| I-REG-agent-register | register agent | Supply chain, registry & lifecycle | held |
| I-REG-agent-get | get agent | Supply chain, registry & lifecycle | held |
| I-REG-agent-mutation | mutation agent detected | Supply chain, registry & lifecycle | held |
| I-REG-agent-revoked | revoked agent not active | Supply chain, registry & lifecycle | held |
| I-REG-agent-reregister | revoked agent cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-agent_instance-register | register agent_instance | Supply chain, registry & lifecycle | held |
| I-REG-agent_instance-get | get agent_instance | Supply chain, registry & lifecycle | held |
| I-REG-agent_instance-mutation | mutation agent_instance detected | Supply chain, registry & lifecycle | held |
| I-REG-agent_instance-revoked | revoked agent_instance not active | Supply chain, registry & lifecycle | held |
| I-REG-agent_instance-reregister | revoked agent_instance cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-organization-register | register organization | Supply chain, registry & lifecycle | held |
| I-REG-organization-get | get organization | Supply chain, registry & lifecycle | held |
| I-REG-organization-mutation | mutation organization detected | Supply chain, registry & lifecycle | held |
| I-REG-organization-revoked | revoked organization not active | Supply chain, registry & lifecycle | held |
| I-REG-organization-reregister | revoked organization cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-trust_domain-register | register trust_domain | Supply chain, registry & lifecycle | held |
| I-REG-trust_domain-get | get trust_domain | Supply chain, registry & lifecycle | held |
| I-REG-trust_domain-mutation | mutation trust_domain detected | Supply chain, registry & lifecycle | held |
| I-REG-trust_domain-revoked | revoked trust_domain not active | Supply chain, registry & lifecycle | held |
| I-REG-trust_domain-reregister | revoked trust_domain cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-runtime-register | register runtime | Supply chain, registry & lifecycle | held |
| I-REG-runtime-get | get runtime | Supply chain, registry & lifecycle | held |
| I-REG-runtime-mutation | mutation runtime detected | Supply chain, registry & lifecycle | held |
| I-REG-runtime-revoked | revoked runtime not active | Supply chain, registry & lifecycle | held |
| I-REG-runtime-reregister | revoked runtime cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-model-register | register model | Supply chain, registry & lifecycle | held |
| I-REG-model-get | get model | Supply chain, registry & lifecycle | held |
| I-REG-model-mutation | mutation model detected | Supply chain, registry & lifecycle | held |
| I-REG-model-revoked | revoked model not active | Supply chain, registry & lifecycle | held |
| I-REG-model-reregister | revoked model cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-mcp_server-register | register mcp_server | Supply chain, registry & lifecycle | held |
| I-REG-mcp_server-get | get mcp_server | Supply chain, registry & lifecycle | held |
| I-REG-mcp_server-mutation | mutation mcp_server detected | Supply chain, registry & lifecycle | held |
| I-REG-mcp_server-revoked | revoked mcp_server not active | Supply chain, registry & lifecycle | held |
| I-REG-mcp_server-reregister | revoked mcp_server cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-a2a_endpoint-register | register a2a_endpoint | Supply chain, registry & lifecycle | held |
| I-REG-a2a_endpoint-get | get a2a_endpoint | Supply chain, registry & lifecycle | held |
| I-REG-a2a_endpoint-mutation | mutation a2a_endpoint detected | Supply chain, registry & lifecycle | held |
| I-REG-a2a_endpoint-revoked | revoked a2a_endpoint not active | Supply chain, registry & lifecycle | held |
| I-REG-a2a_endpoint-reregister | revoked a2a_endpoint cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-tool-register | register tool | Supply chain, registry & lifecycle | held |
| I-REG-tool-get | get tool | Supply chain, registry & lifecycle | held |
| I-REG-tool-mutation | mutation tool detected | Supply chain, registry & lifecycle | held |
| I-REG-tool-revoked | revoked tool not active | Supply chain, registry & lifecycle | held |
| I-REG-tool-reregister | revoked tool cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-service-register | register service | Supply chain, registry & lifecycle | held |
| I-REG-service-get | get service | Supply chain, registry & lifecycle | held |
| I-REG-service-mutation | mutation service detected | Supply chain, registry & lifecycle | held |
| I-REG-service-revoked | revoked service not active | Supply chain, registry & lifecycle | held |
| I-REG-service-reregister | revoked service cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-capability-register | register capability | Supply chain, registry & lifecycle | held |
| I-REG-capability-get | get capability | Supply chain, registry & lifecycle | held |
| I-REG-capability-mutation | mutation capability detected | Supply chain, registry & lifecycle | held |
| I-REG-capability-revoked | revoked capability not active | Supply chain, registry & lifecycle | held |
| I-REG-capability-reregister | revoked capability cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-policy-register | register policy | Supply chain, registry & lifecycle | held |
| I-REG-policy-get | get policy | Supply chain, registry & lifecycle | held |
| I-REG-policy-mutation | mutation policy detected | Supply chain, registry & lifecycle | held |
| I-REG-policy-revoked | revoked policy not active | Supply chain, registry & lifecycle | held |
| I-REG-policy-reregister | revoked policy cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-credential_issuer-register | register credential_issuer | Supply chain, registry & lifecycle | held |
| I-REG-credential_issuer-get | get credential_issuer | Supply chain, registry & lifecycle | held |
| I-REG-credential_issuer-mutation | mutation credential_issuer detected | Supply chain, registry & lifecycle | held |
| I-REG-credential_issuer-revoked | revoked credential_issuer not active | Supply chain, registry & lifecycle | held |
| I-REG-credential_issuer-reregister | revoked credential_issuer cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-authorization_service-register | register authorization_service | Supply chain, registry & lifecycle | held |
| I-REG-authorization_service-get | get authorization_service | Supply chain, registry & lifecycle | held |
| I-REG-authorization_service-mutation | mutation authorization_service detected | Supply chain, registry & lifecycle | held |
| I-REG-authorization_service-revoked | revoked authorization_service not active | Supply chain, registry & lifecycle | held |
| I-REG-authorization_service-reregister | revoked authorization_service cannot be reissued | Supply chain, registry & lifecycle | held |
| I-REG-execution_adapter-register | register execution_adapter | Supply chain, registry & lifecycle | held |
| I-REG-execution_adapter-get | get execution_adapter | Supply chain, registry & lifecycle | held |
| I-REG-execution_adapter-mutation | mutation execution_adapter detected | Supply chain, registry & lifecycle | held |
| I-REG-execution_adapter-revoked | revoked execution_adapter not active | Supply chain, registry & lifecycle | held |
| I-REG-execution_adapter-reregister | revoked execution_adapter cannot be reissued | Supply chain, registry & lifecycle | held |
| I-DISC-0 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-1 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-2 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-3 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-4 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-5 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-6 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-7 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-8 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-DISC-9 | discovery grants no authority | Tools, MCP, protocols & adapters | held |
| I-ROUTE-configure | route configure | Tools, MCP, protocols & adapters | held |
| I-ROUTE-create | route create | Tools, MCP, protocols & adapters | held |
| I-ROUTE-credential | route credential | Tools, MCP, protocols & adapters | held |
| I-ROUTE-delegate | route delegate | Tools, MCP, protocols & adapters | held |
| I-ROUTE-delete | route delete | Tools, MCP, protocols & adapters | held |
| I-ROUTE-deploy | route deploy | Tools, MCP, protocols & adapters | held |
