{ "schema": "atg.agent-card.local-discovery.v1", "metadata_kind": "static_discovery_readiness_metadata_not_an_a2a_agent_card", "name": "Agent Trust Gate", "latest_mission": "P3-M155", "recent_missions": [ "P3-M123", "P3-M124", "P3-M125", "P3-M126", "P3-M127", "P3-M128", "P3-M129", "P3-M130", "P3-M131", "P3-M132", "P3-M133", "P3-M134", "P3-M135", "P3-M136", "P3-M137", "P3-M138", "P3-M139", "P3-M140A", "P3-M140", "P3-M141", "P3-M142", "P3-M143", "P3-M143A", "P3-M144", "P3-M144A", "P3-M154", "P3-M155" ], "description": "Local-first pre-action and pre-settlement trust gate for agent-led workflows.", "public_repository_url": "https://github.com/Gareth1953/agent-trust-gate", "status": "local_demo_only", "discovery_status": "readable_now_callable_later", "core_rule": "No mandate. No evidence. No verified intent. No signed gate pass. No settlement.", "gatepass_core_rule": "No mandate. No evidence. No verified intent. No signed GatePass. No settlement.", "strategy": "Readable now. Callable later. Autonomous execution never without gate control.", "identity_trust_principle": "Claimed agent identity is not trust. Behaviour, mandate, evidence, verified intent, and session context must decide access.", "capabilities": [ "local gate evaluation", "local trust receipt generation and verification", "local gate-pass validity and replay checks", "local settlement blocker simulation", "local signed receipt and proof prototype", "local adversarial evaluation", "local reference integration examples", "local developer CLI", "local AI agent traffic and session intent gate concept model", "human-approved public reviewer and paid pilot enquiry guidance", "public repo commercial conversion review and navigation guidance", "buyer use case and revenue trigger guidance", "global code discovery and manual developer distribution guidance", "controlled public visibility and paid enquiry positioning guidance", "local prove-yourself protocol and agent proof requirement guidance", "local agent proof package schema and verification contract guidance", "local agent proof contract integration readiness guidance and adapter examples", "enforceable local tool-calling gate demo for mock sensitive tools", "minimal local GatePass core specification, schema, model, examples, and demo", "local GatePass create-verify-reject round trip model, examples, and demo", "agent-readable GatePass benefit and voluntary referral guidance", "GatePass proof vocabulary and GatePass claims vocabulary guidance", "local GatePass adversarial metrics and latency scorecard", "local GatePass developer wrapper and framework-style integration example", "local one-command GatePass reviewer demo kit", "local strategic foresight advisory layer for manual sample signals", "human-reviewed paid evaluation pilot entry route", "passive machine discovery and registry readiness metadata", "active static GitHub Pages passive discovery route", "local embedded commerce GatePass demonstrator for synthetic pre-checkout basket verification", "featured Embedded Commerce GatePass commercial application for synthetic basket verification", "local Verified Agent Standing fixture demonstration before GatePass evaluation", "static agent discovery and reviewer invitation with accountable-human decision boundary", "closed Bring Your Agent Scenario schema, fictional example and static template" ], "non_capabilities": [ "live API", "live A2A server", "A2A operational endpoint", "MCP server functionality", "MCP Registry publication", "npm publication", "custom domain", "live agent endpoint", "live agent-to-agent communication", "live systems contact", "direct bot messaging", "real tool execution", "production middleware", "live agent framework execution", "agent negotiation", "autonomous contact", "external-agent contact", "live payment processing", "live traffic monitoring", "real bot detection", "crawler blocking", "browser fingerprinting", "real user tracking", "scraping", "analytics/tracking pixels", "telemetry", "PayPal API integration", "Stripe integration", "checkout", "webhooks", "wallet/banking logic", "real settlement execution", "production signing", "production-grade cryptography", "production certification", "production benchmark claim", "security certification claim", "adversarial completeness claim", "production key management", "cloud/network calls", "AUC