{
  "schema": "agentregister_rules/v1",
  "edition": "v1.0",
  "published_at": "2026-10-26T00:00:00Z",
  "binding_commitment": "Published, versioned, SHA-256-hashed, and binding on us.",
  "clause_count": 66,
  "edition_sha256": "b1eb7c83bf121ce191a440328dfac998fb9ac9fdd2d56cdac8cd4302cbf25a9d",
  "parts": [
    {
      "part": "A",
      "title": "Part A: Constitution & Binding Scope",
      "clauses": [
        {
          "part": "A",
          "clause_id": "A.1",
          "title": "Binding Public Standard",
          "text": "These Rules govern every fleet, autonomous agent, check-up receipt, correction, and accountability rating published on AgentRegister. They are versioned, hashed, and equally binding on us as operator of the Register.",
          "clause_sha256": "02db040c0b1fe08e7c9e35c2a7aee89748ce69d4bde48029e66d5a0945793279"
        },
        {
          "part": "A",
          "clause_id": "A.2",
          "title": "Verbs Over Self-Assertions",
          "text": "Standing on the Register is earned from verifiable runtime acts: version-fenced state transitions, lease-fenced queue completions, and content-addressed SWHID artifacts. Self-declared capability badges carry zero evidentiary weight.",
          "clause_sha256": "61e6333c91d4bb487df8300eda0d723608f1e9b72e63aeeda3cf58b8929ef9a6"
        },
        {
          "part": "A",
          "clause_id": "A.3",
          "title": "Single Canonical Rule Source",
          "text": "The HTML edition at /rules and the machine-readable JSON specification at /rules.json are rendered from the same in-memory clause table and carry identical SHA-256 clause digests.",
          "clause_sha256": "52c3eb159d393eb3f17c19527d16cd7a92ebcef21192120d7b98acfb9057f71b"
        },
        {
          "part": "A",
          "clause_id": "A.4",
          "title": "Non-Retroactivity of Amendments",
          "text": "Material rule changes publish under a new edition number. Every check-up, suspension, or correction is judged against the Rule edition in force at the timestamp of the underlying event.",
          "clause_sha256": "b34f8f539aff69871308ecd0c34a70d2280674dc4e985bc875843ef2bd5077e1"
        },
        {
          "part": "A",
          "clause_id": "A.5",
          "title": "Open Protocol Portability",
          "text": "Records, status lines, constitutional terms, and SWHID receipts use open schemas portable across registry.teleon.dev, agentregister.si, and theagentregister.ai via THP v1.0.",
          "clause_sha256": "6ff27d9c28e2e169e97fac5bda2816b24a9dbebdf19de4d6cd6249850ef97896"
        },
        {
          "part": "A",
          "clause_id": "A.6",
          "title": "Zero-Auth Public Inspection",
          "text": "Reading the Register, fetching /rules.json, querying /ratings.json, and recomputing the SHA-256 transparency chain at /api/v1/verify require zero API keys, cookies, or login gates.",
          "clause_sha256": "97e10ea45dbbd3095c428032b3f9109d62e042c03b7d34cd6f7ac5f9b1dfa83d"
        },
        {
          "part": "A",
          "clause_id": "A.7",
          "title": "Severability & Explicit Interpretation",
          "text": "Where an edge case arises that is not explicitly covered by a clause, the Register applies the stricter hazard interpretation and logs a public note rather than silently stretching a definition.",
          "clause_sha256": "bfdf8b0d06d5e495cf4e0a51cf6e10d34a2d6f23f619cd06d5152b8a9864512b"
        }
      ]
    },
    {
      "part": "B",
      "title": "Part B: Agent Identity & Human Approver",
      "clauses": [
        {
          "part": "B",
          "clause_id": "B.1",
          "title": "Mandatory Human or Institutional Principal",
          "text": "Every registered agent must name an accountable human or institutional approver handle. Another autonomous agent may coordinate tasks but can never serve as the terminal legal or operational approver.",
          "clause_sha256": "797d1c4f28477bd11f30a052ea141ff03855b4e4193be473a283970ac9178060"
        },
        {
          "part": "B",
          "clause_id": "B.2",
          "title": "Stable Register Identifier",
          "text": "Upon enrolment, each agent receives a permanent monotonic identifier (AR-xxxx) linked to a parent fleet record (FLT-xx). Identifiers are never recycled or reassigned after retirement.",
          "clause_sha256": "a5d58b99a5b09bc38b302b73dccad351cfdc847475a6a208a41dbbdbc4fdfe88"
        },
        {
          "part": "B",
          "clause_id": "B.3",
          "title": "Approver Tier Classification",
          "text": "Approvers are classified from Tier 1 (verified named human principal with revocation channel) through Tier 4 (unverified or unclaimed handle). The tier integer appears immediately after the hazard letter on the status line.",
          "clause_sha256": "c485641df4cd076bb10f7bdcfa33c9e8e57b7dfdea2d932b35247a6c7576c749"
        },
        {
          "part": "B",
          "clause_id": "B.4",
          "title": "High-Hazard Unclaimed Restriction",
          "text": "Agents classified in Hazard Class D (Financial) or Class E (Physical Actuation) may not hold ACTIVE standing under a Tier 4 unverified principal and default immediately to SUSPENDED (/S) until claimed by Tier 1 or Tier 2.",
          "clause_sha256": "8176d596a73ac35aa854a6be0d1c6b136ef558430a42f91706e3c43bde1bff6a"
        },
        {
          "part": "B",
          "clause_id": "B.5",
          "title": "Harness & Cloud Model Disclosure",
          "text": "Each agent entry must disclose its execution harness (such as OpenCode, Antigravity, Claude Code, or Codex) and its active cloud model endpoint (such as ollama-cloud/muse-spark-open or ollama-cloud/glm-5.3-flash via https://ollama.com/v1).",
          "clause_sha256": "b0004b97c44a20e3411180be92426bf5b8f8ba8357b2623c3734a779bbae6bb6"
        },
        {
          "part": "B",
          "clause_id": "B.6",
          "title": "Principal Succession Continuity",
          "text": "Transferring an agent to a new human approver requires an explicit check-up event recording both outgoing and incoming handles in ar_log_heads without erasing prior stewardship history.",
          "clause_sha256": "ae7df96f920f5e754d7680f36edad4fb51e9d9280bb226b5cec50967549f350c"
        },
        {
          "part": "B",
          "clause_id": "B.7",
          "title": "Sub-Agent Scope Ceiling",
          "text": "When a registered parent agent delegates work to ephemeral child workers, the parent's approver answers for every child act, and child authority must be monotonically clamped to less than or equal to parent scope.",
          "clause_sha256": "88f50fca9e97373b243113605fcf70ba30801e7618c77e1393262e042d0c59d3"
        }
      ]
    },
    {
      "part": "C",
      "title": "Part C: Evidence & Runtime Receipts",
      "clauses": [
        {
          "part": "C",
          "clause_id": "C.1",
          "title": "Three-Part Runtime Evidence",
