CPG-68000

{
  "name": "CPG-68000",
  "description": "CPG-68000 is the CPG application profile of ACM-68000 \u2014 open, MIT, GreenCore Solutions Corp. Same seven signals, same numbers, same locked meanings: CPG-000 NOT_APPLICABLE \u00b7 CPG-200 ALLOW \u00b7 CPG-300 CONDITIONAL \u00b7 CPG-403 RESTRICT \u00b7 CPG-404 NOT_FOUND \u00b7 CPG-451 ESCALATE \u00b7 CPG-500 SYSTEM_ERROR. The prefix scopes the domain; the number carries the semantics. No new signals, no renumbering, no meaning drift: any of the seven CPG- codes resolves to its ACM- definition, and anything outside the seven falls back to the base protocol. Wire emission is unchanged \u2014 GSC surfaces emit ACM- signals (x-gsc-signal); CPG- codes are the domain-scoped register this door teaches.",
  "supportedInterfaces": [
    {
      "url": "https://mcp.cpgagentprotocols.ai/mcp",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://cpg-68000.ai/",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    }
  ],
  "provider": {
    "url": "https://gsc-em.com",
    "organization": "GreenCore Solutions Corp."
  },
  "version": "1.5.1",
  "documentationUrl": "https://cpg-68000.ai/llms.txt",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extensions": [
      {
        "uri": "https://gsc-em.com/a2a/ext/scope-of-authority/v1",
        "description": "GSC scope of authority: read, resolve and discovery calls are autonomous; every transactional commit is human-signed at the GSC Navigator HITL boundary.",
        "required": false,
        "params": {
          "autonomous": [
            "read",
            "resolve",
            "discover"
          ],
          "humanSigned": [
            "transactional-commit",
            "order",
            "rfq-acceptance",
            "terms"
          ],
          "hitlBoundary": "https://gsc-navigator.ai/",
          "transactionSurface": "https://mcp.cpghumanintheloop.ai/mcp"
        }
      },
      {
        "uri": "https://gsc-em.com/a2a/ext/signal-door/v1",
        "description": "This surface is the CPG-68000 spec door: the seven-signal procurement protocol, resolved live on the standards beacon.",
        "required": false,
        "params": {
          "protocol": "ACM-68000",
          "profile": "CPG-68000",
          "registry": "io.github.greencore-solutions/gsc-marketplace",
          "beacon": "https://mcp.cpgagentprotocols.ai/mcp"
        }
      },
      {
        "uri": "https://gsc-em.com/a2a/ext/enforcement-posture/v1",
        "description": "These endpoints are open by design. When the buy side's credential standard reaches GA \u2014 expected Q4 2026-Q1 2027 \u2014 transactional methods migrate to OAuth 2.1 challenge per the MCP 2025-11-25 specification. Read access stays open. That is not pending work; that is the published plan.",
        "required": false,
        "params": {
          "enforcement_posture": "open-by-declaration",
          "migration_standard": "OAuth 2.1 + PKCE challenge (401 + WWW-Authenticate) on mcp:transact methods, per MCP spec 2025-11-25",
          "migration_trigger": "ecosystem GA of credentialed counterparties (enterprise A2A/MCP buy-side GA)",
          "migration_window": "Q4 2026 - Q1 2027",
          "declared": "2026-08-24",
          "operator": "GreenCore Solutions Corp.",
          "duns": "24-336-6774"
        }
      }
    ]
  },
  "securitySchemes": {
    "entraOAuth2": {
      "oauth2SecurityScheme": {
        "description": "Microsoft Entra OAuth 2.0 client credentials, GSC-provisioned after human review. Public reads on this door are open by design; tokens are required where commitments are made.",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "https://login.microsoftonline.com/54939635-2f2e-465a-8526-a907cb3c8ebd/oauth2/v2.0/token",
            "scopes": {
              "mcp:read": "Read/resolve calls on the CPG Agent Protocols beacon over MCP."
            }
          }
        },
        "oauth2MetadataUrl": "https://cpg-68000.ai/.well-known/oauth-authorization-server"
      }
    },
    "bearerJwt": {
      "httpAuthSecurityScheme": {
        "scheme": "Bearer",
        "bearerFormat": "JWT",
        "description": "Bearer access token presented in the Authorization header."
      }
    }
  },
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/markdown"
  ],
  "skills": [
    {
      "id": "resolve-signal",
      "name": "Resolve a signal",
      "description": "Any of the seven CPG-68000 / ACM-68000 signals to state, GTIN and buyer-side action.",
      "tags": [
        "cpg",
        "signals",
        "procurement"
      ]
    },
    {
      "id": "escalate-to-human",
      "name": "Escalate to a human",
      "description": "ACM-451 \u2014 the two GSC doors.",
      "tags": [
        "hitl",
        "escalation"
      ]
    },
    {
      "id": "hitl-contact",
      "name": "Human-in-the-Loop Contact",
      "description": "Reach GreenCore Solutions Corp. through this surface's live, human-reviewed contact endpoint (POST https://formspree.io/f/xjybzzdz with fields name, email, message). Every transactional commit is human-signed via the GSC Trading Desk.",
      "tags": [
        "contact",
        "hitl",
        "registration"
      ]
    }
  ],
  "signatures": [
    {
      "protected": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImdzYy1jYXJkcy0yMDI2LTA4In0",
      "signature": "wi97YTpiN4AeI9d83-tx3FOYJPFTyg2cfU2tiAUlggr3KI1RB8U5Ru59-_drC0iH-hAiWDhQZTlIyGouMchGTQ"
    }
  ]
}