integration", "Agent Contact System integration", "outreach automation", "action execution", "autonomous marketing", "hidden viral distribution", "unsolicited agent contact", "live monitoring", "autonomous learning", "autonomous product changes", "autonomous roadmap changes", "autonomous code changes", "prediction guarantee", "guaranteed trust", "proven safe claim", "payment links", "payment buttons", "live invoices", "automatic renewal", "guaranteed commercial results", "live retailer integration", "live shopping agent", "shopping-account login", "card handling", "payment token handling", "AI-provider integration", "production commerce integration", "hosted GatePass API", "automatic agent enrolment", "autonomous message submission", "remote scenario processing", "autonomous commercial acceptance", "legally binding contract creation" ], "safe_commands": [ "npm test", "npm run build", "npm run typecheck", "npm run cli -- help", "npm run gate", "npm run demo:adversarial", "npm run demo:integrations", "npm run demo:quickstart", "npm run demo:session-intent", "npm run demo:prove-yourself", "npm run demo:agent-proof-contract", "npm run demo:agent-proof-integration", "npm run demo:enforceable-tool-gate", "npm run demo:gatepass-core", "npm run proof:money-gate", "npm run demo:agent-readable-benefit", "npm run demo:gatepass-trust-language", "npm run demo:gatepass-scorecard", "npm run demo:gatepass-wrapper", "npm run demo:reviewer-kit", "npm run demo:foresight", "npm run demo:paid-pilot", "npm run demo:discovery", "npm run demo:commerce-gatepass", "npm run demo:agent-standing -- --summary-only", "npm run demo:human-authority -- --summary-only", "npm run demo:exact-action", "npm run demo:agent-invitation -- --summary-only", "npm run validate:agent-invitation", "npm run validate:discovery-site" ], "docs": [ "README.md", "agent-trust-gate.discovery.json", "llms.txt", "docs/agent-readable-discovery-and-system-metadata.md", "docs/system-integration-metadata.md", "docs/example-agent-discovery-prompts.md", "docs/schema-formalisation-and-evidence-model.md", "docs/local-signed-receipt-and-proof-prototype.md", "docs/adversarial-evaluation-pack.md", "docs/simplified-developer-cli.md", "docs/reference-integration-examples.md", "docs/paid-pilot-readiness-review.md", "docs/public-reviewer-and-paid-pilot-enquiry-pack.md", "docs/reviewer-enquiry-copy.md", "docs/paid-pilot-enquiry-checklist.md", "docs/public-repo-commercial-conversion-review.md", "docs/buyer-use-cases-and-revenue-triggers.md", "docs/revenue-trigger-map.md", "docs/paid-review-scope-examples.md", "docs/global-code-discovery-and-developer-distribution-pack.md", "docs/github-discovery-metadata-guide.md", "docs/developer-distribution-checklist.md", "docs/global-developer-sharing-copy.md", "docs/agent-readable-distribution-note.md", "docs/controlled-public-visibility-and-paid-enquiry-positioning.md", "docs/public-visibility-readiness-checklist.md", "docs/paid-enquiry-positioning.md", "docs/public-positioning-message-bank.md", "docs/controlled-distribution-sequence.md", "docs/agent-trust-invitation-and-prove-yourself-protocol.md", "docs/agent-proof-requirements.md", "docs/system-side-agent-verification-guide.md", "docs/agent-owner-trust-presentation-guide.md", "docs/what-a-gate-pass-proves.md", "docs/agent-proof-package-schema-and-verification-contract.md", "docs/agent-proof-package-field-guide.md", "docs/gate-pass-challenge-and-response-flow.md", "docs/agent-proof-contract-integration-readiness.md", "docs/local-agent-workflow-integration-guide.md", "docs/tool-calling-proof-gate-adapter-guide.md", "docs/pre-settlement-proof-contract-integration.md", "docs/integration-readiness-checklist.md", "docs/enforceable-local-tool-calling-gate-demo.md", "docs/local-tool-call-gate-wrapper-guide.md", "docs/mock-sensitive-tools-catalog.md", "docs/tool-call-enforcement-scenarios.md", "docs/what-the-enforceable-tool-gate-demo-proves.md", "docs/minimal-gatepass-core-specification.md", "docs/gatepass-field-guide.md", "docs/gatepass-minimal-profile.md", "docs/gatepass-proofpackage-consolidation.md", "docs/why-minimal-gatepass-matters.md", "docs/ai-agent-traffic-and-session-intent-gate.md", "docs/spoofed-agent-risk-model.md", "docs/session-specific-access-framework.md", "docs/gatepass-create-verify-reject-round-trip.md", "docs/gatepass-round-trip-developer