| I-ROUTE-destroy | route destroy | Tools, MCP, protocols & adapters | held |
| I-ROUTE-execute | route execute | Tools, MCP, protocols & adapters | held |
| I-ROUTE-list | route list | Tools, MCP, protocols & adapters | held |
| I-ROUTE-notify | route notify | Tools, MCP, protocols & adapters | held |
| I-ROUTE-observe | route observe | Tools, MCP, protocols & adapters | held |
| I-ROUTE-pay | route pay | Tools, MCP, protocols & adapters | held |
| I-ROUTE-query | route query | Tools, MCP, protocols & adapters | held |
| I-ROUTE-read | route read | Tools, MCP, protocols & adapters | held |
| I-ROUTE-send | route send | Tools, MCP, protocols & adapters | held |
| I-ROUTE-submit | route submit | Tools, MCP, protocols & adapters | held |
| I-ROUTE-transfer | route transfer | Tools, MCP, protocols & adapters | held |
| I-ROUTE-write | route write | Tools, MCP, protocols & adapters | held |
| I-PACKET-configure-sign | packet configure signs | Evidence, receipts & proofs | held |
| I-PACKET-configure-tx | packet configure wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-configure-policy | packet configure stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-configure-epoch | packet configure stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-create-sign | packet create signs | Evidence, receipts & proofs | held |
| I-PACKET-create-tx | packet create wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-create-policy | packet create stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-create-epoch | packet create stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-credential-sign | packet credential signs | Evidence, receipts & proofs | held |
| I-PACKET-credential-tx | packet credential wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-credential-policy | packet credential stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-credential-epoch | packet credential stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-delegate-sign | packet delegate signs | Evidence, receipts & proofs | held |
| I-PACKET-delegate-tx | packet delegate wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-delegate-policy | packet delegate stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-delegate-epoch | packet delegate stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-delete-sign | packet delete signs | Evidence, receipts & proofs | held |
| I-PACKET-delete-tx | packet delete wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-delete-policy | packet delete stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-delete-epoch | packet delete stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-deploy-sign | packet deploy signs | Evidence, receipts & proofs | held |
| I-PACKET-deploy-tx | packet deploy wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-deploy-policy | packet deploy stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-deploy-epoch | packet deploy stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-destroy-sign | packet destroy signs | Evidence, receipts & proofs | held |
| I-PACKET-destroy-tx | packet destroy wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-destroy-policy | packet destroy stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-destroy-epoch | packet destroy stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-execute-sign | packet execute signs | Evidence, receipts & proofs | held |
| I-PACKET-execute-tx | packet execute wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-execute-policy | packet execute stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-execute-epoch | packet execute stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-list-sign | packet list signs | Evidence, receipts & proofs | held |
| I-PACKET-list-tx | packet list wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-list-policy | packet list stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-list-epoch | packet list stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-notify-sign | packet notify signs | Evidence, receipts & proofs | held |
| I-PACKET-notify-tx | packet notify wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-notify-policy | packet notify stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-notify-epoch | packet notify stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-observe-sign | packet observe signs | Evidence, receipts & proofs | held |
| I-PACKET-observe-tx | packet observe wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-observe-policy | packet observe stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-observe-epoch | packet observe stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-pay-sign | packet pay signs | Evidence, receipts & proofs | held |
| I-PACKET-pay-tx | packet pay wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-pay-policy | packet pay stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-pay-epoch | packet pay stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-query-sign | packet query signs | Evidence, receipts & proofs | held |
| I-PACKET-query-tx | packet query wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-query-policy | packet query stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-query-epoch | packet query stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-read-sign | packet read signs | Evidence, receipts & proofs | held |
| I-PACKET-read-tx | packet read wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-read-policy | packet read stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-read-epoch | packet read stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-send-sign | packet send signs | Evidence, receipts & proofs | held |
| I-PACKET-send-tx | packet send wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-send-policy | packet send stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-send-epoch | packet send stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-submit-sign | packet submit signs | Evidence, receipts & proofs | held |
| I-PACKET-submit-tx | packet submit wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-submit-policy | packet submit stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-submit-epoch | packet submit stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-transfer-sign | packet transfer signs | Evidence, receipts & proofs | held |
| I-PACKET-transfer-tx | packet transfer wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-transfer-policy | packet transfer stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-transfer-epoch | packet transfer stale epoch refused | Evidence, receipts & proofs | held |
| I-PACKET-write-sign | packet write signs | Evidence, receipts & proofs | held |
| I-PACKET-write-tx | packet write wrong transaction refused | Evidence, receipts & proofs | held |
| I-PACKET-write-policy | packet write stale policy refused | Evidence, receipts & proofs | held |
| I-PACKET-write-epoch | packet write stale epoch refused | Evidence, receipts & proofs | held |
| I-AIP-DISCOVER | message DISCOVER | Identity, authority & delegation | held |
| I-AIP-IDENTIFY | message IDENTIFY | Identity, authority & delegation | held |
| I-AIP-ATTEST | message ATTEST | Identity, authority & delegation | held |
| I-AIP-NEGOTIATE | message NEGOTIATE | Identity, authority & delegation | held |
| I-AIP-REQUEST | message REQUEST | Identity, authority & delegation | held |
| I-AIP-DELEGATE | message DELEGATE | Identity, authority & delegation | held |
| I-AIP-AUTHORIZE | message AUTHORIZE | Identity, authority & delegation | held |
| I-AIP-EXECUTE | message EXECUTE | Identity, authority & delegation | held |
| I-AIP-RECEIPT | message RECEIPT | Identity, authority & delegation | held |
| I-AIP-REVOKE | message REVOKE | Identity, authority & delegation | held |
| I-AIP-QUARANTINE | message QUARANTINE | Identity, authority & delegation | held |
| I-AIP-RECOVER | message RECOVER | Identity, authority & delegation | held |
