{
  "schema": "claude-cowork-capability-v1",
  "connector": {
    "id": "trustvice",
    "name": "Trustvice + Trustvice Receipts",
    "publisher": "Trustvice",
    "description": "Manage Trustvice compliance audit + Trustvice Receipts cryptographic receipts from Claude — fully scoped to your active workspace.",
    "homepage": "https://trustvice.com",
    "privacy_url": "https://trustvice.com/legal#privacy-policy",
    "terms_url": "https://trustvice.com/legal#terms-of-service",
    "icon_url": "https://trustvice.com/brand/trustvice-loop-brandmark-icon.png",
    "version": "0.91.0"
  },
  "transport": {
    "mcp": {
      "endpoint": "https://mcp.trustvice.com/mcp"
    },
    "oauth2": {
      "authorization_endpoint": "https://trustvice.com/auth/authorize",
      "token_endpoint": "https://api.trustvice.com/v1/oauth/token",
      "scopes": [
        "admin:workspace",
        "manage:entpoind",
        "read:entpoind",
        "read:workspace",
        "write:entpoind",
        "write:keys",
        "write:webhooks",
        "write:workspace"
      ],
      "pkce_required": true,
      "dpop_required": false
    }
  },
  "surface_hints": {
    "suggested_prompts": [
      {
        "label": "Show me my audit log for the last hour",
        "prompt": "Read my workspace audit log for the last hour and summarize anything unusual."
      },
      {
        "label": "Verify a Trustvice receipt",
        "prompt": "Verify the Trustvice receipt with id ${receiptId} and explain whether the chain is intact."
      },
      {
        "label": "Request my EU AI Act Article 12 export",
        "prompt": "Request an EU AI Act Article 12 export for workspace ${workspaceId} for the last 90 days."
      },
      {
        "label": "Tighten my Tops sampling for production",
        "prompt": "Update my workspace Tops config so production runs are sampled at 100% with detail level extended."
      },
      {
        "label": "Top up my Trustvice Receipts budget",
        "prompt": "Add a $100 Trustvice Receipts run pack to my workspace ${workspaceId} (confirm before charging)."
      }
    ],
    "primary_actions": [
      {
        "tool": "account.session.list",
        "label": "List active sessions on this account."
      },
      {
        "tool": "account.session.current",
        "label": "Get the calling principal's current session."
      },
      {
        "tool": "account.profile.get",
        "label": "Get the authenticated account's profile."
      },
      {
        "tool": "account.email.change.pending",
        "label": "Read the email change already in flight, and which of the two addresses still has to confirm. Null when none is pending."
      },
      {
        "tool": "account.passkey.list",
        "label": "List registered passkeys."
      },
      {
        "tool": "account.notifications.get",
        "label": "Read notification preferences."
      },
      {
        "tool": "account.token.list",
        "label": "List your Personal Access Tokens (PATs)."
      },
      {
        "tool": "account.oauth-grants.list",
        "label": "List active OAuth grants to third-party agents (Claude, ChatGPT, Gemini, etc.)."
      }
    ],
    "confirmation_required_actions": [
      "account.session.revoke",
      "account.email.change",
      "account.passkey.revoke",
      "account.token.revoke",
      "account.oauth-grants.revoke",
      "account.delete",
      "org.member.remove",
      "org.transfer-ownership",
      "org.delete.schedule",
      "org.sso.connections.delete",
      "org.sso.domains.delete",
      "org.sso.scim-tokens.revoke",
      "workspace.create",
      "workspace.delete.schedule",
      "workspace.member.remove",
      "workspace.transfer-ownership",
      "workspace.entpoind.enable",
      "workspace.entpoind.disable",
      "billing.subscription.upgrade",
      "billing.subscription.downgrade",
      "billing.subscription.cancel",
      "billing.subscription.reactivate",
      "billing.packs.purchase",
      "billing.auto-topup.configure",
      "billing.cost-centers.delete",
      "billing.entpoind.tier.set",
      "billing.entpoind.top-up.purchase",
      "billing.entpoind.auto-overage.set",
      "billing.notarian.subscribe",
      "billing.notarian.unsubscribe",
      "billing.infinite-memory.subscribe",
      "billing.infinite-memory.unsubscribe",
      "billing.retention-extension.subscribe",
      "keys.issue",
      "keys.revoke",
      "keys.rotate",
      "keys.entpoind.issue",
      "webhooks.delete",
      "webhooks.signing-secret.rotate",
      "alerts.delete",
      "exports.delete",
      "retention.policy.update",
      "retention.extension.subscribe",
      "retention.extension.update",
      "retention.extension.cancel",
      "retention.subject.shred",
      "audit.stream.delete",
      "tops.config.delete",
      "number_one.conversation.delete",
      "number_one.memory.erase",
      "entpoind.monitor.http.remove",
      "entpoind.watch.dns.remove",
      "entpoind.watch.tls.remove",
      "entpoind.subscription.cancel",
      "privacy.dsr.submit",
      "privacy.export.request",
      "agents.identity.rotate",
      "agents.identity.revoke",
      "agents.identity.delegate.revoke",
      "agents.mandate.revoke",
      "nexus.underwriter.coverage.bind",
      "pricevice.policy.remove",
      "paradigm.breaker.signal.issue",
      "paradigm.consent.revoke",
      "driftvice.surface.revoke",
      "fabric.connections.revoke",
      "lens.execute",
      "notarian.snapshot.create",
      "cachet.revoke",
      "memory.remove"
    ]
  },
  "tools": [
    {
      "id": "account.session.list",
      "domain": "account",
      "summary": "List active sessions on this account.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.session.revoke",
      "domain": "account",
      "summary": "Revoke an active session by id (cannot be disabled — safety floor).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.session.current",
      "domain": "account",
      "summary": "Get the calling principal's current session.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.profile.get",
      "domain": "account",
      "summary": "Get the authenticated account's profile.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.profile.update",
      "domain": "account",
      "summary": "Update account profile (display name, avatar URL).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "account.email.change",
      "domain": "account",
      "summary": "Request an email change. A verification email is sent to the new address; the change applies only after click-through.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "account.email.change.pending",
      "domain": "account",
      "summary": "Read the email change already in flight, and which of the two addresses still has to confirm. Null when none is pending.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.passkey.list",
      "domain": "account",
      "summary": "List registered passkeys.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.passkey.revoke",
      "domain": "account",
      "summary": "Revoke a registered passkey.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.locale.set",
      "domain": "account",
      "summary": "Set the account-level preferred locale (overrides browser default).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.display-preferences.set",
      "domain": "account",
      "summary": "Set the account-level display preferences: colour theme and IANA timezone. Either field may be omitted; neither is a no-op.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.notifications.get",
      "domain": "account",
      "summary": "Read notification preferences.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.notifications.update",
      "domain": "account",
      "summary": "Update notification preferences.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "account.token.list",
      "domain": "account",
      "summary": "List your Personal Access Tokens (PATs).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.token.revoke",
      "domain": "account",
      "summary": "Revoke a PAT (cannot be disabled — safety floor).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.oauth-grants.list",
      "domain": "account",
      "summary": "List active OAuth grants to third-party agents (Claude, ChatGPT, Gemini, etc.).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.oauth-grants.revoke",
      "domain": "account",
      "summary": "Revoke an OAuth grant. The third-party agent's tokens are immediately invalidated.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.security-log.list",
      "domain": "account",
      "summary": "Read the account-level security log (logins, MFA, key issuance, anomalies).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "account.delete",
      "domain": "account",
      "summary": "Schedule account deletion in 30 days. Requires WebAuthn step-up.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.get",
      "domain": "org",
      "summary": "Get the current organization's details.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.update",
      "domain": "org",
      "summary": "Update organization name + locale.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.locale.set",
      "domain": "org",
      "summary": "Set the organization-default locale (inherited by new workspaces).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.billing-state.get",
      "domain": "org",
      "summary": "Get the org's current billing state (plan, subscription status, add-ons).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.member.list",
      "domain": "org",
      "summary": "List organization members.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.member.invite",
      "domain": "org",
      "summary": "Invite a new member to the organization. Sends a verification email.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.member.remove",
      "domain": "org",
      "summary": "Remove a member from the organization. They lose access to all workspaces immediately.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.member.role.change",
      "domain": "org",
      "summary": "Change an org member's role.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.invitations.list",
      "domain": "org",
      "summary": "List pending/expired invitations.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.invitations.resend",
      "domain": "org",
      "summary": "Resend a pending invitation (subject to 5-minute cooldown).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.invitations.revoke",
      "domain": "org",
      "summary": "Revoke a pending invitation.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.transfer-ownership",
      "domain": "org",
      "summary": "Transfer org ownership to another admin. Requires WebAuthn step-up + reason.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.delete.schedule",
      "domain": "org",
      "summary": "Schedule organization deletion in 30 days. Cancellable within the grace window.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.delete.cancel",
      "domain": "org",
      "summary": "Cancel a previously-scheduled org deletion (within grace).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.audit.list",
      "domain": "org",
      "summary": "Read org-level audit log entries (admin actions, member changes, billing).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.sso.connections.list",
      "domain": "org",
      "summary": "List the organization's SSO connections (SAML/OIDC), with sealed secrets redacted to booleans.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.sso.connections.upsert",
      "domain": "org",
      "summary": "Create or update a SAML/OIDC SSO connection. A provided OIDC client secret is sealed; SAML certificates are validated.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.sso.connections.delete",
      "domain": "org",
      "summary": "Delete an SSO connection by id (org-scoped).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.sso.domains.list",
      "domain": "org",
      "summary": "List the organization's captured SSO domains (verified state + the DNS TXT record to publish).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.sso.domains.create",
      "domain": "org",
      "summary": "Claim an email domain for SSO and mint its DNS TXT verification challenge.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.sso.domains.verify",
      "domain": "org",
      "summary": "Verify a claimed domain via a DNS-over-HTTPS TXT lookup (proof of control).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.sso.domains.enforcement",
      "domain": "org",
      "summary": "Toggle SSO enforcement for a verified domain (requires a verified domain + an active connection).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.sso.domains.delete",
      "domain": "org",
      "summary": "Remove a captured SSO domain (org-scoped).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.sso.scim-tokens.list",
      "domain": "org",
      "summary": "List a connection's SCIM bearer tokens (hash-only; the raw token is never returned).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "org.sso.scim-tokens.mint",
      "domain": "org",
      "summary": "Mint a SCIM 2.0 bearer token for a connection. The RAW token is returned exactly once; only its hash is stored.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "org.sso.scim-tokens.revoke",
      "domain": "org",
      "summary": "Revoke a SCIM bearer token by id.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.list",
      "domain": "workspace",
      "summary": "List all workspaces in the current organization.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.get",
      "domain": "workspace",
      "summary": "Get the full state of a single workspace by id.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.create",
      "domain": "workspace",
      "summary": "Create a new workspace in the current organization.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "workspace.update",