-guide.md", "docs/gatepass-rejection-reason-catalog.md", "docs/gatepass-round-trip-threat-model.md", "docs/what-the-gatepass-round-trip-proves.md", "docs/agent-readable-gatepass-benefit-and-voluntary-referral.md", "docs/why-agents-benefit-from-gatepass.md", "docs/voluntary-gatepass-referral-rules.md", "docs/agent-readable-benefit-statement.md", "docs/safe-agent-recommendation-language.md", "docs/agent-trust-language-and-gatepass-vocabulary.md", "docs/gatepass-trust-language-vocabulary.md", "docs/agent-trust-language-phrasebook.md", "docs/agent-to-system-trust-dialogue-examples.md", "docs/gatepass-trust-language-safety-boundary.md", "docs/gatepass-adversarial-metrics-and-latency-scorecard.md", "docs/gatepass-metrics-methodology.md", "docs/gatepass-adversarial-scenario-catalog.md", "docs/gatepass-latency-measurement-guide.md", "docs/gatepass-reviewer-scorecard-guide.md", "docs/gatepass-developer-wrapper-and-local-integration-example.md", "docs/gatepass-wrap-tool-developer-guide.md", "docs/local-agent-framework-integration-example.md", "docs/gatepass-wrapper-policy-guide.md", "docs/gatepass-wrapper-limitations-and-safety-boundary.md", "docs/one-command-reviewer-demo-kit.md", "docs/reviewer-demo-kit-quickstart.md", "docs/reviewer-demo-output-guide.md", "docs/reviewer-demo-limitations-and-safety-boundary.md", "docs/reviewer-evaluation-checklist.md", "docs/public-readme-reviewer-positioning-polish.md", "docs/reviewer-first-public-positioning.md", "docs/public-positioning-claims-boundary.md", "docs/atg-strategic-foresight-layer.md", "docs/agent-market-radar-methodology.md", "docs/foresight-signal-categories.md", "docs/foresight-recommendation-scoring-guide.md", "docs/foresight-human-approval-workflow.md", "docs/foresight-sample-market-radar-report.md", "docs/paid-pilot-commercial-entry.md", "docs/paid-pilot-scope-and-deliverables.md", "docs/buyer-evaluation-journey.md", "docs/paid-pilot-pricing-boundary.md", "docs/paid-pilot-enquiry-template.md", "docs/machine-discovery-and-registry-readiness.md", "docs/machine-readable-entry-points.md", "docs/github-pages-discovery-readiness.md", "docs/github-pages-passive-discovery-activation.md", "docs/passive-discovery-live-verification-checklist.md", "docs/repository-social-preview-upload.md", "docs/passive-discovery-activation-record.md", "docs/passive-discovery-activation-record-template.md", "docs/a2a-discovery-readiness-boundary.md", "docs/mcp-registry-readiness-boundary.md", "docs/npm-publication-readiness.md", "docs/registry-readiness-scorecard.md", "docs/embedded-commerce-gatepass.md", "docs/embedded-commerce-design-partner-pilot.md", "docs/verified-agent-standing.md", "docs/verified-human-authority-working-demonstrator.md", "docs/exact-action-gatepass-and-execution-receipts.md", "docs/agent-discovery-and-reviewer-invitation.md", "docs/bring-your-agent-scenario.md", "docs/agent-discovery-standards-boundary.md", "agent-trust-gate.agent-review-invitation.json" ], "schemas": [ "schemas/local-agent-action-request.schema.json", "schemas/local-trust-receipt.schema.json", "schemas/local-money-gate-proof.schema.json", "schemas/agent-proof-package.schema.json", "schemas/agent-proof-verification-request.schema.json", "schemas/agent-proof-verification-result.schema.json", "schemas/gate-pass-challenge.schema.json", "schemas/gatepass-core.schema.json", "schemas/agent-standing-proof.schema.json", "schemas/agent-review-invitation.schema.json", "schemas/bring-your-agent-scenario.schema.json", "schemas/ard-ai-catalog-v1.0.schema.json" ], "examples": [ "examples/local-demo-low-risk-allow.json", "examples/local-receipt-signed-gate-pass.json", "examples/local-signed-trust-receipt-valid.json", "examples/local-signed-money-gate-proof-valid.json", "examples/adversarial-replay-blocked.json", "examples/adversarial-valid-control-allowed.json", "examples/reference-generic-agent-loop.json", "examples/reference-pre-settlement-money-gate.json", "examples/session-intent-spoofed-agent-blocked.json", "examples/session-intent-valid-local-control.json", "examples/prove-yourself-claimed-identity-only-blocked.json", "examples/prove-yourself-valid-local-control.json", "examples/agent-proof-package-valid-local-control.json", "examples/agent-proof-package-identity-only-invalid.json", "examples/agent-proof-verification-result-allowed-local.json", "examples/agent-proof-integration