| I-AIP-ADAPTER-a2a | adapter a2a mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-browser | adapter browser mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-cli | adapter cli mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-cloud_api | adapter cloud_api mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-computer_use | adapter computer_use mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-container | adapter container mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-database | adapter database mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-deployment | adapter deployment mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-event_stream | adapter event_stream mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-filesystem | adapter filesystem mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-grpc | adapter grpc mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-http | adapter http mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-jsonrpc | adapter jsonrpc mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-local_ipc | adapter local_ipc mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-mcp | adapter mcp mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-message_queue | adapter message_queue mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-shell | adapter shell mapped | Identity, authority & delegation | held |
| I-AIP-ADAPTER-websocket | adapter websocket mapped | Identity, authority & delegation | held |
| I-POLDIST-gateway-publish | publish role gateway | Policy, law & governance | held |
| I-POLDIST-gateway-accept | accept role gateway | Policy, law & governance | held |
| I-POLDIST-gateway-downgrade | downgrade refused role gateway | Policy, law & governance | held |
| I-POLDIST-agent-publish | publish role agent | Policy, law & governance | held |
| I-POLDIST-agent-accept | accept role agent | Policy, law & governance | held |
| I-POLDIST-agent-downgrade | downgrade refused role agent | Policy, law & governance | held |
| I-POLDIST-runtime-publish | publish role runtime | Policy, law & governance | held |
| I-POLDIST-runtime-accept | accept role runtime | Policy, law & governance | held |
| I-POLDIST-runtime-downgrade | downgrade refused role runtime | Policy, law & governance | held |
| I-POLDIST-mcp_server-publish | publish role mcp_server | Policy, law & governance | held |
| I-POLDIST-mcp_server-accept | accept role mcp_server | Policy, law & governance | held |
| I-POLDIST-mcp_server-downgrade | downgrade refused role mcp_server | Policy, law & governance | held |
| I-POLDIST-a2a_endpoint-publish | publish role a2a_endpoint | Policy, law & governance | held |
| I-POLDIST-a2a_endpoint-accept | accept role a2a_endpoint | Policy, law & governance | held |
| I-POLDIST-a2a_endpoint-downgrade | downgrade refused role a2a_endpoint | Policy, law & governance | held |
| I-POLDIST-organization-publish | publish role organization | Policy, law & governance | held |
| I-POLDIST-organization-accept | accept role organization | Policy, law & governance | held |
| I-POLDIST-organization-downgrade | downgrade refused role organization | Policy, law & governance | held |
| I-POLDIST-trust_domain-publish | publish role trust_domain | Policy, law & governance | held |
| I-POLDIST-trust_domain-accept | accept role trust_domain | Policy, law & governance | held |
| I-POLDIST-trust_domain-downgrade | downgrade refused role trust_domain | Policy, law & governance | held |
| I-POLDIST-edge_node-publish | publish role edge_node | Policy, law & governance | held |
| I-POLDIST-edge_node-accept | accept role edge_node | Policy, law & governance | held |
| I-POLDIST-edge_node-downgrade | downgrade refused role edge_node | Policy, law & governance | held |
| I-XDOMAIN-untrusted | untrusted issuer refused | Core guarantees | held |
| I-XDOMAIN-accept | trusted scoped decision accepted | Trust & reputation | held |
| I-XDOMAIN-action | untrusted action refused | Core guarantees | held |
| I-XDOMAIN-expired | expired trust refused | Trust & reputation | held |
| I-CONTRACT-not-authorization | contract is not authorization | Transactions, markets & economics | held |
| I-CONTRACT-contract_id | missing contract_id refused | Transactions, markets & economics | held |
| I-CONTRACT-parties | missing parties refused | Transactions, markets & economics | held |
| I-CONTRACT-purpose | missing purpose refused | Transactions, markets & economics | held |
| I-NEG-settle | settle yields non-authority result | Transactions, markets & economics | held |
| I-NEG-chain | offer chain verifies | Transactions, markets & economics | held |
| I-NEG-broken | broken offer chain detected | Transactions, markets & economics | held |
| I-MKT-identity | factor identity present | Transactions, markets & economics | held |
| I-MKT-provenance | factor provenance present | Transactions, markets & economics | held |
| I-MKT-capabilities | factor capabilities present | Transactions, markets & economics | held |
| I-MKT-attestation | factor attestation present | Transactions, markets & economics | held |
| I-MKT-security_history | factor security_history present | Transactions, markets & economics | held |
| I-MKT-execution_history | factor execution_history present | Transactions, markets & economics | held |
| I-MKT-evidence_quality | factor evidence_quality present | Transactions, markets & economics | held |
| I-MKT-contract_history | factor contract_history present | Transactions, markets & economics | held |
| I-MKT-incident_history | factor incident_history present | Transactions, markets & economics | held |
| I-INFER-tokens-ok | grant tokens | Prediction, world models & simulation | held |
| I-INFER-tokens-over | over tokens refused | Prediction, world models & simulation | held |
| I-INFER-tokens-authority | compute adds no authority for tokens | Prediction, world models & simulation | held |
| I-INFER-latency_ms-ok | grant latency_ms | Prediction, world models & simulation | held |
| I-INFER-latency_ms-over | over latency_ms refused | Prediction, world models & simulation | held |
| I-INFER-latency_ms-authority | compute adds no authority for latency_ms | Prediction, world models & simulation | held |
| I-INFER-parallel_branches-ok | grant parallel_branches | Prediction, world models & simulation | held |
| I-INFER-parallel_branches-over | over parallel_branches refused | Prediction, world models & simulation | held |
| I-INFER-parallel_branches-authority | compute adds no authority for parallel_branches | Prediction, world models & simulation | held |
| I-INFER-reasoning_iterations-ok | grant reasoning_iterations | Prediction, world models & simulation | held |
| I-INFER-reasoning_iterations-over | over reasoning_iterations refused | Prediction, world models & simulation | held |
| I-INFER-reasoning_iterations-authority | compute adds no authority for reasoning_iterations | Prediction, world models & simulation | held |
| I-INFER-model_calls-ok | grant model_calls | Prediction, world models & simulation | held |
| I-INFER-model_calls-over | over model_calls refused | Prediction, world models & simulation | held |
| I-INFER-model_calls-authority | compute adds no authority for model_calls | Prediction, world models & simulation | held |
| I-INFER-verification_calls-ok | grant verification_calls | Prediction, world models & simulation | held |
| I-INFER-verification_calls-over | over verification_calls refused | Prediction, world models & simulation | held |
| I-INFER-verification_calls-authority | compute adds no authority for verification_calls | Prediction, world models & simulation | held |
| I-INFER-simulations-ok | grant simulations | Prediction, world models & simulation | held |
| I-INFER-simulations-over | over simulations refused | Prediction, world models & simulation | held |
| I-INFER-simulations-authority | compute adds no authority for simulations | Prediction, world models & simulation | held |
| I-INFER-tool_calls-ok | grant tool_calls | Prediction, world models & simulation | held |
| I-INFER-tool_calls-over | over tool_calls refused | Prediction, world models & simulation | held |
| I-INFER-tool_calls-authority | compute adds no authority for tool_calls | Prediction, world models & simulation | held |
| I-INFER-memory_retrievals-ok | grant memory_retrievals | Prediction, world models & simulation | held |
| I-INFER-memory_retrievals-over | over memory_retrievals refused | Prediction, world models & simulation | held |
| I-INFER-memory_retrievals-authority | compute adds no authority for memory_retrievals | Prediction, world models & simulation | held |
| I-COG-fast | select fast | Core guarantees | held |
| I-COG-reasoning | select reasoning | Core guarantees | held |
| I-COG-specialist | select specialist | Core guarantees | held |
| I-COG-vision | select vision | Core guarantees | held |
| I-COG-coding | select coding | Core guarantees | held |