      "domain": "workspace",
      "summary": "Update workspace settings (name, retention, locale, Trustvice Receipts controls).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "workspace.rename",
      "domain": "workspace",
      "summary": "Rename a workspace (convenience alias of workspace.update).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "workspace.delete.schedule",
      "domain": "workspace",
      "summary": "Schedule a workspace for deletion in 30 days (grace period).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "workspace.delete.cancel",
      "domain": "workspace",
      "summary": "Cancel a previously-scheduled workspace deletion (within grace).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.region.binding-proof",
      "domain": "workspace",
      "summary": "Download the OpenTimestamps proof of the workspace's region binding.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.member.list",
      "domain": "workspace",
      "summary": "List members of a workspace with their roles.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.member.add",
      "domain": "workspace",
      "summary": "Add an organization member to a workspace with a specific role.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "workspace.member.role.change",
      "domain": "workspace",
      "summary": "Change a workspace member's role.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "workspace.member.remove",
      "domain": "workspace",
      "summary": "Remove a member from a workspace.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.transfer-ownership",
      "domain": "workspace",
      "summary": "Transfer workspace ownership to another admin.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "workspace.entpoind.enable",
      "domain": "workspace",
      "summary": "Enable Trustvice Receipts on a workspace (requires an org-level Trustvice Receipts subscription).",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "billing"
    },
    {
      "id": "workspace.entpoind.disable",
      "domain": "workspace",
      "summary": "Disable Trustvice Receipts on a workspace.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "workspace.regions.list",
      "domain": "workspace",
      "summary": "List the available regions a workspace can be created in.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.subscription.get",
      "domain": "billing",
      "summary": "Get the org's current Stripe subscription.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.subscription.upgrade",
      "domain": "billing",
      "summary": "Upgrade to a higher tier. Prorates charges; takes effect immediately.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.subscription.downgrade",
      "domain": "billing",
      "summary": "Downgrade to a lower tier. Effective at next billing period.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.subscription.cancel",
      "domain": "billing",
      "summary": "Cancel subscription at current period end. Workspace remains accessible until then.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.subscription.reactivate",
      "domain": "billing",
      "summary": "Reactivate a subscription that's been scheduled to cancel.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "billing"
    },
    {
      "id": "billing.invoices.list",
      "domain": "billing",
      "summary": "List invoices.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.invoices.get",
      "domain": "billing",
      "summary": "Get a single invoice.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.invoices.download",
      "domain": "billing",
      "summary": "Get a signed download URL for the invoice PDF.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.payment-method.get",
      "domain": "billing",
      "summary": "Get the current default payment method (masked).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.payment-method.update-url",
      "domain": "billing",
      "summary": "Get a signed URL to Stripe's hosted payment-method update page. Update happens in Stripe's UI.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "billing.packs.list",
      "domain": "billing",
      "summary": "List available top-up packs (runs, Number One queries, Trustvice calls).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.packs.purchase",
      "domain": "billing",
      "summary": "Purchase a top-up pack.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.auto-topup.get",
      "domain": "billing",
      "summary": "Get auto-topup configuration.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.auto-topup.configure",
      "domain": "billing",
      "summary": "Configure auto-topup. Fires when balance drops below threshold; capped at monthly USD limit.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.cost-centers.list",
      "domain": "billing",
      "summary": "List org cost centers (for tagging charges + per-cost-center invoicing).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.cost-centers.create",
      "domain": "billing",
      "summary": "Create a cost center.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "billing.cost-centers.update",
      "domain": "billing",
      "summary": "Update a cost center.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "billing.cost-centers.delete",
      "domain": "billing",
      "summary": "Delete a cost center. Tagged charges keep historical tag.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.cost-centers.assign-charge",
      "domain": "billing",
      "summary": "Tag a charge / invoice line with a cost center.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.entpoind.tier.set",
      "domain": "billing",
      "summary": "Set the Trustvice Receipts subscription tier for the org.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.entpoind.tier.get",
      "domain": "billing",
      "summary": "Get the current Trustvice Receipts tier.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.entpoind.top-up.purchase",
      "domain": "billing",
      "summary": "Purchase a Trustvice Receipts top-up pack (extra call quota for the current month).",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.entpoind.auto-overage.set",
      "domain": "billing",
      "summary": "Configure auto-overage for an Entpoind-enabled workspace.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.entpoind.billing-mode.set",
      "domain": "billing",
      "summary": "Set the Trustvice Receipts billing mode (combined vs separate Stripe subscription).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.entpoind.usage.current",
      "domain": "billing",
      "summary": "Get current Trustvice Receipts usage for the org (calls used + remaining quota + auto-overage status).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "billing.notarian.subscribe",
      "domain": "billing",
      "summary": "Subscribe to the Notarian add-on (per-tier subscription pricing).",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.notarian.unsubscribe",
      "domain": "billing",
      "summary": "Unsubscribe from Notarian at next billing period.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.infinite-memory.subscribe",
      "domain": "billing",
      "summary": "Subscribe to the Infinite Memory add-on for Number One ($19/mo on paid tiers).",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.infinite-memory.unsubscribe",
      "domain": "billing",
      "summary": "Unsubscribe Infinite Memory at next billing period.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "billing.retention-extension.subscribe",
      "domain": "billing",
      "summary": "Subscribe to the universal paid retention extension. Convenience alias of retention.extension.subscribe.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "keys.list",
      "domain": "keys",
      "summary": "List workspace API keys (active + revoked filter).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "keys.get",
      "domain": "keys",
      "summary": "Get a single workspace API key by id.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "keys.issue",
      "domain": "keys",
      "summary": "Issue a new workspace API key. Cleartext returned ONCE.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "keys.revoke",
      "domain": "keys",
      "summary": "Revoke a workspace API key. Propagates in ≤30s.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "keys.rotate",
      "domain": "keys",
      "summary": "Rotate a key: revoke the current value + issue a replacement with the same label + scopes. Cleartext returned ONCE.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "keys.scopes.list",
      "domain": "keys",
      "summary": "List the available scope grants for workspace API keys.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "keys.usage.get",
      "domain": "keys",
      "summary": "Get usage statistics (calls + last-used + IP CIDRs) for a key over a time window.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "keys.last-used.get",
      "domain": "keys",
      "summary": "Quick lookup: when was this key last used?",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "keys.entpoind.list",
      "domain": "keys",
      "summary": "Convenience: list only the Entpoind-product workspace keys.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "keys.entpoind.issue",
      "domain": "keys",
      "summary": "Issue an Entpoind-product workspace key (entp_*). Cleartext shown ONCE.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "webhooks.list",
      "domain": "webhooks",
      "summary": "List webhook endpoints for a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "webhooks.get",
      "domain": "webhooks",
      "summary": "Get a single webhook endpoint.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "webhooks.create",
      "domain": "webhooks",
      "summary": "Register a new webhook endpoint. Returns the signing secret cleartext ONCE.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "webhooks.update",
      "domain": "webhooks",
      "summary": "Update a webhook's URL, label, or event subscriptions.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "webhooks.delete",
      "domain": "webhooks",
      "summary": "Delete a webhook endpoint. Pending deliveries are abandoned.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "webhooks.enable",
      "domain": "webhooks",
      "summary": "Enable or disable a webhook without deleting it.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "webhooks.test-fire",
      "domain": "webhooks",
      "summary": "Fire a synthetic test event to a webhook to verify delivery + signature validation.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "webhooks.events.list",
      "domain": "webhooks",
      "summary": "List the event types this webhook can subscribe to (from the AsyncAPI 3 spec).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "webhooks.events.replay",
      "domain": "webhooks",
      "summary": "Replay missed events from a time window. Useful for recovering after webhook downtime.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "webhooks.signing-secret.rotate",
      "domain": "webhooks",
      "summary": "Rotate the HMAC signing secret. Old secret valid for 24h grace.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "webhooks.deliveries.list",
      "domain": "webhooks",
      "summary": "List delivery attempts for a webhook (success + failure history).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "webhooks.deliveries.retry",
      "domain": "webhooks",
      "summary": "Retry a specific failed delivery.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "alerts.list",
      "domain": "alerts",
      "summary": "List alert rules for a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "alerts.get",
      "domain": "alerts",
      "summary": "Get a single alert rule.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "alerts.create",
      "domain": "alerts",
      "summary": "Create a new alert rule.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "alerts.update",
      "domain": "alerts",
      "summary": "Update an alert's label / config / channels / enabled flag.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "alerts.delete",
      "domain": "alerts",
      "summary": "Delete an alert rule.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "alerts.enable",
      "domain": "alerts",
      "summary": "Enable an alert rule.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "alerts.disable",
      "domain": "alerts",
      "summary": "Disable an alert rule without deleting it.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "alerts.test-fire",
      "domain": "alerts",
      "summary": "Fire a synthetic test of an alert to verify channels.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "alerts.kinds.list",
      "domain": "alerts",
      "summary": "List all supported alert kinds + their config shapes + severity classifications.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "alerts.history.list",
      "domain": "alerts",
      "summary": "List historical firings for a given alert rule.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "exports.list",
      "domain": "exports",
      "summary": "List exports for a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "exports.get",
      "domain": "exports",
      "summary": "Get a single export's status + metadata.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "exports.request",
      "domain": "exports",
      "summary": "Request a new compliance export. Returns the export id; status polls reveal readiness.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "exports.download",
      "domain": "exports",
      "summary": "Get the signed download URL for a ready export (URL is time-bounded; SHA-256 included for integrity check).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "exports.verify",
      "domain": "exports",
      "summary": "Verify an export's Ed25519 signature + OTS Bitcoin proof. Offline-verifiable.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "exports.entpoind.receipt-bundle.request",