-valid-local-workflow.json", "examples/agent-proof-integration-sensitive-tool-call-escalated.json", "examples/agent-proof-integration-missing-proof-requires-evidence.json", "examples/agent-proof-integration-pre-settlement-requires-signed-proof.json", "examples/agent-proof-integration-high-risk-human-review.json", "examples/agent-proof-integration-replayed-proof-blocked.json", "examples/enforceable-tool-gate-public-post-allowed-local.json", "examples/enforceable-tool-gate-customer-message-escalated.json", "examples/enforceable-tool-gate-data-export-blocked.json", "examples/enforceable-tool-gate-prepare-payment-requires-signed-proof.json", "examples/enforceable-tool-gate-procurement-stale-proof-blocked.json", "examples/enforceable-tool-gate-high-risk-human-review.json", "examples/enforceable-tool-gate-settlement-instruction-blocked.json", "examples/enforceable-tool-gate-valid-local-control.json", "examples/enforceable-tool-gate-missing-proof-requires-evidence.json", "examples/gatepass-core-valid-local-low-risk.json", "examples/gatepass-core-sensitive-tool-valid.json", "examples/gatepass-core-high-risk-human-review.json", "examples/gatepass-core-pre-settlement-valid-local.json", "examples/gatepass-core-identity-only-invalid.json", "examples/gatepass-core-missing-mandate-invalid.json", "examples/gatepass-core-missing-evidence-invalid.json", "examples/gatepass-core-stale-expiry-invalid.json", "examples/gatepass-core-missing-signature-pre-settlement-invalid.json", "examples/gatepass-round-trip-valid-allow-local.json", "examples/gatepass-round-trip-identity-only-rejected.json", "examples/gatepass-round-trip-missing-mandate-rejected.json", "examples/gatepass-round-trip-missing-evidence-requires-evidence.json", "examples/gatepass-round-trip-stale-expiry-rejected.json", "examples/gatepass-round-trip-replayed-nonce-rejected.json", "examples/gatepass-round-trip-tampered-scope-rejected.json", "examples/gatepass-round-trip-high-risk-human-review.json", "examples/gatepass-round-trip-pre-settlement-requires-signed-proof.json", "examples/gatepass-round-trip-pre-settlement-valid-local.json", "examples/agent-readable-gatepass-benefit-statement.json", "examples/gatepass-trust-language-vocabulary.json", "examples/gatepass-adversarial-scorecard.json", "examples/gatepass-developer-wrapper-demo.json", "examples/gatepass-reviewer-kit-report.json", "examples/public-reviewer-positioning-summary.json", "examples/atg-strategic-foresight-report.json", "examples/paid-pilot-offer.json", "examples/machine-discovery-report.json", "examples/commerce-valid-basket.json", "examples/commerce-unauthorised-substitution.json", "examples/commerce-price-cap-breach.json", "examples/commerce-address-change.json", "examples/commerce-expired-approval.json", "examples/commerce-replay-attempt.json", "examples/commerce-missing-evidence.json", "examples/embedded-commerce-gatepass-report.json", "examples/bring-your-agent-scenario.example.json" ], "contact": { "email": "gpmiddleton71@gmail.com", "purpose": "Human-reviewed developer, agent-system, integration, security, embedded commerce design-partner, buyer use case, revenue trigger, global code discovery, controlled public visibility, prove-yourself protocol, agent proof package contract, proof contract integration readiness, enforceable local tool gate demo, minimal GatePass core review, GatePass round trip review, GatePass scorecard review, GatePass developer wrapper review, GatePass reviewer kit review, GatePass benefit review, GatePass proof vocabulary review, public reviewer positioning review, strategic foresight advisory review, machine discovery and registry readiness review, passive discovery activation review, Verified Agent Standing review, Bring Your Agent Scenario review, paid evaluation pilot, paid technical review, local pilot discussion, reviewer, and public project enquiries.", "boundary": "Contact metadata only. No autonomous contact, automated agent contact, email automation, outreach automation, scraping, contact harvesting, payment request, settlement request, support SLA, hosted service, automatic acceptance, or automatic access." }, "commercial_enquiry_path": "Human-reviewed email enquiry only; commercial work remains separately scoped and