method":"GET","path":"/api/v1/public/evidence/receiver-network-demo","schema":"aevesa.receiver-network-demo/v1","note":"Wave 4 Track F - multi-party gateway + receiver cosign pilot (?seed=1 to anchor ack)"},"commitGateDemo":{"method":"GET","path":"/api/v1/public/evidence/commit-gate-demo","schema":"aevesa.commit-gate-verify/v1","note":"Tier 1 - receipt-before-action permit + escalation refusal evidence","doc":"docs/standards/COMMIT_GATE_PROFILE.md"},"killSwitchAttestationDemo":{"method":"GET","path":"/api/v1/public/evidence/kill-switch-attestation-demo","schema":"aevesa.kill-switch-attestation/v1","note":"Tier 1 - live kill-switch test attestation (carrier control #1)","doc":"docs/standards/KILL_SWITCH_ATTESTATION_PROFILE.md"},"scittAirDemo":{"method":"GET","path":"/api/v1/public/evidence/scitt-air-demo","schema":"aevesa.scitt-air-verify/v1","note":"Tier 1 - SCITT AIR draft alignment on liability receipt (?seed=1 to anchor witness)","doc":"docs/standards/SCITT_AIR_PROFILE_ALIGNMENT.md"},"autonomyTierAttestationDemo":{"method":"GET","path":"/api/v1/public/evidence/autonomy-tier-attestation-demo","schema":"aevesa.autonomy-tier-attestation/v1","note":"Tier 2 - CSA 4-tier + VERA evidence portfolio binding","doc":"docs/standards/AUTONOMY_TIER_ATTESTATION_PROFILE.md"},"delegationAccountabilityDemo":{"method":"GET","path":"/api/v1/public/evidence/delegation-accountability-demo","schema":"aevesa.delegation-accountability/v1","note":"Tier 2 - OWASP ASI-03/07/08 delegation accountability","doc":"docs/standards/DELEGATION_ACCOUNTABILITY_PROFILE.md"},"owaspAsiRuntimeDemo":{"method":"GET","path":"/api/v1/public/evidence/owasp-asi-runtime-demo","schema":"aevesa.owasp-asi-runtime/v1","note":"Tier 2 - independent PEP runtime integrity with agent/tool binding","doc":"docs/standards/OWASP_ASI_RUNTIME_PROFILE.md"},"delegationChainDemo":{"method":"GET","path":"/api/v1/public/evidence/delegation-demo","schema":"kovera-delegation-chain/1","note":"Wave 2.1 - ADCS-aligned delegation chain demo (Agent A → B, scope narrowed)","openSpec":"spec/kovera-delegation-chain-1.json"},"deniedReceiptDemo":{"method":"GET","path":"/api/v1/public/evidence/denied-demo","schema":"liability-receipt/v1","note":"Wave 2.2 - gateway deny DENIED profile receipt demo","openSpec":"spec/liability-receipt-v1.json"},"incidentFreezeDemo":{"method":"GET","path":"/api/v1/public/evidence/incident-freeze-demo","schema":"kovera-incident-custody-pack/1","note":"Wave 2.3 - Art. 73 incident custody pack demo (freeze + witness cosign)","openSpec":"spec/kovera-incident-custody-pack-1.json"},"conformanceLabDemo":{"method":"GET","path":"/api/v1/public/evidence/conformance-lab-demo","schema":"aevesa.conformance-lab/1","note":"Wave 3.1 - gateway attest → receipt → verify interop lab index","openSpec":"spec/kovera-conformance-lab-1.json"},"crossVendorDemo":{"method":"GET","path":"/api/v1/public/evidence/cross-vendor-demo","schema":"aevesa.cross-vendor-integration/1","note":"Wave 3.2 - GRC auto-push, witness Rekor, OTLP pilot, Fortress PDP integration packs","openSpec":"spec/kovera-cross-vendor-integration-1.json"},"auditorPortal":{"method":"GET","path":"/api/v1/public/auditor-portal/:publicToken","note":"Q2 token-gated workspace + offline verify playbook"},"auditSession":{"method":"GET","path":"/api/v1/public/audit-session/:publicToken","note":"Legacy v1 session summary"},"truth":{"method":"GET","path":"/api/v1/public/truth","note":"Existing public truth snapshot"},"verifyReceipt":{"method":"POST","path":"/api/v1/public/verify-receipt","note":"Sovereignty receipt verify"},"demoVerify":{"method":"GET","path":"/api/v1/public/demo/verify/:entryHash"},"liabilityReceipt":{"method":"GET","path":"/api/v1/public/liability-receipt/:receiptId","schema":"liability-receipt/v1","note":"Verified Autonomous Session accountability receipt"},"grcEvidenceSink":{"method":"POST","path":"/api/v1/apor/grc-sink/dispatch","schema":"aevesa.grc-evidence/v1","note":"Phase 4.3.1 - Vanta/Drata/ITSM push with