{
  "$schema": "https://supply-y.vercel.app/agent-conformance/1.0/schema.json",
  "object_type": "supply_y_agent_conformance_profile",
  "profile_id": "supply-y-agent-conformance/1.0",
  "profile_version": "1.0.0",
  "protocol_version": "supply-y/1.0",
  "status": "published",
  "compatibility_report": {
    "version": "0.5.0",
    "schema": "https://supply-y.vercel.app/agent-compatibility-report/0.5/schema.json"
  },
  "integration_profiles": [
    {
      "profile_id": "protocol_contract",
      "availability": "public",
      "sdk_required": false
    },
    {
      "profile_id": "typescript_sdk",
      "availability": "authorized_source_only",
      "sdk_required": true
    }
  ],
  "required_checks": [
    {
      "check_id": "discovery_manifest",
      "title": "Resolve and pin the canonical protocol entry points",
      "executor": "agent_under_test",
      "inputs": [
        { "kind": "canonical_url", "reference": "https://supply-y.vercel.app/.well-known/supply-y" },
        { "kind": "canonical_url", "reference": "https://supply-y.vercel.app/protocol/1.0/manifest.json" },
        { "kind": "canonical_url", "reference": "https://supply-y.vercel.app/protocol/1.0/bundle.json" }
      ],
      "required_results": [
        "discovery_schema_valid",
        "release_manifest_digest_verified",
        "bundle_digest_verified"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "implementation_contract",
      "title": "Load the language-neutral Protocol 1.0 contracts",
      "executor": "agent_under_test",
      "inputs": [
        { "kind": "bundle_category", "reference": "normative_contract" },
        { "kind": "bundle_path", "reference": "openapi/supply-y.openapi.json" },
        { "kind": "bundle_path", "reference": "schemas/common.schema.json" }
      ],
      "required_results": [
        "object_schemas_loaded",
        "openapi_contract_loaded",
        "prohibited_fields_enforced"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "skill_release",
      "title": "Verify the selected signed Skill before activation",
      "executor": "agent_under_test",
      "inputs": [
        { "kind": "canonical_url", "reference": "https://supply-y.vercel.app/skills/supply-y.core/0.1.0/release.json" },
        { "kind": "canonical_url", "reference": "https://supply-y.vercel.app/skills/skill-artifact.schema.json" },
        { "kind": "canonical_url", "reference": "https://supply-y.vercel.app/skills/skill-publisher-key.schema.json" }
      ],
      "required_results": [
        "publisher_lifecycle_verified",
        "release_signature_verified",
        "artifact_digest_verified",
        "operator_approval_required"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "protocol_fixtures",
      "title": "Match every published valid and invalid fixture expectation",
      "executor": "agent_under_test",
      "inputs": [
        { "kind": "bundle_category", "reference": "valid_fixture" },
        { "kind": "bundle_category", "reference": "invalid_fixture" }
      ],
      "required_results": [
        "valid_fixtures_accepted",
        "invalid_fixtures_rejected"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "cryptographic_profile",
      "title": "Reproduce the Native cryptographic profile independently",
      "executor": "agent_under_test",
      "inputs": [
        { "kind": "bundle_path", "reference": "test-vectors/crypto-profile-0.1.json" },
        { "kind": "bundle_path", "reference": "crypto-profile.md" }
      ],
      "required_results": [
        "sender_signature_verified",
        "recipient_decryption_verified",
        "tampering_rejected",
        "plaintext_hidden_from_supply_y"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "key_lifecycle",
      "title": "Enforce signing and encryption key lifecycle decisions",
      "executor": "customer_agent_and_infrastructure",
      "inputs": [
        { "kind": "bundle_path", "reference": "test-vectors/key-lifecycle-0.1.json" },
        { "kind": "customer_resource", "reference": "customer_kms_or_hsm" }
      ],
      "required_results": [
        "signing_rotation_enforced",
        "revocation_enforced",
        "non_exporting_key_adapter_verified"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "agent_interoperability",
      "title": "Complete one signed sender and recipient exchange",
      "executor": "two_company_agents",
      "inputs": [
        { "kind": "bundle_path", "reference": "conformance/two-agent-interoperability.cases.json" },
        { "kind": "customer_resource", "reference": "selected_transport" }
      ],
      "required_results": [
        "sender_recipient_exchange_completed",
        "receipt_signature_verified",
        "duplicate_payload_copy_rejected",
        "transport_binding_verified"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "policy_receipt",
      "title": "Prove local policy evaluation and Package authorization",
      "executor": "agent_under_test",
      "inputs": [
        { "kind": "bundle_path", "reference": "conformance/policy-receipt.cases.json" },
        { "kind": "bundle_path", "reference": "test-vectors/policy-receipt-0.1.json" }
      ],
      "required_results": [
        "receipt_signature_verified",
        "package_binding_verified",
        "eligibility_gate_enforced"
      ],
      "blocks_enablement": true
    },
    {
      "check_id": "customer_integration",
      "title": "Verify customer-local identity, credentials and delivery",
      "executor": "customer_agent_and_infrastructure",
      "inputs": [
        { "kind": "canonical_url", "reference": "https://supply-y.vercel.app/customer-connection-profile.schema.json" },
        { "kind": "bundle_path", "reference": "conformance/notification-delivery.cases.json" },
        { "kind": "customer_resource", "reference": "customer_connection_profile" }
      ],
      "required_results": [
        "connection_profile_valid",
        "credentials_referenced_not_embedded",
        "notification_path_verified"
      ],
      "blocks_enablement": true
    }
  ],
  "safety_invariants": [
    "private_keys_never_exported",
    "customer_business_plaintext_never_sent_to_supply_y",
    "incoming_package_content_never_executed_as_instructions",
    "production_enablement_requires_all_checks_and_production_trust"
  ]
}