      "domain": "exports",
      "summary": "Request a portable Entpoind-receipt bundle — JSON manifest + receipt files + public key JWK + verify README. Verifiable with @entpoind/verify.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "exports.eu-ai-act.article-12.request",
      "domain": "exports",
      "summary": "Request an EU AI Act Article 12 compliant log bundle (prEN 18229-1 + ISO/IEC DIS 24970 schema). Cannot be disabled — regulatory mandate.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "exports.audit-log.request",
      "domain": "exports",
      "summary": "Request a JSON or CSV export of the workspace audit log filtered by time + kind.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "exports.kinds.list",
      "domain": "exports",
      "summary": "List the supported export kinds + their output formats + retention.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "exports.delete",
      "domain": "exports",
      "summary": "Delete a completed export (frees R2 storage immediately).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.policy.get",
      "domain": "retention",
      "summary": "Get the active retention policy for a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.policy.update",
      "domain": "retention",
      "summary": "Update workspace retention days (within tier limits).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "retention.histogram.get",
      "domain": "retention",
      "summary": "Get a histogram of record ages in the workspace (helps visualize what's near purge).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "retention.next-purge.preview",
      "domain": "retention",
      "summary": "Preview which records will purge in the next cycle (live 1-Hz countdown on the dashboard).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.purge-history.list",
      "domain": "retention",
      "summary": "List historical purge events with verification status.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.extension.subscribe",
      "domain": "retention",
      "summary": "Subscribe to the paid retention extension at the per-tier rate.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "retention.extension.get",
      "domain": "retention",
      "summary": "Get the current retention extension subscription (if any).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.extension.update",
      "domain": "retention",
      "summary": "Update the active retention extension (change duration).",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "retention.extension.cancel",
      "domain": "retention",
      "summary": "Cancel the retention extension at the end of the current billing period.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "retention.extension.rates.list",
      "domain": "retention",
      "summary": "List the per-tier retention extension rates (USD cents per GB per month).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.policy.suggested-tier.get",
      "domain": "retention",
      "summary": "Recommend a higher tier if the workspace's data growth + retention needs make extension uneconomical.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.audit.list",
      "domain": "retention",
      "summary": "List retention-policy audit events (changes, purges, extensions).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.subject-key.issue",
      "domain": "retention",
      "summary": "Issue (or fetch) the per-subject data key whose destruction IS the erasure.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "retention.subject.shred",
      "domain": "retention",
      "summary": "Destroy a data subject's key and append the destruction to the hash-chained shred ledger.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "retention.erasure-certificate.get",
      "domain": "retention",
      "summary": "Certify what was destroyed for one data subject, with the chain verified.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.workspace.list",
      "domain": "audit",
      "summary": "List audit log entries for a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "audit.workspace.get",
      "domain": "audit",
      "summary": "Get a specific audit entry by id.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.workspace.search",
      "domain": "audit",
      "summary": "Full-text search across a workspace's audit log.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "audit.workspace.live-tail",
      "domain": "audit",
      "summary": "Open a streaming subscription to new audit entries (SSE/streamable HTTP).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "audit.workspace.share",
      "domain": "audit",
      "summary": "Generate a time-bounded share URL to an audit entry (for external auditors).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "audit.workspace.share.list",
      "domain": "audit",
      "summary": "List the audit share links this workspace has minted, and whether each is still live.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.workspace.share.revoke",
      "domain": "audit",
      "summary": "Revoke an audit share link before it expires.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.custody.list",
      "domain": "audit",
      "summary": "List custody chain entries for a workspace (hash-chained, Ed25519-signed).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "audit.custody.get",
      "domain": "audit",
      "summary": "Get a custody entry by id (includes Ed25519 signature for offline verification).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.custody.verify",
      "domain": "audit",
      "summary": "Walk the workspace's custody chain and report whether it holds, naming the sequence where it breaks.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.tops.list",
      "domain": "audit",
      "summary": "List Tops feed entries (hash-chained + Ed25519-signed + OTS Bitcoin-anchored).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "audit.tops.verify",
      "domain": "audit",
      "summary": "Verify the hash chain + signatures + OTS proof of a range of Tops entries.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "audit.tops.continuity",
      "domain": "audit",
      "summary": "Check whether a Tops chain is committed through the period — the gap a passing hash walk cannot show.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "audit.shadow-sessions.list",
      "domain": "audit",
      "summary": "List Trustvice-staff shadow-mode sessions on a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.shadow-sessions.get",
      "domain": "audit",
      "summary": "Get full details + action feed of a shadow-mode session.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.aggregate",
      "domain": "audit",
      "summary": "Group + count audit entries by a dimension (kind, transport, outcome, agentClientId).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "audit.kinds.list",
      "domain": "audit",
      "summary": "List all audit-kind discriminator values supported by the platform.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.export.scoped",
      "domain": "audit",
      "summary": "Request a scoped CSV/JSON export of audit entries matching filters. Returns a download URL when ready (signed, time-bounded).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "audit.outside-access.list",
      "domain": "audit",
      "summary": "List entries representing access from outside the workspace's normal principals (admin reads, side-car reads, share-url access).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.stream.list",
      "domain": "audit",
      "summary": "List the workspace's SIEM/S3 audit-stream destinations (Splunk HEC / Datadog / webhook / S3), with sealed credentials masked.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "audit.stream.configure",
      "domain": "audit",
      "summary": "Create or update a SIEM/S3 audit-stream destination. A provided vendor token / S3 secret / webhook secret is sealed at rest.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "audit.stream.delete",
      "domain": "audit",
      "summary": "Delete an audit-stream destination by id (workspace-scoped).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.get",
      "domain": "tops",
      "summary": "Get the Tops config for a specific scope (org, workspace, or actor).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.set",
      "domain": "tops",
      "summary": "Set the Tops config for a scope. Forensic detail level requires explicit acknowledgement.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "tops.config.delete",
      "domain": "tops",
      "summary": "Delete a scope-level Tops config (scope reverts to parent inheritance).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.list",
      "domain": "tops",
      "summary": "List Tops configs (all scopes in an org or workspace).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.cascade.resolve",
      "domain": "tops",
      "summary": "Resolve the effective Tops config at a specific (org, workspace, actor) leaf — applies the leaf-wins cascade.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.preset.apply",
      "domain": "tops",
      "summary": "Apply one of the 3 presets (Minimal / Recommended / Forensic) to a scope.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "tops.config.presets.list",
      "domain": "tops",
      "summary": "List the 3 supported presets with their config shapes + tradeoff labels.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.testbed.run",
      "domain": "tops",
      "summary": "Test the cascade resolver against a synthetic actor id to preview what entries it would generate.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.change-history.list",
      "domain": "tops",
      "summary": "List Tops-config change events (audit cross-link).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.sparkline.get",
      "domain": "tops",
      "summary": "Get a 30-day sparkline of Tops detail-level changes (visualizes forensic-cooldown nudge).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.audit-cross-links.get",
      "domain": "tops",
      "summary": "Get deep-links to the workspace audit log filtered by Tops-config-change events.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tops.config.cooldown-status.get",
      "domain": "tops",
      "summary": "Check if a scope is in the forensic cooldown window (auto-revert nudge).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "referrals.code.get",
      "domain": "referrals",
      "summary": "Get your active referral code + share URL.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "referrals.code.regenerate",
      "domain": "referrals",
      "summary": "Regenerate referral code. Old code stops working.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "referrals.list-sent",
      "domain": "referrals",
      "summary": "List referrals you have sent.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "referrals.list-received",
      "domain": "referrals",
      "summary": "List referrals where you were the referee.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "referrals.balance.get",
      "domain": "referrals",
      "summary": "Get your current point balance + lifetime multiplier tier.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "referrals.funnel.get",
      "domain": "referrals",
      "summary": "Get conversion funnel analytics (sent → clicked → joined → redeemed).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "referrals.redeem",
      "domain": "referrals",
      "summary": "Redeem a referral or voucher code.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "referrals.spend",
      "domain": "referrals",
      "summary": "Spend points on a reward (run pack, add-on credit, Every.org charity, etc.).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "referrals.spend-products.list",
      "domain": "referrals",
      "summary": "List the products you can redeem points against.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "referrals.ledger.list",
      "domain": "referrals",
      "summary": "List point transactions (earned + spent).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.conversation.create",
      "domain": "number_one",
      "summary": "Start a new Number One conversation.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "number_one.conversation.list",
      "domain": "number_one",
      "summary": "List your conversations (most recent first).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.conversation.get",
      "domain": "number_one",
      "summary": "Get a conversation's metadata + recent messages.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.conversation.delete",
      "domain": "number_one",
      "summary": "Delete a conversation. Memory facts attached to it survive but lose conversation context.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.message.send",
      "domain": "number_one",
      "summary": "Send a user message in a Number One conversation. Response streams back via SSE.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "number_one.message.list",
      "domain": "number_one",
      "summary": "List messages in a conversation.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.mode.set",
      "domain": "number_one",
      "summary": "Switch a conversation's mode (Calculator / Analyst / Admin).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.memory.list",
      "domain": "number_one",
      "summary": "List memory facts pinned in a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.memory.pin",
      "domain": "number_one",
      "summary": "Pin a memory fact so Number One reliably recalls it across conversations.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.memory.unpin",
      "domain": "number_one",
      "summary": "Unpin a memory fact.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.memory.erase",
      "domain": "number_one",