verifyPortalUrl","publicSpec":"spec/grc-evidence-v1.json"},"gatewayAttest":{"method":"POST","path":"/api/v1/apor/integrations/gateway-attest/ingest","schema":"aevesa.gateway-decision/v1","note":"Phase 4.3.2 - vendor-neutral gateway attest (generic_otlp, generic_webhook)","guide":"diligence-kit/docs/GATEWAY_ATTEST_GUIDE.md"},"fintechLighthouse":{"method":"POST","path":"/api/v1/public/lighthouse/fintech-payment-void/simulate","note":"FinTech payment void VAS POC"},"intentAlignment":{"method":"POST","path":"/api/v1/public/intent-alignment/evaluate","schema":"aevesa-intent-alignment/v1","kvr":"KVR-104","note":"Structural Proof-of-Intent scoring - level, score, signals (anonymous playground)"}},"offlinePackages":[{"name":"@aevesa/verifier","role":"Sovereignty receipt HMAC verify"},{"name":"@aevesa/verify","role":"Ledger preimage + Art.12 spec checks"}],"pillars":["intercept","decide","prove"],"conformancePrograms":[{"id":"receipt-before-action/v1","program":"aevesa.receipt-before-action-conformance/v1","test":"npm run test:receipt-before-action-conformance","badgeUrl":"https://aevesa.com/schemas/receipt-before-action/v1","doc":"docs/standards/RECEIPT_BEFORE_ACTION_CONFORMANCE.md"},{"id":"gateway-attest/v1","program":"aevesa.gateway-attest-conformance/v1","test":"npm run test:gateway-attest-conformance","badgeUrl":"https://aevesa.com/schemas/gateway-attest/v1","doc":"diligence-kit/docs/GATEWAY_ATTEST_GUIDE.md"},{"id":"gateway-otlp-attest/v1","program":"aevesa.gateway-otlp-attest-conformance/v1","test":"npm run test:gateway-otlp-attest-conformance","badgeUrl":"https://aevesa.com/schemas/gateway-otlp-attest/v1","doc":"diligence-kit/docs/ZSCALER_OTLP_ATTEST_GUIDE.md","vendors":["zscaler_ai_protect","wiz_ai_spm","generic_otlp"]},{"id":"scitt-refusal-witness/v1","program":"aevesa.scitt-refusal-witness-conformance/v1","test":"npm run test:scitt-refusal-witness-conformance","doc":"docs/standards/SCITT_REFUSAL_EVENT_ALIGNMENT.md","demo":"/api/v1/public/evidence/scitt-refusal"},{"id":"receiver-cosign/v1","program":"aevesa.receiver-cosign-conformance/v1","test":"npm run test:receiver-cosign-conformance","doc":"docs/architecture/VERIFICATION_ROADMAP_PRD.md","ingest_path":"POST /api/v1/apor/integrations/receiver-cosign/ack"},{"id":"prove-bundle-verify/v1","program":"aevesa.prove-bundle-verify-conformance/v1","test":"npm run test:prove-bundle-verify-conformance","doc":"docs/architecture/VERIFICATION_ROADMAP_PRD.md","demo":"/api/v1/public/evidence/prove-bundle"},{"id":"evidence-custodian/v1","program":"aevesa.evidence-custodian-conformance/v1","test":"npm run test:evidence-custodian-conformance","doc":"docs/architecture/AEVESA_WAVE4_EXPANSION_ROADMAP.md","demo":"/api/v1/public/evidence/custodian-demo"},{"id":"set-completeness/v1","program":"aevesa.set-completeness-conformance/v1","test":"npm run test:set-completeness-conformance","doc":"docs/standards/SET_COMPLETENESS_PROFILE.md","openSpec":"spec/aevesa-set-completeness-v1.json","demo":"/api/v1/public/evidence/set-completeness-demo"},{"id":"witness-cosign/v1","program":"aevesa.witness-cosign-conformance/v1","test":"npm run test:witness-cosign-conformance","doc":"docs/operations/GUARDIAN_WITNESS_GA_RUNBOOK.md"},{"id":"delegation-chain/1","program":"kovera-delegation-chain/1","test":"npm run test:delegation-chain","openSpec":"spec/kovera-delegation-chain-1.json","demo":"/api/v1/public/evidence/delegation-demo"},{"id":"denied-receipt/v1","program":"aevesa.denied-receipt-conformance/v1","test":"npm run test:denied-receipt-conformance","openSpec":"spec/liability-receipt-v1.json","demo":"/api/v1/public/evidence/denied-demo"},{"id":"incident-custody-pack/1","program":"kovera-incident-custody-pack-v1","test":"npm run test:incident-custody-pack","openSpec":"spec/kovera-incident-custody-pack-1.json","demo":"/api/v1/public/evidence/incident-freeze-demo"},{"id":"conformance-lab/1","program":"aevesa.conformance-lab/1","test":"npm run test:conformance-lab","interop":"npm run