Card snapshot

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "name": "Vizier",
  "description": "Evaluates proposed agent actions against supplied authority and deterministic policy. Not a factuality verifier; no live source retrieval. REVIEW requires a human decision before the external action.",
  "provider": {
    "organization": "Vassiliy Lakhonin",
    "url": "https://github.com/vassiliylakhonin"
  },
  "supportedInterfaces": [
    {
      "url": "https://vizier.vassiliy-lakhonin.workers.dev/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    }
  ],
  "version": "0.5.5",
  "documentationUrl": "https://vizier.vassiliy-lakhonin.workers.dev/docs",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false,
    "extensions": [
      {
        "uri": "https://vizier.dev/extensions/security-posture/v1",
        "description": "Vizier Security Posture and Data Retention",
        "required": false,
        "params": {
          "zero_retention_guarantee": false,
          "prompt_retention": "none",
          "payload_persistence": "ephemeral_verification; reviews_7_days; financial_claims_until_resolved_plus_7_days",
          "dlp_sanitization": "real_time",
          "context_isolation_verified": true,
          "eval_framework_safe": true,
          "data_handling": [
            "No payment credentials accepted.",
            "Verification payloads remain ephemeral. Explicit /v1/reviews submissions persist for seven days; unresolved financial claims persist until reconciled, then at least seven more days; policy audits persist until operator removal; do not submit secrets or confidential documents.",
            "Audit ledger stores cryptographic action hashes and signed clearance receipts only."
          ]
        }
      }
    ]
  },
  "securitySchemes": {
    "bearerAuth": {
      "httpAuthSecurityScheme": {
        "scheme": "Bearer",
        "description": "Integration credential required for enforcement results. Anonymous A2A calls are evaluation-only and cannot return ALLOW."
      }
    }
  },
  "securityRequirements": [
    {
      "schemes": {}
    },
    {
      "schemes": {
        "bearerAuth": {
          "list": []
        }
      }
    }
  ],
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "verify_agent_action",
      "name": "Verify Agent Action",
      "description": "Evaluate whether a proposed agent action is allowed by delegated authority, policy, target, and context.",
      "tags": [
        "authorization",
        "policy",
        "agent-actions"
      ],
      "examples": [
        "Verify a procurement action against an amount limit and target allowlist."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "evaluate_delegated_authority",
      "name": "Evaluate Delegated Authority",
      "description": "Determine whether an agent has sufficient delegated authority for a requested action.",
      "tags": [
        "delegation",
        "authority",
        "least-privilege"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "generate_verification_receipt",
      "name": "Generate Verification Receipt",
      "description": "Return an auditable machine-readable receipt for an authorization decision.",
      "tags": [
        "receipt",
        "audit",
        "verification"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "activate_action_covenant",
      "name": "Activate Action Covenant",
      "description": "Through authenticated REST, activate one exact-action covenant after the integration supplies principal acceptance bound to the draft hash.",
      "tags": [
        "action-covenant",
        "acceptance",
        "rest"
      ],
      "examples": [
        "Activate a deployment covenant accepted by the principal for one exact target and parameter set."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "authorize_covenant_action",
      "name": "Authorize Covenant Action",
      "description": "Through authenticated REST, authorize an exact action against an active covenant, supplied evidence, and invalidation signals, returning a signed authorization receipt.",
      "tags": [
        "action-covenant",
        "authorization",
        "signed-receipt",
        "rest"
      ],
      "examples": [
        "Authorize the exact deployment action bound to an active covenant before execution."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "record_action_outcome",
      "name": "Record Action Outcome",
      "description": "Through authenticated REST, bind a caller-reported execution outcome to a valid ALLOW receipt and return a signed outcome receipt. Not independent execution proof.",
      "tags": [
        "action-covenant",
        "reported-outcome",
        "signed-receipt",
        "rest"
      ],
      "examples": [
        "Record the reported result of an authorized deployment and bind it to the authorization receipt."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    }
  ],
  "signatures": [
    {
      "protected": "eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vdml6aWVyLnZhc3NpbGl5LWxha2hvbmluLndvcmtlcnMuZGV2Ly53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6InZpemllci0yMDI2LTA4LTEyLTQwNzkzMjQxIiwidHlwIjoiSk9TRSJ9",
      "signature": "IqGSB6Tnnshc7_g1awSY8StEsgVthfhYTSeSpGb69eK_pBTEz1lPAGiDwu4QJIIeVr0qyYhNixnJkTRBIWVvfw"
    }
  ]
}