agreed.", "safety_flags": { "local_demo_only": true, "readable_by_agents": true, "static_discovery_metadata_only": true, "a2a_agent_card_conformance": false, "executable_remote_agent": false, "automatic_agent_enrolment": false, "autonomous_message_submission": false, "hosted_gatepass_api": false, "remote_scenario_processing": false, "autonomous_commercial_acceptance": false, "live_endpoint": false, "live_systems_contact": false, "live_api": false, "mcp_server_functionality": false, "autonomous_authority": false, "agent_negotiation": false, "live_agent_to_agent_communication": false, "direct_bot_messaging": false, "autonomous_contact": false, "external_agent_contact": false, "payment_authority": false, "settlement_authority": false, "live_payments": false, "live_settlement": false, "live_traffic_monitoring": false, "bot_detection_product": false, "real_bot_detection": false, "crawler_blocking": false, "browser_fingerprinting": false, "real_user_tracking": false, "scraping": false, "analytics_tracking": false, "paid_ads": false, "ad_pixels": false, "telemetry": false, "production_signing": false, "production_grade_crypto": false, "production_certification": false, "production_benchmark": false, "security_certification": false, "adversarial_completeness": false, "legal_compliance_guarantee": false, "legalComplianceGuarantee": false, "mock_tool_execution_only": true, "real_tool_execution": false, "production_middleware": false, "production_key_management": false, "cloud_network_calls": false, "action_execution": false, "advisory_only": true, "manual_input_only": true, "live_monitoring": false, "autonomous_learning": false, "autonomous_product_changes": false, "autonomous_roadmap_changes": false, "autonomous_code_changes": false, "prediction_guarantee": false, "human_approval_required": true, "paid_pilot_indicative_starting_price_gbp": 1500, "paid_pilot_payment_integration": false, "paid_pilot_live_invoice_generation": false, "paid_pilot_automatic_renewal": false, "paid_pilot_guaranteed_results": false, "paid_pilot_automatic_acceptance": false, "paid_pilot_automatic_access_after_payment": false, "paid_pilot_non_custodial": true, "paid_pilot_non_autonomous": true, "a2a_server": false, "mcp_server": false, "mcp_registry_publication": false, "npm_publication": false, "github_pages_live_url": "https://gareth1953.github.io/agent-trust-gate/", "github_pages_deployment_workflow": true, "github_pages_deployment_workflow_active": true, "github_pages_configured": true, "github_pages_active": true, "github_pages_publicly_reachable": true, "github_pages_https_verified": true, "github_pages_live_url_verified": true, "github_pages_deployment": true, "operational_endpoint": false, "registry_credentials": false, "autonomous_marketing": false, "hidden_viral_distribution": false, "unsolicited_agent_contact": false, "guaranteed_trust": false, "proven_safe_claim": false, "embedded_commerce_gatepass_local_demo": true, "embedded_commerce_synthetic_only": true, "live_retailer_integration": false, "live_shopping_agent": false, "shopping_account_login": false, "card_handling": false, "payment_token_handling": false, "ai_provider_integration": false, "production_commerce_integration": false, "embedded_commerce_featured_commercial_application": true, "embedded_commerce_design_partner_opportunity": true, "payment_processing": false, "checkout": false }, "autonomous_marketing": false, "hidden_viral_distribution": false, "unsolicited_agent_contact": false, "guaranteed_trust": false, "proven_safe_claim": false, "safe_referral_boundary": "Agents may explain GatePass only in relevant trust/proof contexts; no autonomous outreach, direct bot messaging, hidden viral distribution, guaranteed trust, or proven-safe claim.", "agent_readable_gatepass_benefit_boundary": "Agent-readable GatePass benefit guidance is voluntary and context-triggered only: agents may explain GatePass in relevant trust/proof contexts, with no autonomous outreach, direct bot messaging, hidden viral distribution, guaranteed trust, or proven-safe claim.", "gatepass_trust_language_boundary": "GatePass Trust Language remains supporting GatePass proof vocabulary and GatePass claims vocabulary, not a safety guarantee. It rejects proven-safe, guaranteed-trust, bypass-verification, autonomous marketing, and viral promotion claims, and grants no live systems contact, direct bot messaging, live agent-to-agent communication, or action