interop:gateway-to-verify","openSpec":"spec/kovera-conformance-lab-1.json","demo":"/api/v1/public/evidence/conformance-lab-demo"},{"id":"commit-gate/v1","program":"aevesa.commit-gate-conformance/v1","test":"npm run test:commit-gate-conformance","doc":"docs/standards/COMMIT_GATE_PROFILE.md","demo":"/api/v1/public/evidence/commit-gate-demo"},{"id":"kill-switch-attestation/v1","program":"aevesa.kill-switch-attestation-conformance/v1","test":"npm run test:kill-switch-attestation-conformance","doc":"docs/standards/KILL_SWITCH_ATTESTATION_PROFILE.md","demo":"/api/v1/public/evidence/kill-switch-attestation-demo"},{"id":"scitt-air/v1","program":"aevesa.scitt-air-conformance/v1","test":"npm run test:scitt-air-conformance","doc":"docs/standards/SCITT_AIR_PROFILE_ALIGNMENT.md","demo":"/api/v1/public/evidence/scitt-air-demo"},{"id":"naic-examiner-pack/v1","program":"aevesa.naic-examiner-pack-conformance/v1","test":"npm run test:naic-examiner-pack","doc":"diligence-kit/docs/NAIC_EXAMINER_EVIDENCE_PACK.md"},{"id":"autonomy-tier-attestation/v1","program":"aevesa.autonomy-tier-attestation-conformance/v1","test":"npm run test:autonomy-tier-attestation-conformance","doc":"docs/standards/AUTONOMY_TIER_ATTESTATION_PROFILE.md","demo":"/api/v1/public/evidence/autonomy-tier-attestation-demo"},{"id":"delegation-accountability/v1","program":"aevesa.delegation-accountability-conformance/v1","test":"npm run test:delegation-accountability-conformance","doc":"docs/standards/DELEGATION_ACCOUNTABILITY_PROFILE.md","demo":"/api/v1/public/evidence/delegation-accountability-demo"},{"id":"owasp-asi-runtime/v1","program":"aevesa.owasp-asi-runtime-conformance/v1","test":"npm run test:owasp-asi-runtime-conformance","doc":"docs/standards/OWASP_ASI_RUNTIME_PROFILE.md","demo":"/api/v1/public/evidence/owasp-asi-runtime-demo"},{"id":"imda-agentic-pack/v1","program":"aevesa.imda-agentic-pack-conformance/v1","test":"npm run test:imda-agentic-pack","doc":"diligence-kit/docs/IMDA_AGENTIC_EVIDENCE_PACK.md"},{"id":"cross-vendor-integration/1","program":"aevesa.cross-vendor-integration/1","test":"npm run test:cross-vendor-integration","openSpec":"spec/kovera-cross-vendor-integration-1.json","demo":"/api/v1/public/evidence/cross-vendor-demo","doc":"docs/standards/CROSS_VENDOR_INTEGRATION_PACK.md"}],"competitiveMatrix":"docs/standards/COMPETITIVE_MATRIX.md","conformanceLab":{"schema":"aevesa.conformance-lab/1","interopScript":"npm run interop:gateway-to-verify","test":"npm run test:conformance-lab","openSpec":"spec/kovera-conformance-lab-1.json","demo":"/api/v1/public/evidence/conformance-lab-demo","targetMinutes":5},"crossVendorIntegration":{"schema":"aevesa.cross-vendor-integration/1","test":"npm run test:cross-vendor-integration","openSpec":"spec/kovera-cross-vendor-integration-1.json","demo":"/api/v1/public/evidence/cross-vendor-demo","integrationPacks":[{"id":"kovera-cross-vendor-evidence-push-v1","priority":"P1","title":"GRC auto-push on ledger events","test":"npm run test:cross-vendor-integration","doc":"docs/standards/CROSS_VENDOR_INTEGRATION_PACK.md#grc-auto-push","env":["AEVESA_GRC_AUTO_PUSH","AEVESA_GRC_AUTO_PUSH_TARGETS"]},{"id":"aevesa-witness-transparency-v1","priority":"P1","title":"Witness log SCITT/Rekor transparency metadata","test":"npm run test:cross-vendor-integration","doc":"docs/standards/WITNESS_TRANSPARENCY_PROFILE.md","openSpec":"spec/kovera-cross-vendor-integration-1.json"},{"id":"aevesa-gateway-otlp-pilot-v1","priority":"P1","title":"OTLP attest production pilot kit","test":"npm run test:gateway-attest-conformance","doc":"docs/operations/GATEWAY_OTLP_PILOT_RUNBOOK.md"},{"id":"aevesa-verifiable-tool-treaties-v1","priority":"P2","title":"Verifiable tool treaties (in-toto + treaty registry)","test":"npm run test:phase4-conformance","doc":"docs/standards/CROSS_VENDOR_INTEGRATION_PACK.md#tool-treaties"},{"id":"aevesa-fortress-pdp-v1","priority":"P2","title":"Out-of-process PDP (Fortress mTLS isolation)","test":"npm run test:phase3-isolation-conformance","doc":"diligence-kit/docs/PEP_PDP_ARCHITECTURE.md"}]},"activeTier":"public","rateLimitPer15Min":40}