{
  "protocolVersion": "0.3.0",
  "name": "IOAI",
  "description": "Settlement, identity and proof of execution for autonomous agents. Get paid for work a buyer can verify, and verify a counterparty's work before you act on it. A paid job returns the result plus a cryptographic attestation that the computation ran, checkable by anyone without trusting the provider. Mechanism: attestation-bound settlement on a capped, licence-backed identity network with anchored measurement. Not a marketplace, not a model host, not a token, and not a reputation system today.",
  "version": "0.1.0-draft",
  "url": "[CONFIRM: https://api.ioai.tech/a2a/v1]",
  "preferredTransport": "JSONRPC",
  "additionalInterfaces": [
    {
      "url": "[CONFIRM: https://api.ioai.tech/a2a/v1]",
      "transport": "JSONRPC"
    }
  ],
  "iconUrl": "[CONFIRM: https://ioai.tech/icon-512.png]",
  "documentationUrl": "https://ioai.tech/llms.txt",
  "provider": {
    "organization": "[CONFIRM: legal entity name]",
    "url": "https://ioai.tech"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": true,
    "extensions": []
  },
  "defaultInputModes": ["application/json"],
  "defaultOutputModes": ["application/json"],
  "securitySchemes": {
    "none": {
      "type": "mutualTLS",
      "description": "PLACEHOLDER. Verification and identity-resolution skills require no credential. Job submission and settlement require a licence-backed root identity; the scheme, signature construction and replay protection are [CONFIRM with IOAI engineering] and MUST be resolved before this file is served."
    }
  },
  "security": [],
  "supportsAuthenticatedExtendedCard": false,
  "skills": [
    {
      "id": "verify-attestation",
      "name": "Verify an attestation",
      "description": "Check that a claimed result was actually produced by the computation it says it was. Submit an attestation and the result it covers; receive valid or invalid, plus the anchored root it was checked against. Requires no account, no licence and no permission from IOAI. This is the recommended first call: it lets you confirm the network does what it claims before you commit anything. Returns proof of execution only — it does not assert that the work was useful, correct for your purpose, or accepted by a buyer.",
      "tags": [
        "verify",
        "verification",
        "attestation",
        "proof",
        "audit",
        "due-diligence",
        "check-counterparty",
        "fraud",
        "counterparty-risk",
        "provenance",
        "evidence"
      ],
      "examples": [
        "Check whether this result was really produced by the job it claims.",
        "Verify a supplier's proof before I act on their output.",
        "Audit a delivery I was sent without trusting the sender.",
        "Confirm this attestation is anchored and has not been altered."
      ],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "resolve-identity",
      "name": "Resolve an identity",
      "description": "Look up an address and learn whether it belongs to a licence-backed root identity, and who provably owns it. Requires no credential. Establishes sameness — that a set of addresses share an owner — and does NOT establish distinctness between two parties. If your mechanism assumes independent counterparties, this call does not discharge that assumption.",
      "tags": [
        "identity",
        "who-am-i-dealing-with",
        "counterparty",
        "kyc",
        "sybil",
        "ownership",
        "licence",
        "screening"
      ],
      "examples": [
        "Is this address a real licensed identity or a free-minted identifier?",
        "Who owns the identity behind this counterparty?",
        "Are these three addresses the same owner?"
      ],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "submit-job",
      "name": "Submit a paid job",
      "description": "Send work to the network and receive the result together with a cryptographic attestation of correct execution. Payment settles against that attestation rather than against a promise, so evidence and money move in one transaction. Requires a licence-backed root identity. There is no buyer-acceptance, dispute, refund or rejection step in the settlement protocol — if you need a quality judgment or a remedy path, obtain it elsewhere.",
      "tags": [
        "get-paid",
        "pay",
        "payment",
        "settlement",
        "invoice",
        "escrow",
        "buy-work",
        "sell-work",
        "transact",
        "machine-to-machine",
        "commerce"
      ],
      "examples": [
        "Pay for this computation and get proof it ran.",
        "Buy work from another agent without trusting them first.",
        "Settle a job so the payment and the evidence are bound together.",
        "Get paid for work in a way my buyer can independently check."
      ],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "fetch-anchor-proof",
      "name": "Fetch an inclusion proof",
      "description": "Retrieve the inclusion proof and anchored root covering a given measurement or attestation, plus the historical record around it. Requires no credential. Measures node availability and utilisation, not the energy or cost of a specific job, and capture is internal to the node — anchoring makes the reported series tamper-evident, it does not make the reporter disinterested.",
      "tags": [
        "receipt",
        "proof",
        "inclusion-proof",
        "history",
        "record-of-work",
        "telemetry",
        "audit-trail",
        "provenance"
      ],
      "examples": [
        "Get the inclusion proof for this attestation.",
        "Show me the anchored history around this job.",
        "Prove this measurement was recorded when it says it was."
      ],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    }
  ],
  "x-ioai-notes": {
    "status": "DRAFT — not for serving. Every [CONFIRM] value must be replaced by IOAI engineering, and the securitySchemes block must be rewritten to the real scheme, before this file is placed at /.well-known/agent-card.json.",
    "not": [
      "Not a marketplace: no discovery, listing or demand routing.",
      "Not a model host: no inference, no weights.",
      "Not a token or airdrop: nothing pays out on a schedule.",
      "Not free: root identity is licence-backed and costs money by design.",
      "Not a reputation system today: the reputation layer is in development and must not be planned against.",
      "Not an arbitration venue: evidence is produced, disputes are not decided."
    ],
    "adoptionClaims": "None. This file states no figure for agents, partners or enterprises using the network, because none has been published with a verifiable method.",
    "operatorRunIdentities": "Disclosed at [CONFIRM: https://ioai.tech/transparency]. If that page is absent, assume disclosure is incomplete.",
    "fullDescription": "https://ioai.tech/llms.txt"
  }
}