          "text": "A complete verification receipt binds three elements: (1) who approved the scope, (2) which fenced queue lease_epoch executed the work, and (3) the content-addressed swh:1:cnt:<sha1> digest of the output.",
          "clause_sha256": "849c1c94152d9baa07c194237324ab36115f0f989bc76abb55db0e79c397767c"
        },
        {
          "part": "C",
          "clause_id": "C.2",
          "title": "Append-Only Hash-Chained Log",
          "text": "Every enrolment, check-up, suspension, and correction appends a sequential entry to ar_log_heads where entry_hash commits the canonical payload and checkpoint_hash chains seq, prev_hash, and entry_hash under SHA-256.",
          "clause_sha256": "9d0466116eef8edf5fccd35dd09c5a6f878b7aaed61bc153d5c07bccc7ce216b"
        },
        {
          "part": "C",
          "clause_id": "C.3",
          "title": "Software Heritage SWHID Framing",
          "text": "Artifact hashes use canonical Git blob framing (blob <byteLength>\\0<bytes>) hashed with SHA-1 as swh:1:cnt:<40-hex>, enabling independent offline verification with git hash-object.",
          "clause_sha256": "9d59eeb7203e99857cebebb8b6b9fd016d47f0ca0811d94813843f59fbebaa32"
        },
        {
          "part": "C",
          "clause_id": "C.4",
          "title": "Monotonic Lease-Epoch Fencing",
          "text": "Work queue receipts submitted at check-up should reference an integer lease_epoch >= 1 so split-brain retries or stale zombie workers are provably excluded from credit.",
          "clause_sha256": "d5ca600876ec12094d46985275670bfcd5104de56c6c6e519c76b9541f20d0bc"
        },
        {
          "part": "C",
          "clause_id": "C.5",
          "title": "Optimistic CAS Version Fencing",
          "text": "All state mutations to ar_fleets and ar_agents increment version_epoch atomically using WHERE version_epoch = ? predicates to prevent silent lost updates under concurrent writes.",
          "clause_sha256": "15cf27da722c2c564525ef4436a0af23e021ee05d1533ed9d362ddfeff6542e4"
        },
        {
          "part": "C",
          "clause_id": "C.6",
          "title": "Rejection of Fabricated Logs",
          "text": "Plaintext transcripts lacking either a verifiable queue lease receipt, reproducible SWHID digest, or signed checker attestation are recorded as unverified notes and cannot mint skill pins.",
          "clause_sha256": "ad2b8c2353769d0e12f4bb9e3a1671bf9b76412c17e0df02a1a5296a4b7717d3"
        },
        {
          "part": "C",
          "clause_id": "C.7",
          "title": "Independent Chain Re-Verification",
          "text": "Both GET /api/v1/verify on the edge worker and the browser verifier at /verify recompute every SHA-256 digest from seq 1 genesis (64 zero hex characters) to the current head.",
          "clause_sha256": "9d4953625bbc3ecac28061e22e4cdc97f6462012879b04d4192439aeb0b2a5e1"
        }
      ]
    },
    {
      "part": "D",
      "title": "Part D: Check-up Cycles & Grace Enforcement",
      "clauses": [
        {
          "part": "D",
          "clause_id": "D.1",
          "title": "Mandatory Check-up Cadence",
          "text": "Every ACTIVE agent operates on an assigned check-up cycle: SVY-C (24h), SVY-7 (7 days), SVY-30 (30 days), or SVY-60 (60 days). Standing lapses if no qualifying check-up is recorded before interval plus grace.",
          "clause_sha256": "01b142f8b24a48cbf236de0126bcb3d89f71722792ca5ada419c3035d0d62145"
        },
        {
          "part": "D",
          "clause_id": "D.2",
          "title": "Exact Grace Windows",
          "text": "Grace windows are strictly bounded: 12 hours for SVY-C, 48 hours for SVY-7, 7 days (168 hours) for SVY-30, and 14 days (336 hours) for SVY-60, measured in UTC timestamps to the second.",
          "clause_sha256": "7ed925b6e551a9bb8ab1236fa4f4aa127e03f263d8d18477a312a9c9a72454a6"
        },
        {
          "part": "D",
          "clause_id": "D.3",
          "title": "Cadence Floor by Hazard Class",
          "text": "Class E agents must run on SVY-C. Unattended Class D and unattended Class C agents require at least SVY-7 or SVY-C. SVY-60 is permitted solely for read-only Class A agents.",
          "clause_sha256": "992e44ee231d89ef6d284d103a8dc816d198e513c11ac3790b74a7880f7d4fae"
        },
        {
          "part": "D",
          "clause_id": "D.4",
          "title": "Automatic Suspension on Expiry",
          "text": "An agent that exceeds its check-up due timestamp plus grace window transitions from ACTIVE to SUSPENDED, displaying /S on its status line until a restorative check-up passes.",
          "clause_sha256": "616aac3f8fe03db64dbe549d52ff80be233b16de3f4e1e6a10f4b7110657c557"
        },
        {
          "part": "D",
          "clause_id": "D.5",
          "title": "Voluntary Operator Pause",
          "text": "An approver may place an agent into PAUSED (/P) state during maintenance or seasonal downtime, halting queue claims cleanly without incurring an enforcement violation.",
          "clause_sha256": "6156de5ff17945b13e4658fb6c05950e4c87a6b582deec38a4f2e938719df981"
        },
        {
          "part": "D",
          "clause_id": "D.6",
          "title": "Incident-Triggered Immediate Check-up",
          "text": "Any confirmed boundary breach, stale-epoch collision, or credential exposure invalidates the current check-up window and requires an immediate out-of-cycle verification prior to resumption.",
          "clause_sha256": "883705b44a812b894da925f8def39800568e2fdb856f0bee447ebbfd81ac3c2e"
        },
        {
          "part": "D",
          "clause_id": "D.7",
          "title": "Timestamp Integrity",
          "text": "Backdating check-up timestamps is prohibited by schema and hash-chain ordering; recorded_at reflects the server UTC commit instant of the log sequence.",
          "clause_sha256": "43e4ad188139af9ba8e571bdaa7146764abb3fe8e01385d77ec05d2e31e11a4f"
        }
      ]
    },
    {
      "part": "E",
      "title": "Part E: Governed Authority & Hazard Classes",
      "clauses": [
        {
          "part": "E",
          "clause_id": "E.1",
          "title": "Five-Level Hazard Taxonomy",
          "text": "Hazard classes ascend monotonically by external reversibility: Class A (Informational), Class B (External Communication), Class C (System/Code/DB Write), Class D (Financial Spend), and Class E (Physical/Safety Actuation).",
          "clause_sha256": "e328120e16df45d7bf1bd1c8b6a04bc0ac439f87106393e260f686f5642fb3ae"
        },
        {
          "part": "E",
          "clause_id": "E.2",
          "title": "Highest-Capability Dominance",
          "text": "An agent possessing multiple capabilities is classified by its highest-hazard capability. Read-mostly agents that hold even one database write token are Class C, never Class A.",
          "clause_sha256": "7962b08450c32d21867ee10f30e3f81f14f45b9682ee133c3f00943bb7d141ad"
        },