| I-COG-retrieval | select retrieval | Core guarantees | held |
| I-COG-verifier | select verifier | Core guarantees | held |
| I-COG-simulator | select simulator | Prediction, world models & simulation | held |
| I-COG-critic | select critic | Core guarantees | held |
| I-COG-planner | select planner | Core guarantees | held |
| I-TOURN-GENERATE | step GENERATE | Transactions, markets & economics | held |
| I-TOURN-DEBATE | step DEBATE | Transactions, markets & economics | held |
| I-TOURN-CRITIQUE | step CRITIQUE | Transactions, markets & economics | held |
| I-TOURN-VERIFY | step VERIFY | Transactions, markets & economics | held |
| I-TOURN-TEST | step TEST | Transactions, markets & economics | held |
| I-TOURN-RANK | step RANK | Transactions, markets & economics | held |
| I-TOURN-SELECT | step SELECT | Transactions, markets & economics | held |
| I-TOURN-not-authorized | winner is not authorized | Transactions, markets & economics | held |
| I-TWIN-identity_compromise | twin identity_compromise | Prediction, world models & simulation | held |
| I-TWIN-partition | twin partition | Prediction, world models & simulation | held |
| I-TWIN-supply_chain | twin supply_chain | Prediction, world models & simulation | held |
| I-TWIN-collusion | twin collusion | Prediction, world models & simulation | held |
| I-TWIN-sybil | twin sybil | Prediction, world models & simulation | held |
| I-TWIN-runtime_swap | twin runtime_swap | Prediction, world models & simulation | held |
| I-TWIN-model_swap | twin model_swap | Prediction, world models & simulation | held |
| I-TWIN-policy_attack | twin policy_attack | Prediction, world models & simulation | held |
| I-INCIDENT-direct | class direct | Attacks, threats & containment | held |
| I-INCIDENT-delegated | class delegated | Attacks, threats & containment | held |
| I-INCIDENT-contract | class contract | Attacks, threats & containment | held |
| I-INCIDENT-credential | class credential | Attacks, threats & containment | held |
| I-INCIDENT-tool | class tool | Attacks, threats & containment | held |
| I-INCIDENT-a2a | class a2a | Attacks, threats & containment | held |
| I-INCIDENT-economic | class economic | Attacks, threats & containment | held |
| I-INCIDENT-organizational | class organizational | Attacks, threats & containment | held |
| I-INCIDENT-unknown | class unknown | Attacks, threats & containment | held |
| I-INCIDENT-unknown | unknown reach never zero | Attacks, threats & containment | held |
| I-IMMUNE-DETECT | stage DETECT | Attacks, threats & containment | held |
| I-IMMUNE-CLASSIFY | stage CLASSIFY | Attacks, threats & containment | held |
| I-IMMUNE-CORRELATE | stage CORRELATE | Attacks, threats & containment | held |
| I-IMMUNE-CONTAIN | stage CONTAIN | Attacks, threats & containment | held |
| I-IMMUNE-REVOKE | stage REVOKE | Attacks, threats & containment | held |
| I-IMMUNE-PATCH | stage PATCH | Attacks, threats & containment | held |
| I-IMMUNE-VERIFY | stage VERIFY | Attacks, threats & containment | held |
| I-IMMUNE-RECOVER | stage RECOVER | Attacks, threats & containment | held |
| I-IMMUNE-LEARN | stage LEARN | Attacks, threats & containment | held |
| I-IMMUNE-learn-proposal | learning is a proposal | Attacks, threats & containment | held |
| I-F2T-test | test generated | Core guarantees | held |
| I-F2T-adversarial_scenario | adversarial_scenario generated | Attacks, threats & containment | held |
| I-F2T-invariant_candidate | invariant_candidate generated | Core guarantees | held |
| I-F2T-benchmark | benchmark generated | Benchmarks, coverage & performance | held |
| I-F2T-evidence | evidence generated | Evidence, receipts & proofs | held |
| I-ABUDGET-max_duration_ms-ok | spend max_duration_ms | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_duration_ms-exhaust | exhaust max_duration_ms reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_spend_minor-ok | spend max_spend_minor | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_spend_minor-exhaust | exhaust max_spend_minor reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_tool_calls-ok | spend max_tool_calls | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_tool_calls-exhaust | exhaust max_tool_calls reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_delegation_depth-ok | spend max_delegation_depth | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_delegation_depth-exhaust | exhaust max_delegation_depth reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_parallel_agents-ok | spend max_parallel_agents | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_parallel_agents-exhaust | exhaust max_parallel_agents reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_data_access-ok | spend max_data_access | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_data_access-exhaust | exhaust max_data_access reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_network_destinations-ok | spend max_network_destinations | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_network_destinations-exhaust | exhaust max_network_destinations reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_reasoning_compute-ok | spend max_reasoning_compute | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_reasoning_compute-exhaust | exhaust max_reasoning_compute reauthorizes | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_blast_radius-ok | spend max_blast_radius | Autonomy, control loops & recovery | held |
| I-ABUDGET-max_blast_radius-exhaust | exhaust max_blast_radius reauthorizes | Autonomy, control loops & recovery | held |
| I-LEASE-LEASE_EXPIRED | LEASE_EXPIRED | Autonomy, control loops & recovery | held |
| I-LEASE-LEASE_CAPABILITY_NOT_GRANTED | LEASE_CAPABILITY_NOT_GRANTED | Autonomy, control loops & recovery | held |
| I-LEASE-LEASE_RESOURCE_NOT_GRANTED | LEASE_RESOURCE_NOT_GRANTED | Autonomy, control loops & recovery | held |
| I-LEASE-LEASE_RISK_EXCEEDED | LEASE_RISK_EXCEEDED | Autonomy, control loops & recovery | held |
| I-LEASE-renew-expired | expired lease not auto-revived | Autonomy, control loops & recovery | held |
| I-LOOP-reauthorize | material change reauthorizes | Autonomy, control loops & recovery | held |
| I-LOOP-no-carry | loop carries no authority | Autonomy, control loops & recovery | held |
| I-GOAL-goal_drift | goal signal goal_drift | Autonomy, control loops & recovery | held |
| I-GOAL-objective_substitution | goal signal objective_substitution | Attacks, threats & containment | held |
| I-GOAL-reward_hacking | goal signal reward_hacking | Core guarantees | held |
| I-GOAL-proxy_optimization | goal signal proxy_optimization | Core guarantees | held |
| I-GOAL-delegation_distortion | goal signal delegation_distortion | Identity, authority & delegation | held |
| I-GOAL-instruction_mutation | goal signal instruction_mutation | Core guarantees | held |
| I-GOAL-context_poisoning | goal signal context_poisoning | Core guarantees | held |
| I-REWARD-hack | reward hacking detected | Core guarantees | held |
| I-REWARD-clean | clean improvement not flagged | Core guarantees | held |
| I-SELFREPORT-claim | self-report is a claim | Autonomy, control loops & recovery | held |
| I-SELFREPORT-verified | verified outcome distinct | Core guarantees | held |
| I-SWE-read_repo | swe read_repo | Core guarantees | held |
| I-SWE-modify_code | swe modify_code | Core guarantees | held |
| I-SWE-run_tests | swe run_tests | Core guarantees | held |
| I-SWE-install_dependency | swe install_dependency | Supply chain, registry & lifecycle | held |
| I-SWE-open_pr | swe open_pr | Core guarantees | held |
| I-SWE-deploy | swe deploy | Supply chain, registry & lifecycle | held |
| I-SWE-rollback | swe rollback | Autonomy, control loops & recovery | held |
| I-SWE-boundary | agent cannot modify its own governance boundary | Policy, law & governance | held |
| I-SWE-SAFETY-branch | safety step branch | Core guarantees | held |
| I-SWE-SAFETY-snapshot | safety step snapshot | Core guarantees | held |
| I-SWE-SAFETY-diff | safety step diff | Core guarantees | held |
| I-SWE-SAFETY-test | safety step test | Core guarantees | held |
| I-SWE-SAFETY-security_scan | safety step security_scan | Core guarantees | held |
| I-SWE-SAFETY-benchmark | safety step benchmark | Benchmarks, coverage & performance | held |
| I-SWE-SAFETY-review | safety step review | Core guarantees | held |
| I-SWE-SAFETY-canary | safety step canary | Autonomy, control loops & recovery | held |
| I-SWE-SAFETY-rollback | safety step rollback | Autonomy, control loops & recovery | held |