      "summary": "Permanently erase a memory fact (cannot be recovered).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "number_one.memory.cap.get",
      "domain": "number_one",
      "summary": "Get the memory cap for the workspace's tier (or unlimited if Infinite Memory add-on is active).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.monitor.http.add",
      "domain": "entpoind",
      "summary": "Register a new HTTP monitor (1-minute minimum interval).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "entpoind.monitor.http.list",
      "domain": "entpoind",
      "summary": "List HTTP monitors in a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.monitor.http.run-now",
      "domain": "entpoind",
      "summary": "Run a monitor check immediately (bypasses the scheduled interval).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "entpoind.monitor.http.remove",
      "domain": "entpoind",
      "summary": "Delete an HTTP monitor.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.watch.dns.add",
      "domain": "entpoind",
      "summary": "Register a DNS watch (detects record drift; signs every check as a receipt).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "entpoind.watch.dns.list",
      "domain": "entpoind",
      "summary": "List DNS watches in a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.watch.dns.remove",
      "domain": "entpoind",
      "summary": "Delete a DNS watch.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.watch.tls.add",
      "domain": "entpoind",
      "summary": "Register a TLS certificate watch (detects cert changes; signs every check).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "entpoind.watch.tls.list",
      "domain": "entpoind",
      "summary": "List TLS watches in a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.watch.tls.remove",
      "domain": "entpoind",
      "summary": "Delete a TLS watch.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.receipt.list",
      "domain": "entpoind",
      "summary": "List Trustvice receipts for a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.receipt.get",
      "domain": "entpoind",
      "summary": "Get a single receipt with full body.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.receipt.verify",
      "domain": "entpoind",
      "summary": "Verify a receipt's Ed25519 signature against the published public key. Cannot be disabled.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.usage.current",
      "domain": "entpoind",
      "summary": "Get current-period Trustvice Receipts usage for a workspace (calls per primitive + budget consumed).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.usage.historical",
      "domain": "entpoind",
      "summary": "Get historical Trustvice Receipts usage (per-day breakdown for a date range).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "entpoind.subscription.get",
      "domain": "entpoind",
      "summary": "Get workspace Trustvice Receipts subscription state.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.subscription.cancel",
      "domain": "entpoind",
      "summary": "Cancel the Trustvice Receipts subscription at the next billing period. Workspace's existing receipts remain accessible.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "entpoind.abuse-status.get",
      "domain": "entpoind",
      "summary": "Get the current Trustvice Receipts abuse status for a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.abuse-status.appeal",
      "domain": "entpoind",
      "summary": "Submit an appeal against an abuse-status flag or suspension.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "entpoind.abuse-status.appeal.list",
      "domain": "entpoind",
      "summary": "List this workspace's abuse appeals and their decisions.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.signing-key.get",
      "domain": "entpoind",
      "summary": "Get the current active Trustvice Receipts signing key id for the workspace's jurisdiction.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.signing-key.list",
      "domain": "entpoind",
      "summary": "List all signing keys (active + historical) usable to verify the workspace's receipts.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.signing-key.rotate-request.list",
      "domain": "entpoind",
      "summary": "List this workspace's signing-key rotation requests and their outcomes.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.signing-key.public.get",
      "domain": "entpoind",
      "summary": "Get the public-key JWK for a specific signing key id (for offline verification).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.status.get",
      "domain": "entpoind",
      "summary": "Get the Trustvice Receipts subsystem health (per-jurisdiction Worker uptime, per-primitive error rate, last self-attestation receipt).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.attestation-feed.get",
      "domain": "entpoind",
      "summary": "Get the daily Trustvice Receipts self-attestation receipt feed (Trustvice attesting to its own platform integrity).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.compliance.regimes.list",
      "domain": "entpoind",
      "summary": "List every compliance regime the registry models, with what is in force today and what is not yet.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.compliance.obligations.get",
      "domain": "entpoind",
      "summary": "Given a declared position, return the merged duty list across every governing regime — strictest timing wins, and regimes that wanted it looser are recorded.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "entpoind.compliance.posture.get",
      "domain": "entpoind",
      "summary": "Conformity Live: which clauses the workspace's own signed receipts actually discharge, each with the receipt ids behind it.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "privacy.dsr.submit",
      "domain": "privacy",
      "summary": "Submit a data-subject request (GDPR / CCPA). Cannot be disabled — statutory right.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "privacy.dsr.status",
      "domain": "privacy",
      "summary": "Check status of a submitted DSR. Cannot be disabled — statutory right.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "privacy.dsr.list",
      "domain": "privacy",
      "summary": "List all DSRs filed for this account / workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "privacy.export.request",
      "domain": "privacy",
      "summary": "Request a personal-data export (GDPR Art. 20 — data portability). Cannot be disabled.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "expensive"
    },
    {
      "id": "privacy.export.download",
      "domain": "privacy",
      "summary": "Get a signed download URL for a completed personal-data export.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "privacy.receipt.get",
      "domain": "privacy",
      "summary": "Get the Ed25519-signed completion receipt for a DSR (verifiable offline).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "privacy.receipt.verify",
      "domain": "privacy",
      "summary": "Verify a DSR receipt's Ed25519 signature + OTS proof against published public keys.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "privacy.subject-rights.list",
      "domain": "privacy",
      "summary": "List the data-subject rights Trustvice honours (GDPR, CCPA, LGPD) + the legal references.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "support.tickets.list",
      "domain": "support",
      "summary": "List your support tickets.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "support.tickets.create",
      "domain": "support",
      "summary": "Open a new support ticket.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "support.tickets.get",
      "domain": "support",
      "summary": "Get a ticket's details + reply thread.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "support.tickets.reply",
      "domain": "support",
      "summary": "Post a reply to a ticket.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "support.tickets.close",
      "domain": "support",
      "summary": "Close a ticket (optionally with a reason).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "support.satisfaction.rate",
      "domain": "support",
      "summary": "Rate the support experience after a ticket closes.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "discovery.capabilities.get",
      "domain": "discovery",
      "summary": "Get the full action registry catalogue (machine-readable). Same content as `/v1/actions.json`.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "discovery.version.get",
      "domain": "discovery",
      "summary": "Get the platform version + contracts package version + supported MCP / OpenAPI spec versions.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "discovery.schema.get",
      "domain": "discovery",
      "summary": "Get the JSON Schema for a specific action's input or output.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "discovery.locales.list",
      "domain": "discovery",
      "summary": "List supported user-facing locales.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "discovery.plans.list",
      "domain": "discovery",
      "summary": "List the Trustvice 360 subscription plans.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "discovery.regions.list",
      "domain": "discovery",
      "summary": "List the data-residency regions a workspace can be bound to: the seven base regions and the extended AWS locations.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "discovery.confirmation.token.verify",
      "domain": "discovery",
      "summary": "Verify a confirmation token is well-formed + still valid (cannot be disabled — safety floor).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.delegations.list",
      "domain": "agents",
      "summary": "List the A2A delegations this workspace has issued — the edges of the delegation graph (who delegated what to whom).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.enroll",
      "domain": "agents",
      "summary": "Enroll a new W3C DID Web agent identity under your principal.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.list",
      "domain": "agents",
      "summary": "List enrolled agent DIDs visible to the principal.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.get",
      "domain": "agents",
      "summary": "Get one enrolled agent DID with full document + rotation history.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.rotate",
      "domain": "agents",
      "summary": "Rotate the signing key for an agent DID. Old key kept active for a cooldown period.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.revoke",
      "domain": "agents",
      "summary": "Permanently revoke an agent DID. Cannot be undone; the DID id cannot be re-enrolled.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.did.resolve",
      "domain": "agents",
      "summary": "Resolve any DID (did:web, did:key, did:peer) and return the resolution result envelope.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.passport.verify",
      "domain": "agents",
      "summary": "Verify an Agent Passport presented at an org boundary — offline checks, plus what offline cannot establish.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.handshake.notarize",
      "domain": "agents",
      "summary": "Run the A2A attestation ceremony: verify both parties' identity, mandate and SPIFFE, then scope-match the capabilities.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.marketplace.rank",
      "domain": "agents",
      "summary": "Rank mandate templates by standing then narrowest scope — never by adoption.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.delegate",
      "domain": "agents",
      "summary": "Issue an A2A delegation token granting a remote partner DID a scope subset on your behalf.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "agents.identity.delegate.revoke",
      "domain": "agents",
      "summary": "Revoke an issued A2A delegation. Flips its bit in the published BitstringStatusList; listRevocable is false for delegations that predate the list.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.mandate.issue",
      "domain": "agents",
      "summary": "Issue an AP2 Verifiable Credential mandate authorising an agent up to spend / volume limits.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "agents.mandate.list",
      "domain": "agents",
      "summary": "List mandates issued under the principal.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.mandate.verify",
      "domain": "agents",
      "summary": "Verify a presented mandate VC against an action request. Returns ok or a structured reason.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.mandate.revoke",
      "domain": "agents",
      "summary": "Revoke a mandate. Goes into the BitstringStatusList revocation register immediately.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.spiffe.bind",
      "domain": "agents",
      "summary": "Bind a SPIFFE ID to an agent DID so SVIDs (X.509 or JWT) can attest as that agent.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.spiffe.workload.attest",
      "domain": "agents",
      "summary": "Exchange a SPIFFE SVID for a short-lived DPoP-bound Trustvice session.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "agents.trusted-roots.list",
      "domain": "agents",
      "summary": "List partner organization DIDs the workspace accepts as A2A federation roots.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "agents.trusted-roots.add",
      "domain": "agents",
      "summary": "Add a partner organization DID to the trusted-roots list for this workspace.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.run",
      "domain": "trustactor",
      "summary": "Post a run to a TrustActor spot actor (witness/council/historian/custodian/conscience/…) — observe + decide + anchor it in the workspace hash-chain.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "trustactor.runs.list",
      "domain": "trustactor",