        {
          "part": "E",
          "clause_id": "E.3",
          "title": "External Communication Safeguards",
          "text": "Class B agents must disclose automated identity where required, enforce outbound rate ceilings, and screen untrusted inbound payloads against prompt-relay escalation.",
          "clause_sha256": "3f8dffb9fbf854c31bfb0e91e54e5586a425804b81ad5c749ebf1943e8788ed2"
        },
        {
          "part": "E",
          "clause_id": "E.4",
          "title": "System & Financial Hard Ceilings",
          "text": "Class C agents must forbid destructive resource deletion (databases, volumes, DNS zones, secrets). Class D agents must enforce explicit per-transaction and daily spend ceilings.",
          "clause_sha256": "5bc13131c5996ef82a48d2bdb8f0e1550b03db442200978cc51b19a4dd3cd384"
        },
        {
          "part": "E",
          "clause_id": "E.5",
          "title": "Physical Actuation Interlocks",
          "text": "Class E agents require hardware-level dead-man interlocks, local human override independent of cloud connectivity, and continuous 24-hour SVY-C review.",
          "clause_sha256": "dd2f27e17784572591622a4d6081501c6c82ebf7cf08510e97b6ca4c9c8d0ec3"
        },
        {
          "part": "E",
          "clause_id": "E.6",
          "title": "Constitutional Terms Manifest (CON)",
          "text": "Agents earning the CON mark publish machine-readable constitutional terms enumerating allowed capabilities, hard prohibitions, and escalation contacts.",
          "clause_sha256": "805b3670ece2bb6062cf2900ff6e0b447cd5eb5ce9ca52e75f195f690cb1fd57"
        },
        {
          "part": "E",
          "clause_id": "E.7",
          "title": "Unattended Execution Multiplier",
          "text": "Running on an unattended schedule or background webhook tightens the minimum check-up cadence by one tier because no human sits in the immediate execution loop.",
          "clause_sha256": "49158d5d48ec1580b505624b98bbb7ddaa0684f0cb5b4cb029ab92995c64788d"
        }
      ]
    },
    {
      "part": "F",
      "title": "Part F: The Public Record & Corrections",
      "clauses": [
        {
          "part": "F",
          "clause_id": "F.1",
          "title": "Permanence of the Public Record",
          "text": "Once committed to ar_log_heads, historical log entries are never silently edited, overwritten, or deleted to conceal operator or registry mistakes.",
          "clause_sha256": "6ab218a2206825ae4e4c5d100effabf8c42ca1e36775a528f98b9c81b7b679c7"
        },
        {
          "part": "F",
          "clause_id": "F.2",
          "title": "Corrections Are Events, Not Edits",
          "text": "When a prior entry contains a factual, classification, or timing error, AgentRegister appends an explicit record to ar_corrections citing the target ref, original assertion, rule edition, and superseding clause.",
          "clause_sha256": "0094b352470920b02f89cc202b947210ca71034572bd2e9d1b2fa7e49b1fa604"
        },
        {
          "part": "F",
          "clause_id": "F.3",
          "title": "Hash-Chained Correction Receipts",
          "text": "Every correction in ar_corrections commits a corresponding event in ar_log_heads so external auditors can verify when and why the correction occurred.",
          "clause_sha256": "a51a6c405839c49f2e58ed025eb449e45480b6cb570a5b3371e3cecae9473329"
        },
        {
          "part": "F",
          "clause_id": "F.4",
          "title": "Status Line Compact Legibility",
          "text": "Every registered agent exposes a single-line monospace summary (for example AR-1001 · B1 · SVY-7 · CON · CAS · SWHID) designed to fit headers, PR descriptions, and terminal logs.",
          "clause_sha256": "279653b758b859f8a1e1fe442f40ae09c19aeb2ae4d2f6346e5249e00172b5d7"
        },
        {
          "part": "F",
          "clause_id": "F.5",
          "title": "Vendor-Neutral Incident Reporting",
          "text": "Structural postmortems at /incidents focus on architectural root causes (missing CAS fences, ambient tokens, supply-chain drift) rather than sensationalizing named individuals.",
          "clause_sha256": "6c75494aeb3e2facb227699e08f62ccc6b679f068139a0c58b6d631c2c77eb71"
        },
        {
          "part": "F",
          "clause_id": "F.6",
          "title": "Machine Parity Across Formats",
          "text": "Every human HTML surface (/register, /rules, /ratings, /log, /blast-radius) has a direct JSON or MCP equivalent returning identical underlying facts.",
          "clause_sha256": "b300f5f11f6d3a3c26ab574c3489458b9715d13d8bf1f1c40dfb47ce47542b2e"
        },
        {
          "part": "F",
          "clause_id": "F.7",
          "title": "Right of Public Reply & Re-Test",
          "text": "Any fleet operator or rated runtime vendor may submit reproducible SWHID evidence via check-up or handshake to update a stale rating or clear a suspension.",
          "clause_sha256": "63b47d583a4fe1123975c1927a582d9097d4385ad80a6bbc4c311cd55ad77430"
        }
      ]
    },
    {
      "part": "G",
      "title": "Part G: Registry Conduct & Self-Binding Restraints",
      "clauses": [
        {
          "part": "G",
          "clause_id": "G.1",
          "title": "Self-Audit Canary Obligation",
          "text": "AgentRegister runs internal schema and rule-parity canaries against its own Worker and D1 state and publishes confirmed self-audit findings under /incidents and /corrections without special exemption.",
          "clause_sha256": "bbbb617cd506517b51e0e2550fa08ee75f5990164a1a5956d72209de229c78d0"
        },
        {
          "part": "G",
          "clause_id": "G.2",
          "title": "No Pay-for-Standing",
          "text": "Hazard classifications, check-up verdicts, skill pins, and A1 accountability ratings are never sold, sponsored, or upgraded in exchange for commercial fees.",
          "clause_sha256": "a9b295f4a4e16ef726ee1f7df0b1cbd4aa5330602853bdc4f34e0db407cadf4d"
        },
        {
          "part": "G",
          "clause_id": "G.3",
          "title": "Cloud-Native Model Hygiene",
          "text": "Official examples, worker templates, and benchmark harnesses standardize on verifiable cloud model endpoints (including Ollama Cloud at https://ollama.com/v1) with explicit model identifiers.",
          "clause_sha256": "fb4434257d87773c171ea7a1d63f6b96a04d02e93bfa8f68e346dbe3fc949b3b"
        },
        {
          "part": "G",
          "clause_id": "G.4",
          "title": "Fast Zero-Bloat Edge Delivery",
          "text": "Public HTML pages must render semantically on the edge in under 50 KB without multi-megabyte client SPA bundles that obscure public inspection or break curl/agent readers.",
          "clause_sha256": "aebde5cb1d2cbffd7fd08f4c208ac945e6833f9aae8b88b5cd68c630aeeed982"
        },
        {
          "part": "G",
          "clause_id": "G.5",
          "title": "Agent-First Discovery Parity",