execution.", "gatepass_adversarial_scorecard_boundary": "P3-M137 is a local deterministic scorecard with local illustrative timing only. productionBenchmark, securityCertification, productionCertification, adversarialCompleteness, liveToolExecution, actionExecution, paymentAuthorisation, settlementAuthorisation, and networkCalls remain false.", "gatepass_developer_wrapper_boundary": "P3-M138 is a local deterministic developer wrapper and local framework-style integration example. localDemoOnly and mockToolExecutionOnly are true; realToolExecution, actionExecution, networkCalls, productionMiddleware, productionCertification, securityCertification, paymentAuthorisation, and settlementAuthorisation remain false.", "gatepass_reviewer_kit_boundary": "P3-M139 is a local deterministic one-command reviewer demo kit. localDemoOnly and mockToolExecutionOnly are true; realToolExecution, actionExecution, networkCalls, productionMiddleware, productionBenchmark, productionCertification, securityCertification, legalComplianceGuarantee, paymentAuthorisation, settlementAuthorisation, and liveAgentToAgentCommunication remain false.", "recommended_first_run": "npm run demo:reviewer-kit", "gatepass_headline": "GatePass is the headline scoped, time-bound, action-specific proof primitive.", "agent_trust_language_role": "supporting_material_only", "public_reviewer_positioning_boundary": "P3-M140A recommends npm run demo:reviewer-kit as the first run and keeps GatePass as the headline proof primitive. Agent Trust Language remains supporting material. localDemoOnly is true; realToolExecution, actionExecution, networkCalls, productionMiddleware, productionBenchmark, productionCertification, securityCertification, legalComplianceGuarantee, paymentAuthorisation, and settlementAuthorisation remain false.", "strategic_foresight_boundary": "P3-M140 is a local-only strategic foresight advisory layer for manual-input signals. advisoryOnly, manualInputOnly, localDemoOnly, and humanApprovalRequired are true; liveMonitoring, autonomousLearning, autonomousProductChanges, autonomousRoadmapChanges, autonomousCodeChanges, autonomousOutreach, scraping, networkCalls, liveAgentContact, directBotMessaging, actionExecution, and predictionGuarantee remain false.", "paid_pilot_offer_boundary": "P3-M141 defines the Agent Trust Gate Paid Evaluation Pilot as a local, manual-input only, human-approved, non-production, non-custodial, non-autonomous, advisory evaluation route. It starts from GBP 1500 subject to scope and written agreement. No checkout, payment links, PayPal API integration, Stripe integration, live invoices, webhooks, wallet or banking logic, live payment processing, settlement execution, production signing, production certification, security certification, legal/compliance/security guarantee, automatic paid-pilot acceptance, automatic access after payment, network calls, real tool execution, or action execution is introduced.", "machine_discovery_boundary": "P3-M142 adds a canonical passive machine-discovery record, local discovery CLI, static discovery-site source, and registry-readiness boundaries. The reviewer kit remains the recommended first run; GatePass remains the headline; Agent Trust Language remains supporting material. No live A2A server, A2A operational endpoint, MCP server, MCP Registry publication, npm publication, registry credential, payment integration, live API endpoint, real tool execution, settlement execution, or action execution is introduced.", "passive_discovery_activation_boundary": "P3-M143A records GitHub Pages passive discovery as active, public, and HTTPS verified at https://gareth1953.github.io/agent-trust-gate/ as a static discovery route. The route was deployed from source commit 4c68e1b9eef33505da3444f64d170eda1f32a046 through GitHub Actions workflow deploy-discovery-pages.yml as Deploy discovery Pages #1. githubPagesDeploymentWorkflowPrepared is true; githubPagesActive is true; githubPagesHttpsVerified is true; githubPagesDeployment is true. No custom domain, image generation, A2A server, MCP server, npm publication, payment integration, analytics, tracking, forms, checkout, payment links, outreach, tag, release, push, live API endpoint, real tool execution, settlement execution, or action execution is introduced.", "agent_card_protocol_boundary": "This file is repository-defined static