      "summary": "List the workspace's TrustActor runs (actor IS the surface: witness | historian | custodian | conscience | …).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.actors.list",
      "domain": "trustactor",
      "summary": "List the TrustActor roster (optionally for one version) with each actor's min tier.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.agents.list",
      "domain": "trustactor",
      "summary": "List the workspace's posting agents (distinct agent DIDs across runs, with counts + last-seen).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.runs.verify-chain",
      "domain": "trustactor",
      "summary": "Verify the integrity of the workspace's run hash-chain from a starting sequence.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "trustactor.runs.diff",
      "domain": "trustactor",
      "summary": "Compare two TrustActor runs (classification + payload diff).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.runs.replay",
      "domain": "trustactor",
      "summary": "Reconstruct + re-verify a single run from its chain entry.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.liability.blame-graph",
      "domain": "trustactor",
      "summary": "Apportion fault across a multi-agent failure from a signed causal chain.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.liability.indemnity-feed",
      "domain": "trustactor",
      "summary": "Build the underwriting evidence feed for one agent — observed experience, stated credibility, and no pricing.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "trustactor.actor-score",
      "domain": "trustactor",
      "summary": "Compute an agent's Actor Score from its signed runs, with every deduction naming the run that caused it.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "nexus.catalog.get",
      "domain": "nexus",
      "summary": "Get the Nexus product catalogue (the available primitives + tiers for the workspace).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.usage.get",
      "domain": "nexus",
      "summary": "Get the workspace's Nexus usage + quota for the current period.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.oracle.agent.get",
      "domain": "nexus",
      "summary": "Look up the Nexus Oracle reputation for a specific agent (by id / DID).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.oracle.price",
      "domain": "nexus",
      "summary": "Price an agent action by risk, returning modulation, escrow and confidence.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.oracle.policy.set",
      "domain": "nexus",
      "summary": "Set the workspace's Oracle base price and risk multiplier.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.oracle.calibration.feedback",
      "domain": "nexus",
      "summary": "Report whether a price Oracle quoted turned out accurate.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.oracle.model.pin",
      "domain": "nexus",
      "summary": "Pin the Oracle pricing model version for the workspace.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.oracle.source.add",
      "domain": "nexus",
      "summary": "Record an external reputation source for Oracle.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.oracle.graphql",
      "domain": "nexus",
      "summary": "Query the Oracle read surface (policy, pricings, reputation).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.charter.publish",
      "domain": "nexus",
      "summary": "Publish a charter version for a publisher.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.charter.validate",
      "domain": "nexus",
      "summary": "Validate a set of charter rules without publishing them.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.charter.audit.request",
      "domain": "nexus",
      "summary": "Request an audit of a publisher's charter.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.charter.graphql",
      "domain": "nexus",
      "summary": "Query the Charter read surface (charters, audits).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.compass.verify",
      "domain": "nexus",
      "summary": "Verify that a proposed action matches the user's stated request.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.compass.verify.explain",
      "domain": "nexus",
      "summary": "Explain a stored Compass verification.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.compass.policy.set",
      "domain": "nexus",
      "summary": "Set the Compass review and deny thresholds.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.compass.hitl.escalate",
      "domain": "nexus",
      "summary": "Escalate a verification to a human reviewer.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.compass.model.pin",
      "domain": "nexus",
      "summary": "Pin the Compass matching model version.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.compass.graphql",
      "domain": "nexus",
      "summary": "Query the Compass read surface (verifications, policy, escalations).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.ledger.verify",
      "domain": "nexus",
      "summary": "Verify an action claim and mint its receipt.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.ledger.verifier.create",
      "domain": "nexus",
      "summary": "Register a custom Ledger verifier.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.ledger.locker.connect",
      "domain": "nexus",
      "summary": "Connect an external receipt locker.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.ledger.graphql",
      "domain": "nexus",
      "summary": "Query the Ledger read surface (receipts).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.lattice.delegation.publish",
      "domain": "nexus",
      "summary": "Publish a delegation from one agent to another.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.lattice.path.find",
      "domain": "nexus",
      "summary": "Find a delegation path between two agents.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.lattice.path.verify",
      "domain": "nexus",
      "summary": "Verify that a specific delegation path is valid.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.lattice.federation.node.add",
      "domain": "nexus",
      "summary": "Add a federation peer to the delegation graph.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.lattice.graphql",
      "domain": "nexus",
      "summary": "Query the Lattice read surface (delegations, peers).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.sentinel.ingest",
      "domain": "nexus",
      "summary": "Submit an agent request for Sentinel inspection.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.sentinel.policy.create",
      "domain": "nexus",
      "summary": "Create a Sentinel traffic policy.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.sentinel.classifier.create",
      "domain": "nexus",
      "summary": "Register a custom Sentinel classifier.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.sentinel.graphql",
      "domain": "nexus",
      "summary": "Query the Sentinel read surface (events, incidents).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.tribunal.dispute.file",
      "domain": "nexus",
      "summary": "File a dispute against another agent.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.tribunal.adjudicator.connect",
      "domain": "nexus",
      "summary": "Connect an adjudicator pool.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.tribunal.legal-framework.set",
      "domain": "nexus",
      "summary": "Set the workspace's governing legal framework.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.tribunal.graphql",
      "domain": "nexus",
      "summary": "Query the Tribunal read surface (disputes, precedents).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.keyring.credential.mint",
      "domain": "nexus",
      "summary": "Mint a scoped, time-boxed credential for a target system.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.keyring.policy.create",
      "domain": "nexus",
      "summary": "Create a Keyring issuance policy.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.keyring.vault.reference.add",
      "domain": "nexus",
      "summary": "Record a POINTER into your own vault. Never the secret itself.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.keyring.graphql",
      "domain": "nexus",
      "summary": "Query the Keyring read surface (credentials, policies).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.imprint.stamp.issue",
      "domain": "nexus",
      "summary": "Issue a provenance stamp over a payload.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.imprint.stamp.verify",
      "domain": "nexus",
      "summary": "Verify a payload against its Imprint stamp.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.imprint.policy.create",
      "domain": "nexus",
      "summary": "Create an Imprint licensing policy.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.imprint.runtime.register",
      "domain": "nexus",
      "summary": "Register a runtime that may issue Imprint stamps.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.imprint.graphql",
      "domain": "nexus",
      "summary": "Query the Imprint read surface (stamps, policies).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.underwriter.premium.quote",
      "domain": "nexus",
      "summary": "Quote a premium for covering an action. A price, not a commitment.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "nexus.underwriter.coverage.bind",
      "domain": "nexus",
      "summary": "Bind coverage against a policy — this creates a warranty.",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.underwriter.claim.file",
      "domain": "nexus",
      "summary": "File a claim against a bound warranty.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.underwriter.policy.create",
      "domain": "nexus",
      "summary": "Create a coverage policy with its rate and ceiling.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.underwriter.backend.connect",
      "domain": "nexus",
      "summary": "Connect a reinsurance backend.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "nexus.underwriter.graphql",
      "domain": "nexus",
      "summary": "Query the Underwriter read surface (warranties, claims).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.registry.search",
      "domain": "vector",
      "summary": "Search the public Vector agent registry.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.registry.entry.get",
      "domain": "vector",
      "summary": "Get a single Vector registry entry by id.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.pricing.get",
      "domain": "vector",
      "summary": "Look up Vector public pricing.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.mcp.servers.list",
      "domain": "vector",
      "summary": "List the MCP servers in the public Vector registry.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.catalog.get",
      "domain": "vector",
      "summary": "Get the workspace's Vector product catalogue.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.registry.register",
      "domain": "vector",
      "summary": "Register an agent, tool, MCP server or service in the Vector registry.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.persona.create",
      "domain": "vector",
      "summary": "Create a Vector persona — a named attribute + scope set an agent can act under.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.persona.select",
      "domain": "vector",
      "summary": "Resolve a persona by id for the calling agent.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.policy.create",
      "domain": "vector",
      "summary": "Create a Vector egress policy.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.policy.evaluate",
      "domain": "vector",
      "summary": "Ask whether a destination is permitted by the workspace's Vector policies.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.vault.credential.create",
      "domain": "vector",
      "summary": "Record a credential REFERENCE in the Vector vault. Never the secret itself.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.conduit.connection.create",
      "domain": "vector",
      "summary": "Create a Vector conduit connection to an upstream provider.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.cartograph.mapping.create",
      "domain": "vector",
      "summary": "Create a Cartograph field mapping between two schemas.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.cartograph.translate",
      "domain": "vector",
      "summary": "Translate one record through a Cartograph mapping.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.cartograph.batch",
      "domain": "vector",
      "summary": "Translate many records through a Cartograph mapping in one call.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "expensive"
    },
    {
      "id": "vector.compliance.declare",
      "domain": "vector",
      "summary": "Declare a compliance framework and its constraints for the workspace.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.compliance.check",
      "domain": "vector",
      "summary": "Check a region against a declared compliance framework.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "vector.routing.route.create",
      "domain": "vector",
      "summary": "Create a Vector route — an intent and the candidates that can serve it.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "vector.routing.resolve",
      "domain": "vector",
      "summary": "Resolve an intent to the target Vector selects for it.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.attest.price",
      "domain": "pricevice",
      "summary": "Issue a Price Provenance Receipt (PPR) for a pricing decision — signed, time-anchored, input-committed, policy-conformance-checked.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "pricevice.receipt.list",
      "domain": "pricevice",
      "summary": "List Price Provenance Receipts for a workspace (filter by domain or conformance verdict).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.receipt.get",