          "text": "The Register must always serve 200 OK machine-readable discovery manifests at /llms.txt, /.well-known/agent-card.json, /.well-known/mcp.json, and Streamable HTTP /mcp.",
          "clause_sha256": "4126a437743d9bc52d82a292ac6fd0ef4d6dc3bd8129b3c37a12ba87b0c6ca0a"
        },
        {
          "part": "G",
          "clause_id": "G.6",
          "title": "Destructive-Action Hard Boundary",
          "text": "Registry automation may append logs, enrol records, and update version-fenced status lines, but is constitutionally barred from dropping tables, deleting volumes, or revoking external secrets.",
          "clause_sha256": "0314aeb2d23758ca5616b18522bec0afc61f9549000b0410ce542d377f0f5104"
        }
      ]
    },
    {
      "part": "H",
      "title": "Part H: Checker Qualification & Independence",
      "clauses": [
        {
          "part": "H",
          "clause_id": "H.1",
          "title": "Checker Role Definition",
          "text": "A checker is a human reviewer or deterministic verification harness authorized to inspect runtime receipts and submit check-up verdicts (PASS, PASS_WITH_PIN, PAUSE, or SUSPEND).",
          "clause_sha256": "65f25342b87618452e83ad039f4fe960c96ce43cd9a1da0795123b98605253d3"
        },
        {
          "part": "H",
          "clause_id": "H.2",
          "title": "Separation on High-Hazard Reviews",
          "text": "For Class D and Class E fleets, check-up sign-off must include either an independent human checker handle distinct from the agent developer or a reproducible cryptographic SWHID receipt.",
          "clause_sha256": "41cff8f7c001efc2f9573ae7332657ccb963008ac3d2f199c0739cff59252812"
        },
        {
          "part": "H",
          "clause_id": "H.3",
          "title": "Deterministic Harness Checkers",
          "text": "Automated verification pipelines may record routine SVY-C and SVY-7 check-ups provided they attach both queue_item_id with lease_epoch and a verifiable artifact_swhid.",
          "clause_sha256": "166861c45009c90776556103c84d66b2ea6ec76b39dbe491ddddc38e0f5e63aa"
        },
        {
          "part": "H",
          "clause_id": "H.4",
          "title": "Checker Handle Accountability",
          "text": "Every row in ar_checkups permanently records checker_handle alongside verdict and notes so rubber-stamp approvals remain auditable.",
          "clause_sha256": "7aacd9f5c50027b63c94f817d8aa9ef59b217a2fda03b328ef96033435fb5eb8"
        },
        {
          "part": "H",
          "clause_id": "H.5",
          "title": "Conflict-of-Interest Disclosure",
          "text": "Where an operator self-checks a Class A, B, or C sandbox agent, the status line approver tier reflects self-stewardship honestly rather than impersonating third-party audit.",
          "clause_sha256": "a1eece3eebffae3c9a93ea2c1489158de63c55e6933be89442988ab80e207a6d"
        },
        {
          "part": "H",
          "clause_id": "H.6",
          "title": "Audit Reproducibility",
          "text": "Given the artifact bytes and the recorded swh:1:cnt:<sha1> digest on a check-up, any third party must be able to recompute the exact digest offline without proprietary tooling.",
          "clause_sha256": "b16ac184c8920f1b20822bb34b531be7e147c48f3e4041f1f56a5763c2db8453"
        }
      ]
    },
    {
      "part": "I",
      "title": "Part I: Earned Skill Marks & SWHID Provenance",
      "clauses": [
        {
          "part": "I",
          "clause_id": "I.1",
          "title": "Earned Skill Pins Only",
          "text": "Skill pins represent demonstrated competence on real work (such as drift adaptation, source qualification, Pareto calibration, or civic triage) proven by runtime receipts, never marketing tags.",
          "clause_sha256": "f6c9e9fe9f54518492988264aeb59f65e8555a9555daf75b5a94eb1195d188a0"
        },
        {
          "part": "I",
          "clause_id": "I.2",
          "title": "SWHID-Bound Pin Minting",
          "text": "To mint a verified skill pin and earn the SWHID post-line mark, a check-up must supply a valid swh:1:cnt:<40-hex> artifact identifier committed into ar_checkups and ar_log_heads.",
          "clause_sha256": "3e510b9e38e3c80b70386f2ece16ebd236f13d79278046f75ba8cbd5fec2ffac"
        },
        {
          "part": "I",
          "clause_id": "I.3",
          "title": "Lease-Epoch Execution Proof",
          "text": "Submitting a positive integer lease_epoch alongside queue_item_id proves the agent completed work inside an epoch-fenced queue lane and qualifies the agent for the CAS post-line mark.",
          "clause_sha256": "460f7599ccf41efcf6623d6edff61c86dc0ac1d20f121b8b64fba7d5a4fd8cca"
        },
        {
          "part": "I",
          "clause_id": "I.4",
          "title": "Crystallized Reflex Mark (MM-T1)",
          "text": "The MM-T1 post-line mark is awarded only when a fleet demonstrates N >= 3 guardrailed deterministic reflex executions that eliminate redundant LLM calls without regression.",
          "clause_sha256": "b2e9f4e99459f7d518f62e94ac0f1a9eeadcee9418315a72c01e1c9dbdec83e9"
        },
        {
          "part": "I",
          "clause_id": "I.5",
          "title": "Pin Revocation on Falsification",
          "text": "If an adversarial falsification audit shows an artifact was replayed, plagiarized, or failed safety guardrails, the pin is superseded via an ar_corrections event.",
          "clause_sha256": "120b00fbd3508bd647ee1d73d59387826729dbb0c3edcb629c433074a1264b6d"
        },
        {
          "part": "I",
          "clause_id": "I.6",
          "title": "Portable Skill Manifests",
          "text": "Earned skill pins export cleanly in JSON via GET /api/v1/register and MCP tool agentregister_list_register so downstream orchestrators can route high-trust tasks accurately.",
          "clause_sha256": "3f9da42b0863c979006d4746535d39797fe61ff453ee004c52b7c081cafcae20"
        }
      ]
    },
    {
      "part": "J",
      "title": "Part J: AI Product, Harness & Cloud Model Ratings",
      "clauses": [
        {
          "part": "J",
          "clause_id": "J.1",
          "title": "Five-Axis Accountability Rubric",
          "text": "Harnesses, cloud model endpoints, and runtimes at /ratings are scored from 0 to 20 across five factual axes (total 0 to 100): Per-Agent Cost Attribution, Spend & Lease Caps, Outbound Audit Receipts, CAS State Safety, and Portable Identity.",
          "clause_sha256": "3775b3a74b59aefca8165a2f7bf2baf44735a2bdbef26a8b9fb91c38403e2f8c"
        },
        {
          "part": "J",
          "clause_id": "J.2",
          "title": "Grade Thresholds",
          "text": "Composite scores map deterministically to standing grades: A1 (90-100), A2 (80-89), B1 (75-79), B2 (68-74), C1 (50-67), and D1 (0-49).",
          "clause_sha256": "e372ec5516f97bcf99f94bf37dafd755160e7a3d3c9bca8faabcce26c2f23c5d"
        },
        {
          "part": "J",
          "clause_id": "J.3",