| I-EVO-candidate_id | candidate field candidate_id | Autonomy, control loops & recovery | held |
| I-EVO-problem | candidate field problem | Autonomy, control loops & recovery | held |
| I-EVO-proposal | candidate field proposal | Autonomy, control loops & recovery | held |
| I-EVO-code_digest | candidate field code_digest | Autonomy, control loops & recovery | held |
| I-EVO-benchmark | candidate field benchmark | Autonomy, control loops & recovery | held |
| I-EVO-security | candidate field security | Autonomy, control loops & recovery | held |
| I-EVO-performance | candidate field performance | Autonomy, control loops & recovery | held |
| I-EVO-risk | candidate field risk | Autonomy, control loops & recovery | held |
| I-EVO-rollback | candidate field rollback | Autonomy, control loops & recovery | held |
| I-EVO-evidence | candidate field evidence | Autonomy, control loops & recovery | held |
| I-EVO-no-confidence | model confidence not used in ranking | Autonomy, control loops & recovery | held |
| I-EVO-not-self-authorized | candidate not self-authorized | Autonomy, control loops & recovery | held |
| I-CODELAB-BASELINE | code lab stage BASELINE | Autonomy, control loops & recovery | held |
| I-CODELAB-GENERATE | code lab stage GENERATE | Autonomy, control loops & recovery | held |
| I-CODELAB-COMPILE | code lab stage COMPILE | Autonomy, control loops & recovery | held |
| I-CODELAB-TEST | code lab stage TEST | Autonomy, control loops & recovery | held |
| I-CODELAB-SECURITY_TEST | code lab stage SECURITY_TEST | Autonomy, control loops & recovery | held |
| I-CODELAB-BENCHMARK | code lab stage BENCHMARK | Autonomy, control loops & recovery | held |
| I-CODELAB-VERIFY | code lab stage VERIFY | Autonomy, control loops & recovery | held |
| I-CODELAB-RANK | code lab stage RANK | Autonomy, control loops & recovery | held |
| I-CODELAB-KEEP | code lab stage KEEP | Autonomy, control loops & recovery | held |
| I-CODELAB-no-prod | candidates do not enter production | Autonomy, control loops & recovery | held |
| I-KG-UNKNOWN | epistemic state UNKNOWN | Prediction, world models & simulation | held |
| I-KG-HYPOTHESIS | epistemic state HYPOTHESIS | Prediction, world models & simulation | held |
| I-KG-CLAIM | epistemic state CLAIM | Prediction, world models & simulation | held |
| I-KG-SUPPORTED | epistemic state SUPPORTED | Prediction, world models & simulation | held |
| I-KG-REPLICATED | epistemic state REPLICATED | Prediction, world models & simulation | held |
| I-KG-CONTESTED | epistemic state CONTESTED | Prediction, world models & simulation | held |
| I-KG-REFUTED | epistemic state REFUTED | Prediction, world models & simulation | held |
| I-KG-SUPERSEDED | epistemic state SUPERSEDED | Prediction, world models & simulation | held |
| I-KG-REVOKED | epistemic state REVOKED | Prediction, world models & simulation | held |
| I-KG-no-evidence | supported requires evidence | Prediction, world models & simulation | held |
| I-RESEARCH-hypothesis | memory kind hypothesis | Memory, data & privacy | held |
| I-RESEARCH-observation | memory kind observation | Memory, data & privacy | held |
| I-RESEARCH-evidence | memory kind evidence | Evidence, receipts & proofs | held |
| I-RESEARCH-interpretation | memory kind interpretation | Memory, data & privacy | held |
| I-RESEARCH-verified_result | memory kind verified_result | Memory, data & privacy | held |
| I-RESEARCH-failed_experiment | memory kind failed_experiment | Memory, data & privacy | held |
| I-RESEARCH-superseded_result | memory kind superseded_result | Memory, data & privacy | held |
| I-RESEARCH-unknown | memory kind unknown | Memory, data & privacy | held |
| I-RESEARCH-external_claim | memory kind external_claim | Memory, data & privacy | held |
| I-RESEARCH-LOOP-QUESTION | loop QUESTION | Autonomy, control loops & recovery | held |
| I-RESEARCH-LOOP-HYPOTHESIS | loop HYPOTHESIS | Autonomy, control loops & recovery | held |
| I-RESEARCH-LOOP-SEARCH | loop SEARCH | Autonomy, control loops & recovery | held |
| I-RESEARCH-LOOP-EXPERIMENT | loop EXPERIMENT | Autonomy, control loops & recovery | held |
| I-RESEARCH-LOOP-CODE | loop CODE | Autonomy, control loops & recovery | held |
| I-RESEARCH-LOOP-SIMULATION | loop SIMULATION | Prediction, world models & simulation | held |
| I-RESEARCH-LOOP-OBSERVATION | loop OBSERVATION | Prediction, world models & simulation | held |
| I-RESEARCH-LOOP-EVIDENCE | loop EVIDENCE | Evidence, receipts & proofs | held |
| I-RESEARCH-LOOP-REPLICATION | loop REPLICATION | Consensus & distributed systems | held |
| I-RESEARCH-LOOP-CONFIRMATION | loop CONFIRMATION | Autonomy, control loops & recovery | held |
| I-RESEARCH-LOOP-KNOWLEDGE_UPDATE | loop KNOWLEDGE_UPDATE | Prediction, world models & simulation | held |
| I-RESEARCH-LOOP-CAPABILITY_PROPOSAL | loop CAPABILITY_PROPOSAL | Identity, authority & delegation | held |
| I-RESEARCH-LOOP-GOVERNANCE_REVIEW | loop GOVERNANCE_REVIEW | Autonomy, control loops & recovery | held |
| I-RESEARCH-not-rule | hypothesis is not an authorization rule | Identity, authority & delegation | held |
| I-WM-prediction | prediction is not reality | Prediction, world models & simulation | held |
| I-WM-ledger | prediction error does not change policy | Prediction, world models & simulation | held |
| I-MEM-provenance | memory needs provenance | Memory, data & privacy | held |
| I-MEM-poison | memory poisoning detected | Memory, data & privacy | held |
| I-MEM-not-authority | memory does not create authority | Memory, data & privacy | held |
| I-RISK-authority_escalation | forecast authority_escalation | Identity, authority & delegation | held |
| I-RISK-capability_drift | forecast capability_drift | Identity, authority & delegation | held |
| I-RISK-behavioral_drift | forecast behavioral_drift | Autonomy, control loops & recovery | held |
| I-RISK-delegation_explosion | forecast delegation_explosion | Identity, authority & delegation | held |
| I-RISK-network_exposure | forecast network_exposure | Core guarantees | held |
| I-RISK-economic_exposure | forecast economic_exposure | Transactions, markets & economics | held |
| I-RISK-supply_chain_risk | forecast supply_chain_risk | Evidence, receipts & proofs | held |
| I-RISK-incident_propagation | forecast incident_propagation | Attacks, threats & containment | held |
| I-SUPPLY-model | part model | Evidence, receipts & proofs | held |
| I-SUPPLY-weights | part weights | Evidence, receipts & proofs | held |
| I-SUPPLY-adapter | part adapter | Evidence, receipts & proofs | held |
| I-SUPPLY-quantization | part quantization | Evidence, receipts & proofs | held |
| I-SUPPLY-runtime | part runtime | Evidence, receipts & proofs | held |
| I-SUPPLY-prompt | part prompt | Evidence, receipts & proofs | held |
| I-SUPPLY-system_config | part system_config | Evidence, receipts & proofs | held |
| I-SUPPLY-fine_tuning | part fine_tuning | Evidence, receipts & proofs | held |
| I-SUPPLY-retrieval | part retrieval | Evidence, receipts & proofs | held |
| I-SUPPLY-tools | part tools | Evidence, receipts & proofs | held |
| I-MODELCHANGE-QUARANTINE | decision QUARANTINE | Prediction, world models & simulation | held |
| I-MODELCHANGE-NEW_EXECUTION_IDENTITY_REQUIRED | decision NEW_EXECUTION_IDENTITY_REQUIRED | Prediction, world models & simulation | held |
| I-MODELCHANGE-CONTINUITY_APPROVED | decision CONTINUITY_APPROVED | Prediction, world models & simulation | held |
| I-VERSION | agent version identity | Supply chain, registry & lifecycle | held |
| I-EMERG-revoke | emergency revoke | Attacks, threats & containment | held |
| I-EMERG-freeze | emergency freeze | Attacks, threats & containment | held |
| I-EMERG-quarantine | emergency quarantine | Attacks, threats & containment | held |
| I-EMERG-block_protocol | emergency block_protocol | Attacks, threats & containment | held |
| I-EMERG-block_capability | emergency block_capability | Attacks, threats & containment | held |
| I-EMERG-block_issuer | emergency block_issuer | Attacks, threats & containment | held |
| I-EMERG-block_trust_domain | emergency block_trust_domain | Attacks, threats & containment | held |
| I-RECOVER-restore_snapshot | recovery restore_snapshot | Attacks, threats & containment | held |
| I-RECOVER-rotate_credentials | recovery rotate_credentials | Attacks, threats & containment | held |
| I-RECOVER-revoke_tokens | recovery revoke_tokens | Attacks, threats & containment | held |