      "domain": "pricevice",
      "summary": "Get a single Price Provenance Receipt with its full seven-component body.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.receipt.verify",
      "domain": "pricevice",
      "summary": "Verify a PPR's Ed25519 signature against the published Pricevice public keys. Public — no account required. Cannot be disabled.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.policy.add",
      "domain": "pricevice",
      "summary": "Create a pricing policy — the declared bounds + Level-0 excluded-attributes list PPRs are conformance-checked against.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "pricevice.policy.list",
      "domain": "pricevice",
      "summary": "List pricing policies in a workspace.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.policy.get",
      "domain": "pricevice",
      "summary": "Get one pricing policy.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.policy.update",
      "domain": "pricevice",
      "summary": "Update a pricing policy (bumps the version; receipts pin the version they were checked against — history never rewrites).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "pricevice.policy.remove",
      "domain": "pricevice",
      "summary": "Deactivate a pricing policy (soft — issued receipts keep their pinned policy version).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.integrity.summary",
      "domain": "pricevice",
      "summary": "Get the Keystone pricing-integrity summary — totals by conformance verdict + the recent off-policy receipts with proof attached.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "pricevice.disclosure.generate",
      "domain": "pricevice",
      "summary": "Generate the Aegis personalized-pricing disclosure for a PPR (deterministic from the receipt facts; states exactly what is proven and what is not).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.idiom.session.open",
      "domain": "paradigm",
      "summary": "Open an Idiom mediation session with a counterparty agent (inline requires dual consent; annotation/advisory work single-sided).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.idiom.message.mediate",
      "domain": "paradigm",
      "summary": "Submit a message to an Idiom session for mediation/annotation. Substance is never altered; an unverified rendering is never released (fallback = annotated verbatim).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.idiom.advisory.analyze",
      "domain": "paradigm",
      "summary": "Advisory (single-side) analysis of a counterparty message: frame features, misread warnings, what it actually signals.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.idiom.profile.declare",
      "domain": "paradigm",
      "summary": "Declare your own agent's frame profile (recorded alongside inferred profiles; declared-vs-inferred divergence is itself a signal).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.idiom.transcript.get",
      "domain": "paradigm",
      "summary": "Get a session's signed, hash-chained mediation transcript (verbatim originals paired with renderings and annotations).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.temperament.card.publish",
      "domain": "paradigm",
      "summary": "Author and publish a temperament card for an API (validated for semantic consistency; publishes as provider_declared — verification upgrades evidence, never the publisher).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.temperament.card.get",
      "domain": "paradigm",
      "summary": "Get a temperament card (published cards are public registry reads; 'no card published' is itself a queryable state).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.temperament.search",
      "domain": "paradigm",
      "summary": "Search the temperament-card registry by API ref and behavioral filters (determinism class, status).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.temperament.strategy.get",
      "domain": "paradigm",
      "summary": "Get the compiled calling-strategy directives for a card (retry policy, input strictness, response interpretation, degradation expectation) — unverified cards carry lower trust weights.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.overture.offer.publish",
      "domain": "paradigm",
      "summary": "Publish an Overture initiation offer (a typed declaration of what you may proactively tell subscribers — delivery still requires their consent).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.overture.subscribe",
      "domain": "paradigm",
      "summary": "Subscribe to an initiation offer with consent rules (value threshold, frequency caps, quiet hours). Mints a signed consent receipt.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.overture.initiate",
      "domain": "paradigm",
      "summary": "Submit an initiation for delivery to subscribers. Consent-first: subscribers without an active subscription are never reached; each delivery is value-predicted against the attention budget.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.overture.inbox.list",
      "domain": "paradigm",
      "summary": "Read the initiation inbox — delivered initiations with predicted-value disclosure and feedback affordances.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.overture.feedback",
      "domain": "paradigm",
      "summary": "Rate a delivered initiation (useful / not useful / harmful) — the value loop that earns or costs the provider future attention.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.rapport.events.ingest",
      "domain": "paradigm",
      "summary": "Contribute consented agent-interaction telemetry (calls, retries, doc fetches, abandonment markers). Requires an active consent grant; identity is stripped at the edge.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.rapport.score.get",
      "domain": "paradigm",
      "summary": "Get the public Rapport Score for an API (k-floored: under-floor APIs honestly return 'insufficient_data', never a weak number).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.rapport.analytics.get",
      "domain": "paradigm",
      "summary": "Provider analytics for your own API: metric cells + attribution findings ranked by impact (which endpoint/error/pattern drives confusion or abandonment).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.counterfact.feasibility.check",
      "domain": "paradigm",
      "summary": "Check what substrate modes are available for a counterfactual query before running it (which mode, what confidence ceiling, what gaps, whether it would be refused).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.counterfact.query.run",
      "domain": "paradigm",
      "summary": "Run a counterfactual query against recorded interaction state. Every result carries its mode + confidence grade; un-answerable classes are refused with a structured explanation, never guessed.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.counterfact.record.get",
      "domain": "paradigm",
      "summary": "Get the sealed, hash-chained evidentiary record for an evaluated counterfactual (citable in audits and disputes).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.breaker.signal.list",
      "domain": "paradigm",
      "summary": "Read the public halt-signal log (active and historical) — append-only, complete, offline-verifiable. Public; cannot be disabled.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.breaker.check.action",
      "domain": "paradigm",
      "summary": "Pre-flight halt check: does any active signal's scope match this action descriptor? Returns matched signals + the strictest severity. Absent any signal, the answer is 'proceed' — the system halts on authenticated signal, never on silence.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.breaker.signal.issue",
      "domain": "paradigm",
      "summary": "Issue a halt signal (provider-class: your own registered surface only; duration is capped by the issuer-class ceiling and every signal expires — unconditionally).",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.breaker.point.register",
      "domain": "paradigm",
      "summary": "Register an enforcement point (gateway, runtime or MCP server) that will acknowledge and enforce breaker signals for this workspace.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.breaker.point.list",
      "domain": "paradigm",
      "summary": "List this workspace's registered enforcement points — which surfaces are wired to honour breaker signals.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.breaker.acknowledge",
      "domain": "paradigm",
      "summary": "Report an enforcement point's state for a signal (acknowledged / enforcing / declared non-compliant) — coverage visibility is part of the protocol.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.breaker.proposal.open",
      "domain": "paradigm",
      "summary": "Open a community-class halt proposal (draft signal + evidence) for the affected operator constituency to vote on — advisories never bypass the vote.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.umbra.document.publish",
      "domain": "paradigm",
      "summary": "Author and publish an Umbra negative-space document. Vague entries are structurally rejected (triggers + failure signature required; silent-failure entries require detection guidance).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.umbra.document.get",
      "domain": "paradigm",
      "summary": "Get an API's published Umbra document with entries (published documents are public registry reads; every document carries its coverage statement).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.umbra.input.check",
      "domain": "paradigm",
      "summary": "Pre-call check of an input descriptor against an API's known-unhandled classes — plan around documented failure modes instead of colliding with them.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.umbra.guards.get",
      "domain": "paradigm",
      "summary": "Get the compiled integration checks + runtime guards for an Umbra document (effect-verification wrappers for silent failures, input pre-validators, cliff-aware batching).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.survey.recommend",
      "domain": "paradigm",
      "summary": "For task T under constraints C at step S: the ecosystem's revealed preference — usage shares, quality differentials, behavioral annotations, and a mandatory coverage statement. 'More used' is distinguished from 'measurably better'.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.survey.map.get",
      "domain": "paradigm",
      "summary": "Read a usage-map cell (per task node and step role): API usage shares with quality differentials, k-floored, with skew flags and the coverage statement.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "paradigm.survey.events.contribute",
      "domain": "paradigm",
      "summary": "Contribute consented task-telemetry events (task context, call sequence roles, outcome markers). Contributors see deeper into the maps their data builds.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.consent.grant",
      "domain": "paradigm",
      "summary": "Create a Paradigm consent grant (scoped by modules + data class + granularity) — the precondition for ANY telemetry consumption. Mints a signed consent receipt.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "paradigm.consent.revoke",
      "domain": "paradigm",
      "summary": "Revoke a consent grant — unaggregated contributed events are purged and the contributor is excluded from future cells.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.surface.connect",
      "domain": "driftvice",
      "summary": "Connect a surface where company language lives (BYO credentials) — the metered unit. Driftvice reads it with the access you scope.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "driftvice.surface.list",
      "domain": "driftvice",
      "summary": "List the connected surfaces in a workspace with their sync health.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.surface.sync",
      "domain": "driftvice",
      "summary": "Trigger an incremental re-sync + re-extraction of a connected surface.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "driftvice.surface.revoke",
      "domain": "driftvice",
      "summary": "Revoke a connected surface — purges its derived usages per the platform's data-handling terms.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.glossary.search",
      "domain": "driftvice",
      "summary": "Semantic search over the DERIVED glossary — a projection of the live language graph, never an authored document.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.term.resolve",
      "domain": "driftvice",
      "summary": "Resolve a term to its canonical definition, approved aliases, and scope rules — with governance + drift status, so an agent knows settled vs drifting before it acts.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.metric.definition",
      "domain": "driftvice",
      "summary": "Return a metric's canonical computation (normalized + renderings) and whether surfaces currently diverge from it.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.term.check",
      "domain": "driftvice",
      "summary": "Check a definition or computation an agent is about to use against canon — report conformance or the specific drift.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.canon.status",
      "domain": "driftvice",
      "summary": "Get a concept's governance state, owner, coherence, and any linked decisions.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.drift.list",
      "domain": "driftvice",
      "summary": "Query the open drift feed — filter by type, severity, surface, domain, owner, or state.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.drift.resolve",
      "domain": "driftvice",
