Card snapshot

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "name": "Vizier",
  "description": "Free anonymous A2A evaluation of proposed agent actions against caller-supplied authority; anonymous calls cannot authorize ALLOW. An authenticated integration is required for enforcement receipts. Not factuality verification or independent execution proof; REVIEW requires a human decision.",
  "provider": {
    "organization": "Vassiliy Lakhonin",
    "url": "https://github.com/vassiliylakhonin"
  },
  "supportedInterfaces": [
    {
      "url": "https://vizier.vassiliy-lakhonin.workers.dev/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    }
  ],
  "version": "0.5.7",
  "documentationUrl": "https://vizier.vassiliy-lakhonin.workers.dev/docs",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false,
    "extensions": [
      {
        "uri": "https://vizier.dev/extensions/security-posture/v1",
        "description": "Vizier Security Posture and Data Retention",
        "required": false,
        "params": {
          "a2a_send_message_example": {
            "jsonrpc": "2.0",
            "id": "1",
            "method": "SendMessage",
            "params": {
              "message": {
                "messageId": "message-1",
                "role": "ROLE_USER",
                "parts": [
                  {
                    "data": {
                      "agent": {
                        "id": "procurement-agent-01",
                        "owner": "acme-corp"
                      },
                      "principal": {
                        "id": "acme-corp"
                      },
                      "action": {
                        "type": "purchase",
                        "target": "supplier.example",
                        "parameters": {
                          "amount": 8200,
                          "currency": "USD"
                        }
                      },
                      "authority": {
                        "allowed_actions": [
                          "purchase"
                        ],
                        "constraints": {
                          "max_amount": 10000,
                          "currency": "USD",
                          "allowed_targets": [
                            "supplier.example"
                          ]
                        }
                      },
                      "context": {
                        "request_id": "allow-example-01",
                        "timestamp": null,
                        "source": "a2a"
                      }
                    }
                  }
                ]
              }
            }
          },
          "evaluation_boundary": "Anonymous A2A calls return evaluation-only decisions, never ALLOW. Authenticated enforcement requires an integration credential and a distinct receipt.",
          "price": "Anonymous A2A evaluation is free; no paid enforcement price is asserted by this card.",
          "zero_retention_guarantee": false,
          "prompt_retention": "none",
          "payload_persistence": "ephemeral_verification; reviews_7_days; financial_claims_until_resolved_plus_7_days",
          "dlp_sanitization": "real_time",
          "context_isolation_verified": true,
          "eval_framework_safe": true,
          "data_handling": [
            "No payment credentials accepted.",
            "Verification payloads remain ephemeral. Explicit /v1/reviews submissions persist for seven days; unresolved financial claims persist until reconciled, then at least seven more days; policy audits persist until operator removal; do not submit secrets or confidential documents.",
            "Audit ledger stores cryptographic action hashes and signed clearance receipts only."
          ]
        }
      }
    ]
  },
  "securitySchemes": {
    "bearerAuth": {
      "httpAuthSecurityScheme": {
        "scheme": "Bearer",
        "description": "Integration credential required for enforcement results. Anonymous A2A calls are evaluation-only and cannot return ALLOW."
      }
    }
  },
  "securityRequirements": [
    {
      "schemes": {}
    },
    {
      "schemes": {
        "bearerAuth": {
          "list": []
        }
      }
    }
  ],
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "verify_agent_action",
      "name": "Verify Agent Action",
      "description": "Evaluate whether a proposed agent action is allowed by delegated authority, policy, target, and context.",
      "tags": [
        "authorization",
        "policy",
        "agent-actions"
      ],
      "examples": [
        "Verify a procurement action against an amount limit and target allowlist."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "evaluate_delegated_authority",
      "name": "Evaluate Delegated Authority",
      "description": "Determine whether an agent has sufficient delegated authority for a requested action.",
      "tags": [
        "delegation",
        "authority",
        "least-privilege"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "generate_verification_receipt",
      "name": "Generate Verification Receipt",
      "description": "Return an auditable machine-readable receipt for an authorization decision.",
      "tags": [
        "receipt",
        "audit",
        "verification"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "activate_action_covenant",
      "name": "Activate Action Covenant",
      "description": "Through authenticated REST, activate one exact-action covenant after the integration supplies principal acceptance bound to the draft hash.",
      "tags": [
        "action-covenant",
        "acceptance",
        "rest"
      ],
      "examples": [
        "Activate a deployment covenant accepted by the principal for one exact target and parameter set."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "authorize_covenant_action",
      "name": "Authorize Covenant Action",
      "description": "Through authenticated REST, authorize an exact action against an active covenant, supplied evidence, and invalidation signals, returning a signed authorization receipt.",
      "tags": [
        "action-covenant",
        "authorization",
        "signed-receipt",
        "rest"
      ],
      "examples": [
        "Authorize the exact deployment action bound to an active covenant before execution."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "record_action_outcome",
      "name": "Record Action Outcome",
      "description": "Through authenticated REST, bind a caller-reported execution outcome to a valid ALLOW receipt and return a signed outcome receipt. Not independent execution proof.",
      "tags": [
        "action-covenant",
        "reported-outcome",
        "signed-receipt",
        "rest"
      ],
      "examples": [
        "Record the reported result of an authorized deployment and bind it to the authorization receipt."
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    }
  ],
  "signatures": [
    {
      "protected": "eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vdml6aWVyLnZhc3NpbGl5LWxha2hvbmluLndvcmtlcnMuZGV2Ly53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6InZpemllci0yMDI2LTA4LTEyLTQwNzkzMjQxIiwidHlwIjoiSk9TRSJ9",
      "signature": "OaGEl_LtZZqj8mc0UJ_bNK42snw00ztFpLqDzBNT9QJ7vP8KIFaQkhBMo5VG7HKqBq1m6yi8NTMxB0uQuCPkAA"
    }
  ]
}