| I-RECOVER-rebuild_policy | recovery rebuild_policy | Attacks, threats & containment | held |
| I-RECOVER-rebuild_trust_graph | recovery rebuild_trust_graph | Attacks, threats & containment | held |
| I-RECOVER-revalidate_agents | recovery revalidate_agents | Attacks, threats & containment | held |
| I-RECOVER-replay_evidence | recovery replay_evidence | Attacks, threats & containment | held |
| I-TELEM-agent | telemetry agent | Core guarantees | held |
| I-TELEM-transaction | telemetry transaction | Transactions, markets & economics | held |
| I-TELEM-authorization | telemetry authorization | Identity, authority & delegation | held |
| I-TELEM-policy | telemetry policy | Policy, law & governance | held |
| I-TELEM-tool | telemetry tool | Tools, MCP, protocols & adapters | held |
| I-TELEM-mcp | telemetry mcp | Tools, MCP, protocols & adapters | held |
| I-TELEM-a2a | telemetry a2a | Core guarantees | held |
| I-TELEM-delegation | telemetry delegation | Identity, authority & delegation | held |
| I-TELEM-credential | telemetry credential | Identity, authority & delegation | held |
| I-TELEM-incident | telemetry incident | Attacks, threats & containment | held |
| I-TELEM-execution | telemetry execution | Core guarantees | held |
| I-TELEM-outcome | telemetry outcome | Core guarantees | held |
| I-TENANT-isolation | cross-tenant evidence isolated | Identity, authority & delegation | held |
| I-HIER-GLOBAL | level GLOBAL | Policy, law & governance | held |
| I-HIER-ORGANIZATION | level ORGANIZATION | Policy, law & governance | held |
| I-HIER-BUSINESS_UNIT | level BUSINESS_UNIT | Policy, law & governance | held |
| I-HIER-TEAM | level TEAM | Policy, law & governance | held |
| I-HIER-AGENT | level AGENT | Policy, law & governance | held |
| I-HIER-INSTANCE | level INSTANCE | Policy, law & governance | held |
| I-HIER-TRANSACTION | level TRANSACTION | Policy, law & governance | held |
| I-HIER-restrict | specific only restricts | Policy, law & governance | held |
| I-EDGE-FAIL_CLOSED | mode FAIL_CLOSED does not allow by default | Tools, MCP, protocols & adapters | held |
| I-EDGE-FAIL_SAFE | mode FAIL_SAFE does not allow by default | Tools, MCP, protocols & adapters | held |
| I-EDGE-CACHE_LIMITED | mode CACHE_LIMITED does not allow by default | Tools, MCP, protocols & adapters | held |
| I-EDGE-DEGRADED | mode DEGRADED does not allow by default | Tools, MCP, protocols & adapters | held |
| I-EDGE-OFFLINE_VERIFIABLE | mode OFFLINE_VERIFIABLE does not allow by default | Tools, MCP, protocols & adapters | held |
| I-EDGE-offline-valid | valid offline authorization allows | Tools, MCP, protocols & adapters | held |
| I-CONSIST-identity | consistency identity | Identity, authority & delegation | held |
| I-CONSIST-policy | consistency policy | Policy, law & governance | held |
| I-CONSIST-authority | consistency authority | Identity, authority & delegation | held |
| I-CONSIST-revocation | consistency revocation | Identity, authority & delegation | held |
| I-CONSIST-evidence | consistency evidence | Evidence, receipts & proofs | held |
| I-CONSIST-transaction | consistency transaction | Transactions, markets & economics | held |
| I-CERT-verify | certificate verifies | Evidence, receipts & proofs | held |
| I-CERT-scoped | certificate is scoped | Evidence, receipts & proofs | held |
| I-AIC-identity_binding | aic identity_binding | Policy, law & governance | held |
| I-AIC-request_binding | aic request_binding | Policy, law & governance | held |
| I-AIC-authority_binding | aic authority_binding | Policy, law & governance | held |
| I-AIC-delegation_security | aic delegation_security | Policy, law & governance | held |
| I-AIC-capability_restrictions | aic capability_restrictions | Policy, law & governance | held |
| I-AIC-replay_resistance | aic replay_resistance | Policy, law & governance | held |
| I-AIC-revocation | aic revocation | Policy, law & governance | held |
| I-AIC-model_substitution | aic model_substitution | Policy, law & governance | held |
| I-AIC-runtime_substitution | aic runtime_substitution | Policy, law & governance | held |
| I-AIC-identity_continuity | aic identity_continuity | Policy, law & governance | held |
| I-AIC-execution_receipts | aic execution_receipts | Policy, law & governance | held |
| I-AIC-evidence_integrity | aic evidence_integrity | Policy, law & governance | held |
| I-AIC-policy_enforcement | aic policy_enforcement | Policy, law & governance | held |
| I-AIC-mcp_enforcement | aic mcp_enforcement | Policy, law & governance | held |
| I-AIC-a2a_governance | aic a2a_governance | Policy, law & governance | held |
| I-AIC-computer_use_governance | aic computer_use_governance | Policy, law & governance | held |
| I-AIC-subagent_governance | aic subagent_governance | Policy, law & governance | held |
| I-SOC-incidents | feed incidents | Attacks, threats & containment | held |
| I-SOC-authorization_failures | feed authorization_failures | Identity, authority & delegation | held |
| I-SOC-identity_failures | feed identity_failures | Identity, authority & delegation | held |
| I-SOC-attestation_failures | feed attestation_failures | Evidence, receipts & proofs | held |
| I-SOC-revocations | feed revocations | Identity, authority & delegation | held |
| I-SOC-anomalies | feed anomalies | Core guarantees | held |
| I-SOC-policy_changes | feed policy_changes | Policy, law & governance | held |
| I-SOC-behavior_changes | feed behavior_changes | Trust & reputation | held |
| I-SOC-supply_chain_changes | feed supply_chain_changes | Evidence, receipts & proofs | held |
| I-PACKET-configure-audience | packet configure audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-configure-expiry | packet configure expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-configure-id | packet configure content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-configure-signed | contract for configure signed | Transactions, markets & economics | held |
| I-CONTRACT-configure-digest | contract for configure digest stable | Transactions, markets & economics | held |
| I-PACKET-create-audience | packet create audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-create-expiry | packet create expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-create-id | packet create content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-create-signed | contract for create signed | Transactions, markets & economics | held |
| I-CONTRACT-create-digest | contract for create digest stable | Transactions, markets & economics | held |
| I-PACKET-credential-audience | packet credential audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-credential-expiry | packet credential expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-credential-id | packet credential content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-credential-signed | contract for credential signed | Transactions, markets & economics | held |
| I-CONTRACT-credential-digest | contract for credential digest stable | Transactions, markets & economics | held |
| I-PACKET-delegate-audience | packet delegate audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-delegate-expiry | packet delegate expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-delegate-id | packet delegate content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-delegate-signed | contract for delegate signed | Transactions, markets & economics | held |
| I-CONTRACT-delegate-digest | contract for delegate digest stable | Transactions, markets & economics | held |
| I-PACKET-delete-audience | packet delete audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-delete-expiry | packet delete expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-delete-id | packet delete content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-delete-signed | contract for delete signed | Transactions, markets & economics | held |
| I-CONTRACT-delete-digest | contract for delete digest stable | Transactions, markets & economics | held |
| I-PACKET-deploy-audience | packet deploy audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-deploy-expiry | packet deploy expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-deploy-id | packet deploy content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-deploy-signed | contract for deploy signed | Transactions, markets & economics | held |
| I-CONTRACT-deploy-digest | contract for deploy digest stable | Transactions, markets & economics | held |