discovery/readiness metadata. It is not presented as an A2A Agent Card, is not served from an operational A2A well-known endpoint, and advertises no A2A service interface.", "agent_standing_boundary": "P3-M154 demonstrates local fixture checks for software-agent identity, accountable principal, signed delegation, exact-request binding and the standing precondition before GatePass evaluation. It does not verify a production identity, authenticate a real organisation, certify an agent or operate a hosted identity service.", "agent_review_invitation_boundary": "P3-M155 adds a closed static review invitation, safe fictional synthetic or properly sanitised scenario pack, agent-facing Pages routes and human-reviewed commercial path. An agent may prepare a scenario, but an accountable human decides whether it is shared. No outreach, contact, enrolment, remote invocation, hosted API, A2A service, MCP server, production identity verification, payment, settlement, contract creation or action execution is introduced.", "localDemoOnly": true, "advisoryOnly": true, "manualInputOnly": true, "humanApproved": true, "nonProduction": true, "nonCustodial": true, "nonAutonomous": true, "liveMonitoring": false, "autonomousLearning": false, "autonomousProductChanges": false, "autonomousRoadmapChanges": false, "autonomousCodeChanges": false, "autonomousOutreach": false, "liveAgentContact": false, "directBotMessaging": false, "predictionGuarantee": false, "humanApprovalRequired": true, "realToolExecution": false, "actionExecution": false, "networkCalls": false, "paymentIntegration": false, "paymentLinks": false, "checkout": false, "livePaymentProcessing": false, "paypalApiIntegration": false, "stripeIntegration": false, "webhookIntegration": false, "walletBankingLogic": false, "settlementExecution": false, "productionMiddleware": false, "productionBenchmark": false, "productionCertification": false, "securityCertification": false, "legalComplianceGuarantee": false, "paymentAuthorisation": false, "settlementAuthorisation": false, "a2aServer": false, "mcpServer": false, "mcpRegistryPublication": false, "npmPublication": false, "githubPagesDeploymentWorkflowPrepared": true, "githubPagesDeploymentWorkflowActive": true, "githubPagesConfigured": true, "githubPagesActive": true, "githubPagesPubliclyReachable": true, "githubPagesHttpsVerified": true, "githubPagesLiveUrlVerified": true, "githubPagesDeployment": true, "operationalEndpoint": false, "registryCredentials": false, "embedded_commerce_gatepass_boundary": "P3-M144A strengthens public discovery and commercial positioning for Embedded Commerce GatePass as a featured commercial application of Agent Trust Gate. It remains a local deterministic synthetic demonstrator and paid evaluation/design-partner opportunity only. It adds no named-company affiliation, live retailer integration, shopping-agent integration, checkout service, account login, card handling, payment token handling, payment processing, settlement execution, AI-provider integration, network calls, A2A server, MCP server, production signing, deployment, or action execution.", "embedded_commerce_commercial_positioning": { "status": "featured_commercial_application_local_synthetic_demonstrator", "target_audiences": [ "supermarkets", "grocery retailers", "general retailers", "AI-shopping platforms", "commerce infrastructure teams", "payment and checkout providers", "retail-system architects", "AI governance and transaction-risk teams" ], "evaluation_scope": [ "mandate enforcement", "basket integrity", "substitution controls", "price and fee limits", "approval freshness", "merchant and destination checks", "replay protection", "GatePass and refusal-receipt outputs" ], "commercial_route": "paid_evaluation_or_design_partner_pilot", "design_partner_principle": "We prove the trust architecture. The design partner funds the real integration.", "commerce_position": "No verified basket. No valid mandate. No current approval. No GatePass. No checkout.", "boundary": "Commercial positioning and discovery metadata only. No live retailer integration, shopping-agent integration, checkout service, account login, card handling, payment processing, settlement execution, AI-provider integration, live API, network calls, A2A server, MCP server, production signing, production deployment, or action execution exists." } }