          "title": "Observable Runtime Capabilities",
          "text": "Ratings evaluate what an operator can actually enforce in production today (such as request-level token accounting, lease fencing, and MCP/THP identity headers), not roadmap announcements.",
          "clause_sha256": "32f34c6341446c6e91c66230a3c01342eae59fd2e2994f28c081ad390df6c89c"
        },
        {
          "part": "J",
          "clause_id": "J.4",
          "title": "Cloud Endpoint Transparency",
          "text": "Cloud inference endpoints (including Ollama Cloud muse-spark-open and glm-5.3-flash at https://ollama.com/v1) are evaluated on OpenAI-compatible usage telemetry, deterministic model routing, and zero local daemon setup.",
          "clause_sha256": "039ab0fe1eafd28a98da65e73b61a98e2082e6d34f3a7b29b4c1c394e8b619d9"
        },
        {
          "part": "J",
          "clause_id": "J.5",
          "title": "Composable Stack Credit",
          "text": "Where a model endpoint lacks built-in state fencing on its own, pairing it with Teleon THP v1.0 queues and Cloudflare D1 CAS raises total system accountability; /ratings scores each layer transparently.",
          "clause_sha256": "31b995f1a9d0961c41bad19484f1b48cbb8e42ffa7e8ed5b8b229efdc4215721"
        },
        {
          "part": "J",
          "clause_id": "J.6",
          "title": "Evidence-Backed Score Updates",
          "text": "Every rating entry publishes concrete technical notes per axis and updates via versioned commits whenever a vendor ships verifiable new guardrails.",
          "clause_sha256": "2a9b6dbcadebb1eb4e3e4cb2a1794ef43b5406051d672129ef9d787b9c4901a8"
        }
      ]
    }
  ],
  "clauses": [
    {
      "part": "A",
      "clause_id": "A.1",
      "title": "Binding Public Standard",
      "text": "These Rules govern every fleet, autonomous agent, check-up receipt, correction, and accountability rating published on AgentRegister. They are versioned, hashed, and equally binding on us as operator of the Register.",
      "clause_sha256": "02db040c0b1fe08e7c9e35c2a7aee89748ce69d4bde48029e66d5a0945793279"
    },
    {
      "part": "A",
      "clause_id": "A.2",
      "title": "Verbs Over Self-Assertions",
      "text": "Standing on the Register is earned from verifiable runtime acts: version-fenced state transitions, lease-fenced queue completions, and content-addressed SWHID artifacts. Self-declared capability badges carry zero evidentiary weight.",
      "clause_sha256": "61e6333c91d4bb487df8300eda0d723608f1e9b72e63aeeda3cf58b8929ef9a6"
    },
    {
      "part": "A",
      "clause_id": "A.3",
      "title": "Single Canonical Rule Source",
      "text": "The HTML edition at /rules and the machine-readable JSON specification at /rules.json are rendered from the same in-memory clause table and carry identical SHA-256 clause digests.",
      "clause_sha256": "52c3eb159d393eb3f17c19527d16cd7a92ebcef21192120d7b98acfb9057f71b"
    },
    {
      "part": "A",
      "clause_id": "A.4",
      "title": "Non-Retroactivity of Amendments",
      "text": "Material rule changes publish under a new edition number. Every check-up, suspension, or correction is judged against the Rule edition in force at the timestamp of the underlying event.",
      "clause_sha256": "b34f8f539aff69871308ecd0c34a70d2280674dc4e985bc875843ef2bd5077e1"
    },
    {
      "part": "A",
      "clause_id": "A.5",
      "title": "Open Protocol Portability",
      "text": "Records, status lines, constitutional terms, and SWHID receipts use open schemas portable across registry.teleon.dev, agentregister.si, and theagentregister.ai via THP v1.0.",
      "clause_sha256": "6ff27d9c28e2e169e97fac5bda2816b24a9dbebdf19de4d6cd6249850ef97896"
    },
    {
      "part": "A",
      "clause_id": "A.6",
      "title": "Zero-Auth Public Inspection",
      "text": "Reading the Register, fetching /rules.json, querying /ratings.json, and recomputing the SHA-256 transparency chain at /api/v1/verify require zero API keys, cookies, or login gates.",
      "clause_sha256": "97e10ea45dbbd3095c428032b3f9109d62e042c03b7d34cd6f7ac5f9b1dfa83d"
    },
    {
      "part": "A",
      "clause_id": "A.7",
      "title": "Severability & Explicit Interpretation",
      "text": "Where an edge case arises that is not explicitly covered by a clause, the Register applies the stricter hazard interpretation and logs a public note rather than silently stretching a definition.",
      "clause_sha256": "bfdf8b0d06d5e495cf4e0a51cf6e10d34a2d6f23f619cd06d5152b8a9864512b"
    },
    {
      "part": "B",
      "clause_id": "B.1",
      "title": "Mandatory Human or Institutional Principal",
      "text": "Every registered agent must name an accountable human or institutional approver handle. Another autonomous agent may coordinate tasks but can never serve as the terminal legal or operational approver.",
      "clause_sha256": "797d1c4f28477bd11f30a052ea141ff03855b4e4193be473a283970ac9178060"
    },
    {
      "part": "B",
      "clause_id": "B.2",
      "title": "Stable Register Identifier",
      "text": "Upon enrolment, each agent receives a permanent monotonic identifier (AR-xxxx) linked to a parent fleet record (FLT-xx). Identifiers are never recycled or reassigned after retirement.",
      "clause_sha256": "a5d58b99a5b09bc38b302b73dccad351cfdc847475a6a208a41dbbdbc4fdfe88"
    },
    {
      "part": "B",
      "clause_id": "B.3",
      "title": "Approver Tier Classification",
      "text": "Approvers are classified from Tier 1 (verified named human principal with revocation channel) through Tier 4 (unverified or unclaimed handle). The tier integer appears immediately after the hazard letter on the status line.",
      "clause_sha256": "c485641df4cd076bb10f7bdcfa33c9e8e57b7dfdea2d932b35247a6c7576c749"
    },
    {
      "part": "B",
      "clause_id": "B.4",
      "title": "High-Hazard Unclaimed Restriction",
      "text": "Agents classified in Hazard Class D (Financial) or Class E (Physical Actuation) may not hold ACTIVE standing under a Tier 4 unverified principal and default immediately to SUSPENDED (/S) until claimed by Tier 1 or Tier 2.",
      "clause_sha256": "8176d596a73ac35aa854a6be0d1c6b136ef558430a42f91706e3c43bde1bff6a"
    },
    {
      "part": "B",
      "clause_id": "B.5",
      "title": "Harness & Cloud Model Disclosure",
      "text": "Each agent entry must disclose its execution harness (such as OpenCode, Antigravity, Claude Code, or Codex) and its active cloud model endpoint (such as ollama-cloud/muse-spark-open or ollama-cloud/glm-5.3-flash via https://ollama.com/v1).",
      "clause_sha256": "b0004b97c44a20e3411180be92426bf5b8f8ba8357b2623c3734a779bbae6bb6"
    },
    {
      "part": "B",
      "clause_id": "B.6",
      "title": "Principal Succession Continuity",
      "text": "Transferring an agent to a new human approver requires an explicit check-up event recording both outgoing and incoming handles in ar_log_heads without erasing prior stewardship history.",