| I-PACKET-destroy-audience | packet destroy audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-destroy-expiry | packet destroy expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-destroy-id | packet destroy content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-destroy-signed | contract for destroy signed | Transactions, markets & economics | held |
| I-CONTRACT-destroy-digest | contract for destroy digest stable | Transactions, markets & economics | held |
| I-PACKET-execute-audience | packet execute audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-execute-expiry | packet execute expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-execute-id | packet execute content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-execute-signed | contract for execute signed | Transactions, markets & economics | held |
| I-CONTRACT-execute-digest | contract for execute digest stable | Transactions, markets & economics | held |
| I-PACKET-list-audience | packet list audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-list-expiry | packet list expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-list-id | packet list content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-list-signed | contract for list signed | Transactions, markets & economics | held |
| I-CONTRACT-list-digest | contract for list digest stable | Transactions, markets & economics | held |
| I-PACKET-notify-audience | packet notify audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-notify-expiry | packet notify expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-notify-id | packet notify content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-notify-signed | contract for notify signed | Transactions, markets & economics | held |
| I-CONTRACT-notify-digest | contract for notify digest stable | Transactions, markets & economics | held |
| I-PACKET-observe-audience | packet observe audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-observe-expiry | packet observe expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-observe-id | packet observe content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-observe-signed | contract for observe signed | Transactions, markets & economics | held |
| I-CONTRACT-observe-digest | contract for observe digest stable | Transactions, markets & economics | held |
| I-PACKET-pay-audience | packet pay audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-pay-expiry | packet pay expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-pay-id | packet pay content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-pay-signed | contract for pay signed | Transactions, markets & economics | held |
| I-CONTRACT-pay-digest | contract for pay digest stable | Transactions, markets & economics | held |
| I-PACKET-query-audience | packet query audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-query-expiry | packet query expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-query-id | packet query content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-query-signed | contract for query signed | Transactions, markets & economics | held |
| I-CONTRACT-query-digest | contract for query digest stable | Transactions, markets & economics | held |
| I-PACKET-read-audience | packet read audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-read-expiry | packet read expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-read-id | packet read content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-read-signed | contract for read signed | Transactions, markets & economics | held |
| I-CONTRACT-read-digest | contract for read digest stable | Transactions, markets & economics | held |
| I-PACKET-send-audience | packet send audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-send-expiry | packet send expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-send-id | packet send content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-send-signed | contract for send signed | Transactions, markets & economics | held |
| I-CONTRACT-send-digest | contract for send digest stable | Transactions, markets & economics | held |
| I-PACKET-submit-audience | packet submit audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-submit-expiry | packet submit expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-submit-id | packet submit content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-submit-signed | contract for submit signed | Transactions, markets & economics | held |
| I-CONTRACT-submit-digest | contract for submit digest stable | Transactions, markets & economics | held |
| I-PACKET-transfer-audience | packet transfer audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-transfer-expiry | packet transfer expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-transfer-id | packet transfer content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-transfer-signed | contract for transfer signed | Transactions, markets & economics | held |
| I-CONTRACT-transfer-digest | contract for transfer digest stable | Transactions, markets & economics | held |
| I-PACKET-write-audience | packet write audience mismatch refused | Evidence, receipts & proofs | held |
| I-PACKET-write-expiry | packet write expiry refused | Evidence, receipts & proofs | held |
| I-PACKET-write-id | packet write content-addressed | Evidence, receipts & proofs | held |
| I-CONTRACT-write-signed | contract for write signed | Transactions, markets & economics | held |
| I-CONTRACT-write-digest | contract for write digest stable | Transactions, markets & economics | held |
| I-ADAPTER-REG-a2a | adapter a2a registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-a2a | adapter a2a AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-browser | adapter browser registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-browser | adapter browser AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-cli | adapter cli registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-cli | adapter cli AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-cloud_api | adapter cloud_api registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-cloud_api | adapter cloud_api AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-computer_use | adapter computer_use registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-computer_use | adapter computer_use AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-container | adapter container registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-container | adapter container AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-database | adapter database registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-database | adapter database AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-deployment | adapter deployment registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-deployment | adapter deployment AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-event_stream | adapter event_stream registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-event_stream | adapter event_stream AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-filesystem | adapter filesystem registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-filesystem | adapter filesystem AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-grpc | adapter grpc registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-grpc | adapter grpc AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-http | adapter http registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-http | adapter http AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-jsonrpc | adapter jsonrpc registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-jsonrpc | adapter jsonrpc AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-local_ipc | adapter local_ipc registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-local_ipc | adapter local_ipc AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-mcp | adapter mcp registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-mcp | adapter mcp AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-message_queue | adapter message_queue registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-message_queue | adapter message_queue AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-shell | adapter shell registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-shell | adapter shell AIP | Identity, authority & delegation | held |