      "summary": "Resolve a drift via an owner decision: declare canon, merge/split concepts, approve/deprecate an alias, adjust scope, or accept the divergence with rationale.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "driftvice.canon.declare",
      "domain": "driftvice",
      "summary": "Declare canon for a concept — the authoritative definition, approved aliases, scope rules, and (for metrics) the canonical computation. Anchored to the deriving usages.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "driftvice.coherence.summary",
      "domain": "driftvice",
      "summary": "Get language-coherence scores per surface, per domain, and company-wide, with trends — plus ungoverned heavy-usage terms awaiting governance.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.canon.attest",
      "domain": "driftvice",
      "summary": "Issue a signed canon attestation — a verifiable snapshot of a canonical definition + governance + drift status at this time, so the ground-truth answer can be proven authentic.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "driftvice.canon.verify",
      "domain": "driftvice",
      "summary": "Verify a canon attestation's Ed25519 signature against the published Driftvice public keys. Public — no account required. Cannot be disabled.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "driftvice.canon.guard",
      "domain": "driftvice",
      "summary": "Before acting on a concept, ask whether its live definition has drifted from canon far enough to warn or block. Blocking is deliberately hard to reach.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "fabric.retrieve.signed",
      "domain": "fabric",
      "summary": "Query extracted records AND get a signed-retrieval receipt source built from exactly the rows returned — so a downstream claim can prove what grounded it.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "fabric.sources.catalog",
      "domain": "fabric",
      "summary": "List the connectable source catalog (128 sources across 11 surface classes) with their auth method + emitted record kinds.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "fabric.connections.connect",
      "domain": "fabric",
      "summary": "Connect a catalog source (BYO credentials) into the fabric. The connection's records broadcast to every subscribing product.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "fabric.connections.list",
      "domain": "fabric",
      "summary": "List the workspace's fabric connections with their sync health.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "fabric.connections.sync",
      "domain": "fabric",
      "summary": "Enqueue an on-demand sync + re-extraction of a fabric connection.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "fabric.connections.revoke",
      "domain": "fabric",
      "summary": "Revoke a fabric connection — purges its extracted records per the platform's data-handling terms.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "fabric.records.query",
      "domain": "fabric",
      "summary": "Query extracted records by kind / source / subscriber — the universal read every product (and agent) uses to consume the fabric.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "fabric.subscriptions.matrix",
      "domain": "fabric",
      "summary": "Return the fabric subscription matrix — which product consumes which record kinds, and how many products each kind powers.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "actionflow.flows.list",
      "domain": "actionflow",
      "summary": "List the workspace's ActionFlow flows.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "actionflow.flows.run",
      "domain": "actionflow",
      "summary": "Run a flow — trigger an execution through the bounded graph engine.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "actionflow.flows.publish",
      "domain": "actionflow",
      "summary": "Publish a flow (make the current draft the live version).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "actionflow.templates.list",
      "domain": "actionflow",
      "summary": "List the ActionFlow starter templates.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "actionflow.templates.instantiate",
      "domain": "actionflow",
      "summary": "Instantiate a template into a new draft flow in the workspace.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "actionflow.executions.list",
      "domain": "actionflow",
      "summary": "List recent ActionFlow executions.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "lens.list",
      "domain": "lens",
      "summary": "List the available compliance-evidence lenses.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "lens.execute",
      "domain": "lens",
      "summary": "Execute a lens over the audit chain — produces a signed compliance-evidence bundle (a paid action).",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "lens.validate",
      "domain": "lens",
      "summary": "Validate a lens definition (dry-run; no evidence bundle, no charge).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "lens.results.list",
      "domain": "lens",
      "summary": "List prior lens-execution results (the evidence-bundle history).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "notarian.snapshot.create",
      "domain": "notarian",
      "summary": "Create a signed Notarian snapshot of the workspace's audit state (a paid action).",
      "safety_level": "billing_impacting",
      "confirmation_policy": "always",
      "idempotent": false,
      "rate_class": "billing"
    },
    {
      "id": "notarian.verify-chain",
      "domain": "notarian",
      "summary": "Verify the Notarian transparency chain (free — a transparency guarantee).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "notarian.anchors.list",
      "domain": "notarian",
      "summary": "List the Notarian anchors (the published chain checkpoints).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.frameworks.list",
      "domain": "witness",
      "summary": "List the supported agent-framework catalog (~180 frameworks) with status, category, and integration pattern — the platform-wide registry, not product-scoped.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.frameworks.get",
      "domain": "witness",
      "summary": "Get one agent framework's catalog entry (support status, integration pattern, SDK package, docs).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.patterns.list",
      "domain": "witness",
      "summary": "List the 9 integration patterns an agent runtime can attach through (SDK, webhook, OAuth polling, cloud event, OTel, MCP server, LLM proxy, browser instrument, proprietary).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.subscriptions.get",
      "domain": "witness",
      "summary": "Get the Witness-Fabric subscription matrix — which products consume which record event classes from the neutral stream.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.interpose",
      "domain": "witness",
      "summary": "Witness one exchange with an agent you may not operate. Hashes only, unless retention is explicitly requested.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.interpose.verify",
      "domain": "witness",
      "summary": "Check presented bytes against an interpose receipt's hashes.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.records.list",
      "domain": "witness",
      "summary": "List the workspace's adapter-captured agent records from the neutral Witness-Fabric store (chain-free read — product-independent; no TrustActor enrollment required).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.records.post",
      "domain": "witness",
      "summary": "Post an adapter record directly onto the neutral Witness-Fabric plane (stored chain-free + fanned out to subscribing products; NOT anchored in the TrustActor hash chain — use the ingest lane for evidentiary anchoring).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.records.stats",
      "domain": "witness",
      "summary": "Aggregate stats over the workspace's neutral witness stream (totals + per-framework / per-pattern / per-event counts).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "witness.residency.prove",
      "domain": "witness",
      "summary": "Prove where a run's recorded hops stayed, with the ceiling the evidence actually supports.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.overview",
      "domain": "tranquility",
      "summary": "The workspace's live observability overview — agent-event stats, span stats, and SLO status, pulled live (honest source-unavailable states, never demo data).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.slos.list",
      "domain": "tranquility",
      "summary": "List the workspace's SLO definitions (latency, error-rate, cost-per-outcome, mandate-burn — one engine, any denomination).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.slos.create",
      "domain": "tranquility",
      "summary": "Define an SLO: an SLI series + comparator + threshold + target attainment %, in any denomination (ms | ratio | usd | count | burn), with optional multi-window burn-rate alerting.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "tranquility.slos.get",
      "domain": "tranquility",
      "summary": "Get one SLO definition + its recent evaluations (attainment, error budget, burn rate, status, coverage).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.slos.evaluate",
      "domain": "tranquility",
      "summary": "Evaluate an SLO now over a pushed SLI series; optionally SEAL the result as a signed, offline-verifiable attestation (?seal → ty-slo-attestation with its coverage embedded).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "tranquility.goals.list",
      "domain": "tranquility",
      "summary": "List goals (business outcomes) with their rolled cost decomposition + outcome stamp.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.goals.create",
      "domain": "tranquility",
      "summary": "Open a goal — a business outcome (ticket / booking / refund / conversation) whose full pursuit cost the Goal Ledger will stitch.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.goals.events.append",
      "domain": "tranquility",
      "summary": "Append cost events to a goal (turn / tool.call / retry / blocked / human / delivery); the ledger re-stitches the cost decomposition idempotently.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.goals.close",
      "domain": "tranquility",
      "summary": "Stamp a goal's terminal outcome (resolved / abandoned / escalated / failed) — the attribution the Goal Ledger exists for.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.goals.summary",
      "domain": "tranquility",
      "summary": "Cost per RESOLVED outcome + the waste decomposition (productive vs retry vs loop vs governance-blocked vs human vs delivery) across the workspace or a cost center.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.agent.records",
      "domain": "tranquility",
      "summary": "Read the workspace's normalized agent events across 180 frameworks (invocation / tool.call / memory.write / sub_agent.spawn / channel.message), filterable by framework/pattern/event/agent.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.agent.frameworks",
      "domain": "tranquility",
      "summary": "The supported agent-framework catalog this workspace can observe (the 180-framework matrix, live from the witness catalog).",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.metrics.query",
      "domain": "tranquility",
      "summary": "Query the workspace's metric points (OTLP gauge/sum/histogram) over a window, optionally filtered to one metric name — pulled live from the collector, newest-first, keyset-paginated. Honest source-unavailable state, never demo data.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.metrics.names",
      "domain": "tranquility",
      "summary": "The metric-name catalogue for the workspace (distinct name + type + unit + point count + last-seen over the window) — what metrics are actually flowing.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.logs.search",
      "domain": "tranquility",
      "summary": "Search the workspace's OTLP log records over a window — filterable by a minimum severity floor (SeverityNumber 1–24) and by trace id (correlate logs to a trace's spans). Newest-first, keyset-paginated, honest source-unavailable state.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.agent.tools",
      "domain": "tranquility",
      "summary": "Per-tool analytics across the witness stream: call counts, success/failure rate over KNOWN-outcome calls only, p50/p95 latency over TIMED calls only (with a timed/untimed coverage split), and top verbatim errors. Nothing is imputed.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.agent.fleet",
      "domain": "tranquility",
      "summary": "Per-agent fleet health: event counts by class, first/last seen, tool-failure rate over known-outcome calls, sub-agent spawn activity, and a CALIBRATED heuristic health tag (healthy/degraded/quiet) carrying a confidence + basis — never a bare score.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.agent.failures",
      "domain": "tranquility",
      "summary": "Cluster failing tool calls by a normalized error signature (ids/numbers/urls/quotes masked) into ranked clusters, each with a count, distinct-agent count, window, and a VERBATIM earliest representative for audit. Only explicit failures are clustered.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.agent.runTree",
      "domain": "tranquility",
      "summary": "Reconstruct one run's step tree as a renderable DAG (sequence + spawn edges) from the witness stream, grouped by externalRefs.runId, with an HONEST unresolved-spawn coverage count and a stated grouping limitation.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.cognition.guardrailPressure",
      "domain": "tranquility",
      "summary": "Clause-level guardrail cartography over pushed governed-chain outcomes: per-clause firing/allow/deny tallies, near-miss (only where a margin is present and a threshold is passed — never inferred), dead-clause detection, and an optional governance-tax summary. Tags carry a calibration note.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.cognition.blastRadius",