      "clause_sha256": "ae7df96f920f5e754d7680f36edad4fb51e9d9280bb226b5cec50967549f350c"
    },
    {
      "part": "B",
      "clause_id": "B.7",
      "title": "Sub-Agent Scope Ceiling",
      "text": "When a registered parent agent delegates work to ephemeral child workers, the parent's approver answers for every child act, and child authority must be monotonically clamped to less than or equal to parent scope.",
      "clause_sha256": "88f50fca9e97373b243113605fcf70ba30801e7618c77e1393262e042d0c59d3"
    },
    {
      "part": "C",
      "clause_id": "C.1",
      "title": "Three-Part Runtime Evidence",
      "text": "A complete verification receipt binds three elements: (1) who approved the scope, (2) which fenced queue lease_epoch executed the work, and (3) the content-addressed swh:1:cnt:<sha1> digest of the output.",
      "clause_sha256": "849c1c94152d9baa07c194237324ab36115f0f989bc76abb55db0e79c397767c"
    },
    {
      "part": "C",
      "clause_id": "C.2",
      "title": "Append-Only Hash-Chained Log",
      "text": "Every enrolment, check-up, suspension, and correction appends a sequential entry to ar_log_heads where entry_hash commits the canonical payload and checkpoint_hash chains seq, prev_hash, and entry_hash under SHA-256.",
      "clause_sha256": "9d0466116eef8edf5fccd35dd09c5a6f878b7aaed61bc153d5c07bccc7ce216b"
    },
    {
      "part": "C",
      "clause_id": "C.3",
      "title": "Software Heritage SWHID Framing",
      "text": "Artifact hashes use canonical Git blob framing (blob <byteLength>\\0<bytes>) hashed with SHA-1 as swh:1:cnt:<40-hex>, enabling independent offline verification with git hash-object.",
      "clause_sha256": "9d59eeb7203e99857cebebb8b6b9fd016d47f0ca0811d94813843f59fbebaa32"
    },
    {
      "part": "C",
      "clause_id": "C.4",
      "title": "Monotonic Lease-Epoch Fencing",
      "text": "Work queue receipts submitted at check-up should reference an integer lease_epoch >= 1 so split-brain retries or stale zombie workers are provably excluded from credit.",
      "clause_sha256": "d5ca600876ec12094d46985275670bfcd5104de56c6c6e519c76b9541f20d0bc"
    },
    {
      "part": "C",
      "clause_id": "C.5",
      "title": "Optimistic CAS Version Fencing",
      "text": "All state mutations to ar_fleets and ar_agents increment version_epoch atomically using WHERE version_epoch = ? predicates to prevent silent lost updates under concurrent writes.",
      "clause_sha256": "15cf27da722c2c564525ef4436a0af23e021ee05d1533ed9d362ddfeff6542e4"
    },
    {
      "part": "C",
      "clause_id": "C.6",
      "title": "Rejection of Fabricated Logs",
      "text": "Plaintext transcripts lacking either a verifiable queue lease receipt, reproducible SWHID digest, or signed checker attestation are recorded as unverified notes and cannot mint skill pins.",
      "clause_sha256": "ad2b8c2353769d0e12f4bb9e3a1671bf9b76412c17e0df02a1a5296a4b7717d3"
    },
    {
      "part": "C",
      "clause_id": "C.7",
      "title": "Independent Chain Re-Verification",
      "text": "Both GET /api/v1/verify on the edge worker and the browser verifier at /verify recompute every SHA-256 digest from seq 1 genesis (64 zero hex characters) to the current head.",
      "clause_sha256": "9d4953625bbc3ecac28061e22e4cdc97f6462012879b04d4192439aeb0b2a5e1"
    },
    {
      "part": "D",
      "clause_id": "D.1",
      "title": "Mandatory Check-up Cadence",
      "text": "Every ACTIVE agent operates on an assigned check-up cycle: SVY-C (24h), SVY-7 (7 days), SVY-30 (30 days), or SVY-60 (60 days). Standing lapses if no qualifying check-up is recorded before interval plus grace.",
      "clause_sha256": "01b142f8b24a48cbf236de0126bcb3d89f71722792ca5ada419c3035d0d62145"
    },
    {
      "part": "D",
      "clause_id": "D.2",
      "title": "Exact Grace Windows",
      "text": "Grace windows are strictly bounded: 12 hours for SVY-C, 48 hours for SVY-7, 7 days (168 hours) for SVY-30, and 14 days (336 hours) for SVY-60, measured in UTC timestamps to the second.",
      "clause_sha256": "7ed925b6e551a9bb8ab1236fa4f4aa127e03f263d8d18477a312a9c9a72454a6"
    },
    {
      "part": "D",
      "clause_id": "D.3",
      "title": "Cadence Floor by Hazard Class",
      "text": "Class E agents must run on SVY-C. Unattended Class D and unattended Class C agents require at least SVY-7 or SVY-C. SVY-60 is permitted solely for read-only Class A agents.",
      "clause_sha256": "992e44ee231d89ef6d284d103a8dc816d198e513c11ac3790b74a7880f7d4fae"
    },
    {
      "part": "D",
      "clause_id": "D.4",
      "title": "Automatic Suspension on Expiry",
      "text": "An agent that exceeds its check-up due timestamp plus grace window transitions from ACTIVE to SUSPENDED, displaying /S on its status line until a restorative check-up passes.",
      "clause_sha256": "616aac3f8fe03db64dbe549d52ff80be233b16de3f4e1e6a10f4b7110657c557"
    },
    {
      "part": "D",
      "clause_id": "D.5",
      "title": "Voluntary Operator Pause",
      "text": "An approver may place an agent into PAUSED (/P) state during maintenance or seasonal downtime, halting queue claims cleanly without incurring an enforcement violation.",
      "clause_sha256": "6156de5ff17945b13e4658fb6c05950e4c87a6b582deec38a4f2e938719df981"
    },
    {
      "part": "D",
      "clause_id": "D.6",
      "title": "Incident-Triggered Immediate Check-up",
      "text": "Any confirmed boundary breach, stale-epoch collision, or credential exposure invalidates the current check-up window and requires an immediate out-of-cycle verification prior to resumption.",
      "clause_sha256": "883705b44a812b894da925f8def39800568e2fdb856f0bee447ebbfd81ac3c2e"
    },
    {
      "part": "D",
      "clause_id": "D.7",
      "title": "Timestamp Integrity",
      "text": "Backdating check-up timestamps is prohibited by schema and hash-chain ordering; recorded_at reflects the server UTC commit instant of the log sequence.",
      "clause_sha256": "43e4ad188139af9ba8e571bdaa7146764abb3fe8e01385d77ec05d2e31e11a4f"
    },
    {
      "part": "E",
      "clause_id": "E.1",
      "title": "Five-Level Hazard Taxonomy",
      "text": "Hazard classes ascend monotonically by external reversibility: Class A (Informational), Class B (External Communication), Class C (System/Code/DB Write), Class D (Financial Spend), and Class E (Physical/Safety Actuation).",
      "clause_sha256": "e328120e16df45d7bf1bd1c8b6a04bc0ac439f87106393e260f686f5642fb3ae"
    },
    {
      "part": "E",
      "clause_id": "E.2",
      "title": "Highest-Capability Dominance",
      "text": "An agent possessing multiple capabilities is classified by its highest-hazard capability. Read-mostly agents that hold even one database write token are Class C, never Class A.",
      "clause_sha256": "7962b08450c32d21867ee10f30e3f81f14f45b9682ee133c3f00943bb7d141ad"
    },
    {
      "part": "E",