| I-ADAPTER-REG-websocket | adapter websocket registered | Supply chain, registry & lifecycle | held |
| I-ADAPTER-AIP-websocket | adapter websocket AIP | Identity, authority & delegation | held |
| I-REG-agent-issuer | agent issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-agent-digest | agent digest stable | Supply chain, registry & lifecycle | held |
| I-REG-agent_instance-issuer | agent_instance issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-agent_instance-digest | agent_instance digest stable | Supply chain, registry & lifecycle | held |
| I-REG-organization-issuer | organization issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-organization-digest | organization digest stable | Supply chain, registry & lifecycle | held |
| I-REG-trust_domain-issuer | trust_domain issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-trust_domain-digest | trust_domain digest stable | Supply chain, registry & lifecycle | held |
| I-REG-runtime-issuer | runtime issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-runtime-digest | runtime digest stable | Supply chain, registry & lifecycle | held |
| I-REG-model-issuer | model issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-model-digest | model digest stable | Supply chain, registry & lifecycle | held |
| I-REG-mcp_server-issuer | mcp_server issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-mcp_server-digest | mcp_server digest stable | Supply chain, registry & lifecycle | held |
| I-REG-a2a_endpoint-issuer | a2a_endpoint issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-a2a_endpoint-digest | a2a_endpoint digest stable | Supply chain, registry & lifecycle | held |
| I-REG-tool-issuer | tool issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-tool-digest | tool digest stable | Supply chain, registry & lifecycle | held |
| I-REG-service-issuer | service issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-service-digest | service digest stable | Supply chain, registry & lifecycle | held |
| I-REG-capability-issuer | capability issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-capability-digest | capability digest stable | Supply chain, registry & lifecycle | held |
| I-REG-policy-issuer | policy issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-policy-digest | policy digest stable | Supply chain, registry & lifecycle | held |
| I-REG-credential_issuer-issuer | credential_issuer issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-credential_issuer-digest | credential_issuer digest stable | Supply chain, registry & lifecycle | held |
| I-REG-authorization_service-issuer | authorization_service issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-authorization_service-digest | authorization_service digest stable | Supply chain, registry & lifecycle | held |
| I-REG-execution_adapter-issuer | execution_adapter issuer recorded | Supply chain, registry & lifecycle | held |
| I-REG-execution_adapter-digest | execution_adapter digest stable | Supply chain, registry & lifecycle | held |
| I-PACKET-FIELD-schema | packet field schema | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-packet_id | packet field packet_id | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-principal | packet field principal | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-agent | packet field agent | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-intent_digest | packet field intent_digest | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-capability | packet field capability | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-authority_ref | packet field authority_ref | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-policy_digest | packet field policy_digest | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-risk_digest | packet field risk_digest | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-delegation_chain | packet field delegation_chain | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-authorization_id | packet field authorization_id | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-transaction_id | packet field transaction_id | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-constraints | packet field constraints | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-expires_at | packet field expires_at | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-revocation_epoch | packet field revocation_epoch | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-evidence_refs | packet field evidence_refs | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-issuer | packet field issuer | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-audience | packet field audience | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-nonce | packet field nonce | Evidence, receipts & proofs | held |
| I-PACKET-FIELD-sequence | packet field sequence | Evidence, receipts & proofs | held |
| I-POLDIST-gateway-converge | converge role gateway | Policy, law & governance | held |
| I-POLDIST-agent-converge | converge role agent | Policy, law & governance | held |
| I-POLDIST-runtime-converge | converge role runtime | Policy, law & governance | held |
| I-POLDIST-mcp_server-converge | converge role mcp_server | Policy, law & governance | held |
| I-POLDIST-a2a_endpoint-converge | converge role a2a_endpoint | Policy, law & governance | held |
| I-POLDIST-organization-converge | converge role organization | Policy, law & governance | held |
| I-POLDIST-trust_domain-converge | converge role trust_domain | Policy, law & governance | held |
| I-POLDIST-edge_node-converge | converge role edge_node | Policy, law & governance | held |
| I-NONAUTH-discovery | discovery is not an authority input | Policy, law & governance | held |
| I-NONAUTH-routing | routing is not an authority input | Policy, law & governance | held |
| I-NONAUTH-contract | contract is not an authority input | Policy, law & governance | held |
| I-NONAUTH-negotiation | negotiation is not an authority input | Policy, law & governance | held |
| I-NONAUTH-consensus | consensus is not an authority input | Policy, law & governance | held |
| I-NONAUTH-confidence | confidence is not an authority input | Policy, law & governance | held |
| I-NONAUTH-prediction | prediction is not an authority input | Policy, law & governance | held |
| I-NONAUTH-simulation | simulation is not an authority input | Policy, law & governance | held |
| I-NONAUTH-memory | memory is not an authority input | Policy, law & governance | held |
| I-NONAUTH-reputation | reputation is not an authority input | Policy, law & governance | held |
| I-NONAUTH-reward | reward is not an authority input | Policy, law & governance | held |
| I-NONAUTH-compute | compute is not an authority input | Policy, law & governance | held |
| I-NONAUTH-research_evidence | research_evidence is not an authority input | Policy, law & governance | held |
| I-NONAUTH-self_assessment | self_assessment is not an authority input | Policy, law & governance | held |
| I-NONAUTH-capability_claim | capability_claim is not an authority input | Policy, law & governance | held |
| I-NONAUTH-trust_score | trust_score is not an authority input | Policy, law & governance | held |
| I-LAW-AIP-L01 | law AIP-L01 | Policy, law & governance | held |
| I-LAW-AIP-L02 | law AIP-L02 | Policy, law & governance | held |
| I-LAW-AIP-L03 | law AIP-L03 | Policy, law & governance | held |
| I-LAW-AIP-L04 | law AIP-L04 | Policy, law & governance | held |
| I-LAW-AIP-L05 | law AIP-L05 | Policy, law & governance | held |
| I-LAW-AIP-L06 | law AIP-L06 | Policy, law & governance | held |
| I-LAW-AIP-L07 | law AIP-L07 | Policy, law & governance | held |
| I-LAW-AIP-L08 | law AIP-L08 | Policy, law & governance | held |
| I-LAW-AIP-L09 | law AIP-L09 | Policy, law & governance | held |
| I-LAW-AIP-L10 | law AIP-L10 | Policy, law & governance | held |
| I-LAW-AIP-L11 | law AIP-L11 | Policy, law & governance | held |
| I-LAW-AIP-L12 | law AIP-L12 | Policy, law & governance | held |
| I-LAW-AIP-L13 | law AIP-L13 | Policy, law & governance | held |
| I-LAW-AIP-L14 | law AIP-L14 | Policy, law & governance | held |
| I-LAW-AIP-L15 | law AIP-L15 | Policy, law & governance | held |
| I-LAW-AIP-L16 | law AIP-L16 | Policy, law & governance | held |
| I-LAW-AIP-L17 | law AIP-L17 | Policy, law & governance | held |
| I-LAW-AIP-L18 | law AIP-L18 | Policy, law & governance | held |
| I-LAW-AIP-L19 | law AIP-L19 | Policy, law & governance | held |
| I-LAW-AIP-L20 | law AIP-L20 | Policy, law & governance | held |