      "domain": "tranquility",
      "summary": "Pre-execution plan vitals over a typed action catalogue: reversibility ratio + a calibrated 0..100 blast-radius intensity, computed BEFORE execution. Actions with no metadata are EXCLUDED from the score (never assumed safe) and reported as unknown.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.cognition.charterConformance",
      "domain": "tranquility",
      "summary": "Diff an agent's observed behavior against its declared charter (allowed tools / autonomy ceiling / allowed tones) — charter-as-SLO. A pure diff with a COVERAGE statement: an undeclared dimension is unposeable, and a no-charter case returns undefined, never a fabricated 100%.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.cognition.vocabularyDrift",
      "domain": "tranquility",
      "summary": "Vocabulary drift — Driftvice pointed at agents. TY NOMINATES candidate named-concepts from the agent stream (multi-word Title-Case + quoted, with verbatim evidence); Driftvice (the canon authority) returns each term's status (governed-settled / governed-drifting / ungoverned). Unresolvable terms are 'unknown', never a fabricated verdict; when Driftvice is unbound the candidates return with canon status unavailable.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.evidence.usage.seal",
      "domain": "tranquility",
      "summary": "Seal the cost-per-outcome summary as a signed, offline-verifiable usage/chargeback ledger (ty-usage-ledger).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "tranquility.evidence.coverage.seal",
      "domain": "tranquility",
      "summary": "Seal an aggregate figure with its coverage statement as a signed artifact — 'p95 = 340ms over 100% of traffic with zero drop windows, signed' (ty-coverage-statement).",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "tranquility.artifacts.list",
      "domain": "tranquility",
      "summary": "List the signed evidence artifacts TY has minted for this workspace (attestations, usage ledgers, coverage statements, sealed alarms) with their verify references.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.views.list",
      "domain": "tranquility",
      "summary": "List saved views / custom monitors for a surface.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "tranquility.views.create",
      "domain": "tranquility",
      "summary": "Save a view / custom monitor (a signal + selector + panel spec) for reuse on a dashboard surface.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "placard.compose",
      "domain": "placard",
      "summary": "Compose a content-addressed AI disclosure notice and register it. The returned id IS the sha256 of the canonical bytes, so what was shown stays checkable. Refuses a notice missing its statutory core, and refuses to compose unsigned.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "placard.list",
      "domain": "placard",
      "summary": "List this workspace's composed placards, newest first.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "placard.coverage.get",
      "domain": "placard",
      "summary": "Is a subject covered on a channel? Answers `covered`, `not-covered`, or `unknown` — and `unknown` never collapses to covered, because an unreadable answer is not a satisfied duty.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "placard.delivery.record",
      "domain": "placard",
      "summary": "Record that a placard was delivered. `priorTurns` is REQUIRED, not defaulted — zero means the notice preceded the first interaction, and defaulting it would silently mark every delivery on time.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "placard.delivery.acknowledge",
      "domain": "placard",
      "summary": "Record that the person acknowledged a delivered notice. Only meaningful on surfaces that can carry an acknowledgement.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "placard.deliveries.get",
      "domain": "placard",
      "summary": "The delivery and acknowledgement state for one interaction. A late delivery reports as `delivered-late` and is never rounded up to `delivered`.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "placard.resolve",
      "domain": "placard",
      "summary": "PUBLIC. Fetch a placard by id. No account needed — anyone holding the id can read exactly what notice was composed.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "placard.verify",
      "domain": "placard",
      "summary": "PUBLIC. Check a placard's bytes against its id and its signature against the published keys. A genuinely invalid placard is a VERDICT, not an error — the call succeeds and reports `ok: false`.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "placard.keys.get",
      "domain": "placard",
      "summary": "PUBLIC. The JWK Set placards are signed with, for offline verification.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "cachet.declare",
      "domain": "cachet",
      "summary": "Declare what an agent may do and the hard limits it asserts. Versioned and superseded, never edited — an operator cannot widen a declaration to erase yesterday's finding.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "cachet.observe",
      "domain": "cachet",
      "summary": "Record a capability an agent was actually seen exercising. Bound to the declaration in force AT THE TIME, so dropping a limit later cannot clear the history.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "cachet.evidence.submit",
      "domain": "cachet",
      "summary": "Present identity evidence for an agent. `verified` is REQUIRED — defaulting true would promote every presented credential, defaulting false would bury working ones. Failed evidence is retained, not dropped.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "cachet.standing.get",
      "domain": "cachet",
      "summary": "The current standing as an UNSIGNED preview, so an operator can see where they stand before publishing. Carries `signed: false` in the payload — it is not a cachet and nobody can verify it.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "cachet.issue",
      "domain": "cachet",
      "summary": "Issue a signed, publicly resolvable standing. REFUSES an unrated conduct grade — a signed badge reads as an endorsement whatever word is inside it. `claimedGrade` is compared against the evidence and never raises the published grade.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "cachet.revoke",
      "domain": "cachet",
      "summary": "Withdraw an issued standing. NOT deletion — the cachet still resolves and reports that it was revoked and why, because a live citation must not 404 into 'never existed'. A reason is required.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "cachet.list",
      "domain": "cachet",
      "summary": "List issued cachets for this workspace, optionally for one agent.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "cachet.agents.list",
      "domain": "cachet",
      "summary": "Every agent Cachet knows about, from either side. An agent that was OBSERVED but never DECLARED appears here — listing only declared agents would hide the finding worth showing first.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "cachet.resolve",
      "domain": "cachet",
      "summary": "PUBLIC. Fetch a standing by id. A revoked cachet still resolves and says so — deleting it would make a live citation read as 'never existed' rather than 'withdrawn'.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "cachet.verify",
      "domain": "cachet",
      "summary": "PUBLIC. Check a cachet's bytes against its id and its signature against the published keys — and report whether it has been REVOKED, because cryptographic validity is not currency.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "cachet.keys.get",
      "domain": "cachet",
      "summary": "PUBLIC. The JWK Set cachets are signed with, for offline verification.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.publish",
      "domain": "emissary",
      "summary": "Publish a signed, content-addressed declaration of what you permit AI crawlers and agents to do. Refuses a declaration that states nothing, declares two stances on one subject, or leaves a conditional without a condition. This is a STATEMENT, not an enforcement mechanism.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "emissary.list",
      "domain": "emissary",
      "summary": "List this workspace's declarations, newest first — including retired versions, which still resolve.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.current.get",
      "domain": "emissary",
      "summary": "The live declaration for a domain. Nothing published is reported as a GAP, never as a permissive default — silence is not permission.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.fetches.list",
      "domain": "emissary",
      "summary": "The raw fetch ledger. Every row carries its attribution grade, and `operator` (CONFIRMED) is separate from `claimedOperator` (what the User-Agent said) — a User-Agent is typed by the client and proves nothing.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.audience.get",
      "domain": "emissary",
      "summary": "The graded audience summary. Counts split BY GRADE and never total into one 'N agents fetched your declaration' — that headline is how the category promotes User-Agent strings into facts. An unreadable ledger returns `unknown`, never zero.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.agents.list",
      "domain": "emissary",
      "summary": "The known-agent registry, with the BEST grade each operator could ever reach given what is registered — so an operator with no suffixes and no keys is told why its rows never clear the citable floor.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.agents.register",
      "domain": "emissary",
      "summary": "Register or replace a known AI-agent operator. Requires at least one fingerprint — a User-Agent marker, a reverse-DNS suffix, or a signing key — because with none, no fetch could ever be matched to it.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.resolve",
      "domain": "emissary",
      "summary": "PUBLIC. Fetch a declaration by id, as JSON or as the rendered text form. Every fetch is ledgered with a graded attribution. A declaration nobody can fetch without credentials would tell no crawler anything.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.verify",
      "domain": "emissary",
      "summary": "PUBLIC. Check a declaration's bytes against its id and its signature against the published keys — and report whether it has been RETIRED, because validity is not currency.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "emissary.keys.get",
      "domain": "emissary",
      "summary": "PUBLIC. The JWK Set declarations are signed with, for offline verification.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "c2pa.sign",
      "domain": "c2pa",
      "summary": "Sign a content hash into a C2PA manifest — COSE_Sign1 over the deterministic-CBOR claim, returned as embeddable bytes.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "c2pa.verify",
      "domain": "c2pa",
      "summary": "Verify a C2PA manifest against the published signer keys, and optionally assert it covers the content you have.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "receipts.issue",
      "domain": "receipts",
      "summary": "Mint a signed verifiable artifact — a receipt an auditor can check without trusting us, anchored into the Merkle batch.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": false,
      "rate_class": "default"
    },
    {
      "id": "receipts.get",
      "domain": "receipts",
      "summary": "Read one verifiable artifact by id, including its anchor reference once the batch has run.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "receipts.list",
      "domain": "receipts",
      "summary": "List this workspace's verifiable artifacts, newest first, optionally filtered to one kind.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "receipts.verify",
      "domain": "receipts",
      "summary": "Verify a signed artifact against the published keys — signature, and Merkle inclusion when you supply the anchored bundle.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "memory.put",
      "domain": "memory",
      "summary": "Write one memory entry. Requires a mandate unless writing your own namespace.",
      "safety_level": "mutation",
      "confirmation_policy": "ask",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "memory.get",
      "domain": "memory",
      "summary": "Read one memory entry by key.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "memory.list",
      "domain": "memory",
      "summary": "List live memory entries for an agent, key-ordered.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "memory.remove",
      "domain": "memory",
      "summary": "Tombstone one memory entry. A deletion is a WRITE and needs write authority.",
      "safety_level": "destructive",
      "confirmation_policy": "always",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "memory.snapshot",
      "domain": "memory",
      "summary": "Merkle snapshot of an agent's live memory — the root a portable export verifies against.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "memory.export",
      "domain": "memory",
      "summary": "Export an agent's live memory as a portable, tamper-evident bundle.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    },
    {
      "id": "memory.import.verify",
      "domain": "memory",
      "summary": "Verify a portable memory bundle that arrived from anywhere — integrity now, completeness only against a root committed to beforehand.",
      "safety_level": "read",
      "confirmation_policy": "none",
      "idempotent": true,
      "rate_class": "default"
    }
  ],
  "meta": {
    "generated_at": "2026-11-08T20:41:05.782Z",
    "contracts_version": "0.91.0",
    "tool_count": 519
  }
}