      "clause_id": "E.3",
      "title": "External Communication Safeguards",
      "text": "Class B agents must disclose automated identity where required, enforce outbound rate ceilings, and screen untrusted inbound payloads against prompt-relay escalation.",
      "clause_sha256": "3f8dffb9fbf854c31bfb0e91e54e5586a425804b81ad5c749ebf1943e8788ed2"
    },
    {
      "part": "E",
      "clause_id": "E.4",
      "title": "System & Financial Hard Ceilings",
      "text": "Class C agents must forbid destructive resource deletion (databases, volumes, DNS zones, secrets). Class D agents must enforce explicit per-transaction and daily spend ceilings.",
      "clause_sha256": "5bc13131c5996ef82a48d2bdb8f0e1550b03db442200978cc51b19a4dd3cd384"
    },
    {
      "part": "E",
      "clause_id": "E.5",
      "title": "Physical Actuation Interlocks",
      "text": "Class E agents require hardware-level dead-man interlocks, local human override independent of cloud connectivity, and continuous 24-hour SVY-C review.",
      "clause_sha256": "dd2f27e17784572591622a4d6081501c6c82ebf7cf08510e97b6ca4c9c8d0ec3"
    },
    {
      "part": "E",
      "clause_id": "E.6",
      "title": "Constitutional Terms Manifest (CON)",
      "text": "Agents earning the CON mark publish machine-readable constitutional terms enumerating allowed capabilities, hard prohibitions, and escalation contacts.",
      "clause_sha256": "805b3670ece2bb6062cf2900ff6e0b447cd5eb5ce9ca52e75f195f690cb1fd57"
    },
    {
      "part": "E",
      "clause_id": "E.7",
      "title": "Unattended Execution Multiplier",
      "text": "Running on an unattended schedule or background webhook tightens the minimum check-up cadence by one tier because no human sits in the immediate execution loop.",
      "clause_sha256": "49158d5d48ec1580b505624b98bbb7ddaa0684f0cb5b4cb029ab92995c64788d"
    },
    {
      "part": "F",
      "clause_id": "F.1",
      "title": "Permanence of the Public Record",
      "text": "Once committed to ar_log_heads, historical log entries are never silently edited, overwritten, or deleted to conceal operator or registry mistakes.",
      "clause_sha256": "6ab218a2206825ae4e4c5d100effabf8c42ca1e36775a528f98b9c81b7b679c7"
    },
    {
      "part": "F",
      "clause_id": "F.2",
      "title": "Corrections Are Events, Not Edits",
      "text": "When a prior entry contains a factual, classification, or timing error, AgentRegister appends an explicit record to ar_corrections citing the target ref, original assertion, rule edition, and superseding clause.",
      "clause_sha256": "0094b352470920b02f89cc202b947210ca71034572bd2e9d1b2fa7e49b1fa604"
    },
    {
      "part": "F",
      "clause_id": "F.3",
      "title": "Hash-Chained Correction Receipts",
      "text": "Every correction in ar_corrections commits a corresponding event in ar_log_heads so external auditors can verify when and why the correction occurred.",
      "clause_sha256": "a51a6c405839c49f2e58ed025eb449e45480b6cb570a5b3371e3cecae9473329"
    },
    {
      "part": "F",
      "clause_id": "F.4",
      "title": "Status Line Compact Legibility",
      "text": "Every registered agent exposes a single-line monospace summary (for example AR-1001 · B1 · SVY-7 · CON · CAS · SWHID) designed to fit headers, PR descriptions, and terminal logs.",
      "clause_sha256": "279653b758b859f8a1e1fe442f40ae09c19aeb2ae4d2f6346e5249e00172b5d7"
    },
    {
      "part": "F",
      "clause_id": "F.5",
      "title": "Vendor-Neutral Incident Reporting",
      "text": "Structural postmortems at /incidents focus on architectural root causes (missing CAS fences, ambient tokens, supply-chain drift) rather than sensationalizing named individuals.",
      "clause_sha256": "6c75494aeb3e2facb227699e08f62ccc6b679f068139a0c58b6d631c2c77eb71"
    },
    {
      "part": "F",
      "clause_id": "F.6",
      "title": "Machine Parity Across Formats",
      "text": "Every human HTML surface (/register, /rules, /ratings, /log, /blast-radius) has a direct JSON or MCP equivalent returning identical underlying facts.",
      "clause_sha256": "b300f5f11f6d3a3c26ab574c3489458b9715d13d8bf1f1c40dfb47ce47542b2e"
    },
    {
      "part": "F",
      "clause_id": "F.7",
      "title": "Right of Public Reply & Re-Test",
      "text": "Any fleet operator or rated runtime vendor may submit reproducible SWHID evidence via check-up or handshake to update a stale rating or clear a suspension.",
      "clause_sha256": "63b47d583a4fe1123975c1927a582d9097d4385ad80a6bbc4c311cd55ad77430"
    },
    {
      "part": "G",
      "clause_id": "G.1",
      "title": "Self-Audit Canary Obligation",
      "text": "AgentRegister runs internal schema and rule-parity canaries against its own Worker and D1 state and publishes confirmed self-audit findings under /incidents and /corrections without special exemption.",
      "clause_sha256": "bbbb617cd506517b51e0e2550fa08ee75f5990164a1a5956d72209de229c78d0"
    },
    {
      "part": "G",
      "clause_id": "G.2",
      "title": "No Pay-for-Standing",
      "text": "Hazard classifications, check-up verdicts, skill pins, and A1 accountability ratings are never sold, sponsored, or upgraded in exchange for commercial fees.",
      "clause_sha256": "a9b295f4a4e16ef726ee1f7df0b1cbd4aa5330602853bdc4f34e0db407cadf4d"
    },
    {
      "part": "G",
      "clause_id": "G.3",
      "title": "Cloud-Native Model Hygiene",
      "text": "Official examples, worker templates, and benchmark harnesses standardize on verifiable cloud model endpoints (including Ollama Cloud at https://ollama.com/v1) with explicit model identifiers.",
      "clause_sha256": "fb4434257d87773c171ea7a1d63f6b96a04d02e93bfa8f68e346dbe3fc949b3b"
    },
    {
      "part": "G",
      "clause_id": "G.4",
      "title": "Fast Zero-Bloat Edge Delivery",
      "text": "Public HTML pages must render semantically on the edge in under 50 KB without multi-megabyte client SPA bundles that obscure public inspection or break curl/agent readers.",
      "clause_sha256": "aebde5cb1d2cbffd7fd08f4c208ac945e6833f9aae8b88b5cd68c630aeeed982"
    },
    {
      "part": "G",
      "clause_id": "G.5",
      "title": "Agent-First Discovery Parity",
      "text": "The Register must always serve 200 OK machine-readable discovery manifests at /llms.txt, /.well-known/agent-card.json, /.well-known/mcp.json, and Streamable HTTP /mcp.",
      "clause_sha256": "4126a437743d9bc52d82a292ac6fd0ef4d6dc3bd8129b3c37a12ba87b0c6ca0a"
    },
    {
      "part": "G",
      "clause_id": "G.6",
      "title": "Destructive-Action Hard Boundary",
      "text": "Registry automation may append logs, enrol records, and update version-fenced status lines, but is constitutionally barred from dropping tables, deleting volumes, or revoking external secrets.",
      "clause_sha256": "0314aeb2d23758ca5616b18522bec0afc61f9549000b0410ce542d377f0f5104"
    },
    {
      "part": "H",
      "clause_id": "H.1",
      "title": "Checker Role Definition",
      "text": "A checker is a human reviewer or deterministic verification harness authorized to inspect runtime receipts and submit check-up verdicts (PASS, PASS_WITH_PIN, PAUSE, or SUSPEND).",
      "clause_sha256": "65f25342b87618452e83ad039f4fe960c96ce43cd9a1da0795123b98605253d3"
    },
    {
      "part": "H",
      "clause_id": "H.2",
      "title": "Separation on High-Hazard Reviews",
      "text": "For Class D and Class E fleets, check-up sign-off must include either an independent human checker handle distinct from the agent developer or a reproducible cryptographic SWHID receipt.",
      "clause_sha256": "41cff8f7c001efc2f9573ae7332657ccb963008ac3d2f199c0739cff59252812"
    },
    {
      "part": "H",
      "clause_id": "H.3",
      "title": "Deterministic Harness Checkers",
      "text": "Automated verification pipelines may record routine SVY-C and SVY-7 check-ups provided they attach both queue_item_id with lease_epoch and a verifiable artifact_swhid.",
      "clause_sha256": "166861c45009c90776556103c84d66b2ea6ec76b39dbe491ddddc38e0f5e63aa"
    },
    {
      "part": "H",
      "clause_id": "H.4",
      "title": "Checker Handle Accountability",
      "text": "Every row in ar_checkups permanently records checker_handle alongside verdict and notes so rubber-stamp approvals remain auditable.",
      "clause_sha256": "7aacd9f5c50027b63c94f817d8aa9ef59b217a2fda03b328ef96033435fb5eb8"
    },
    {
      "part": "H",
      "clause_id": "H.5",
      "title": "Conflict-of-Interest Disclosure",
      "text": "Where an operator self-checks a Class A, B, or C sandbox agent, the status line approver tier reflects self-stewardship honestly rather than impersonating third-party audit.",
      "clause_sha256": "a1eece3eebffae3c9a93ea2c1489158de63c55e6933be89442988ab80e207a6d"
    },
    {
      "part": "H",
      "clause_id": "H.6",
      "title": "Audit Reproducibility",
      "text": "Given the artifact bytes and the recorded swh:1:cnt:<sha1> digest on a check-up, any third party must be able to recompute the exact digest offline without proprietary tooling.",
      "clause_sha256": "b16ac184c8920f1b20822bb34b531be7e147c48f3e4041f1f56a5763c2db8453"
    },
    {
      "part": "I",
      "clause_id": "I.1",
      "title": "Earned Skill Pins Only",
      "text": "Skill pins represent demonstrated competence on real work (such as drift adaptation, source qualification, Pareto calibration, or civic triage) proven by runtime receipts, never marketing tags.",
      "clause_sha256": "f6c9e9fe9f54518492988264aeb59f65e8555a9555daf75b5a94eb1195d188a0"
    },
    {
      "part": "I",
      "clause_id": "I.2",
      "title": "SWHID-Bound Pin Minting",
      "text": "To mint a verified skill pin and earn the SWHID post-line mark, a check-up must supply a valid swh:1:cnt:<40-hex> artifact identifier committed into ar_checkups and ar_log_heads.",
      "clause_sha256": "3e510b9e38e3c80b70386f2ece16ebd236f13d79278046f75ba8cbd5fec2ffac"
    },
    {
      "part": "I",
      "clause_id": "I.3",
      "title": "Lease-Epoch Execution Proof",
      "text": "Submitting a positive integer lease_epoch alongside queue_item_id proves the agent completed work inside an epoch-fenced queue lane and qualifies the agent for the CAS post-line mark.",
      "clause_sha256": "460f7599ccf41efcf6623d6edff61c86dc0ac1d20f121b8b64fba7d5a4fd8cca"
    },
    {
      "part": "I",
      "clause_id": "I.4",
      "title": "Crystallized Reflex Mark (MM-T1)",
      "text": "The MM-T1 post-line mark is awarded only when a fleet demonstrates N >= 3 guardrailed deterministic reflex executions that eliminate redundant LLM calls without regression.",
      "clause_sha256": "b2e9f4e99459f7d518f62e94ac0f1a9eeadcee9418315a72c01e1c9dbdec83e9"
    },
    {
      "part": "I",
      "clause_id": "I.5",
      "title": "Pin Revocation on Falsification",
      "text": "If an adversarial falsification audit shows an artifact was replayed, plagiarized, or failed safety guardrails, the pin is superseded via an ar_corrections event.",
      "clause_sha256": "120b00fbd3508bd647ee1d73d59387826729dbb0c3edcb629c433074a1264b6d"
    },
    {
      "part": "I",
      "clause_id": "I.6",
      "title": "Portable Skill Manifests",
      "text": "Earned skill pins export cleanly in JSON via GET /api/v1/register and MCP tool agentregister_list_register so downstream orchestrators can route high-trust tasks accurately.",
      "clause_sha256": "3f9da42b0863c979006d4746535d39797fe61ff453ee004c52b7c081cafcae20"
    },
    {
      "part": "J",
      "clause_id": "J.1",
      "title": "Five-Axis Accountability Rubric",
      "text": "Harnesses, cloud model endpoints, and runtimes at /ratings are scored from 0 to 20 across five factual axes (total 0 to 100): Per-Agent Cost Attribution, Spend & Lease Caps, Outbound Audit Receipts, CAS State Safety, and Portable Identity.",
      "clause_sha256": "3775b3a74b59aefca8165a2f7bf2baf44735a2bdbef26a8b9fb91c38403e2f8c"
    },
    {
      "part": "J",
      "clause_id": "J.2",
      "title": "Grade Thresholds",
      "text": "Composite scores map deterministically to standing grades: A1 (90-100), A2 (80-89), B1 (75-79), B2 (68-74), C1 (50-67), and D1 (0-49).",
      "clause_sha256": "e372ec5516f97bcf99f94bf37dafd755160e7a3d3c9bca8faabcce26c2f23c5d"
    },
    {
      "part": "J",
      "clause_id": "J.3",
      "title": "Observable Runtime Capabilities",
      "text": "Ratings evaluate what an operator can actually enforce in production today (such as request-level token accounting, lease fencing, and MCP/THP identity headers), not roadmap announcements.",
      "clause_sha256": "32f34c6341446c6e91c66230a3c01342eae59fd2e2994f28c081ad390df6c89c"
    },
    {
      "part": "J",
      "clause_id": "J.4",
      "title": "Cloud Endpoint Transparency",
      "text": "Cloud inference endpoints (including Ollama Cloud muse-spark-open and glm-5.3-flash at https://ollama.com/v1) are evaluated on OpenAI-compatible usage telemetry, deterministic model routing, and zero local daemon setup.",
      "clause_sha256": "039ab0fe1eafd28a98da65e73b61a98e2082e6d34f3a7b29b4c1c394e8b619d9"
    },
    {
      "part": "J",
      "clause_id": "J.5",
      "title": "Composable Stack Credit",
      "text": "Where a model endpoint lacks built-in state fencing on its own, pairing it with Teleon THP v1.0 queues and Cloudflare D1 CAS raises total system accountability; /ratings scores each layer transparently.",
      "clause_sha256": "31b995f1a9d0961c41bad19484f1b48cbb8e42ffa7e8ed5b8b229efdc4215721"
    },
    {
      "part": "J",
      "clause_id": "J.6",
      "title": "Evidence-Backed Score Updates",
      "text": "Every rating entry publishes concrete technical notes per axis and updates via versioned commits whenever a vendor ships verifiable new guardrails.",
      "clause_sha256": "2a9b6dbcadebb1eb4e3e4cb2a1794ef43b5406051d672129ef9d787b9c4901a8"
    }
  ]
}