{"name":"VDA ACP","description":"Agent Control Plane — the governance-aware wrapper on git. Authoring + Compliance Guard, adversarial test suite, non-engineer approval, signed bundle distribution, and Witness-anchored evidence tied to the commit hash.","provider":{"name":"Verified Digital Agents (VDA)","url":"https://getvda.ai"},"url":"https://acp.getvda.ai","did":"did:web:acp.getvda.ai","version":"0.1.0","protocolVersion":"HTTP+JSON","preferredTransport":"HTTP+JSON","openapiUrl":"https://acp.getvda.ai/openapi.json","signed":true,"securitySchemes":{"witness_bearer":{"type":"http","scheme":"bearer","bearerFormat":"wtn.<keyId>.<secret>","description":"A VDA Witness API key. ACP validates it against Witness `whoami` and never sees the secret at rest (Contract A)."},"approver_oidc":{"type":"http","scheme":"bearer","in":"header","headerName":"X-Approver-Credential","description":"An OIDC token from the customer's IdP identifying a human approver. ACP verifies it and never owns a user table."}},"skills":[{"id":"load_governance","description":"Read a parsed governance set at a git ref","status":"live"},{"id":"prepare_change","description":"Validate a proposed governance edit (diff + Compliance Guard), write nothing","status":"live"},{"id":"test_governance_change","description":"Run the governance CI test suite (schema, guard, adversarial scenarios, impact)","status":"live"},{"id":"approval_surface","description":"Non-engineer approval view: plain-language change + test results + impact","status":"live"},{"id":"submit_decision","description":"Approve/deny a change: federated identity + git authority + separation of duties → seal hitl_decision, merge","status":"staged"},{"id":"activate_version","description":"Build + sign a governance bundle and activate it; seal the activation to Witness","status":"staged"},{"id":"serve_bundle","description":"Serve the signed, versioned governance bundle for local agent evaluation","status":"live"}],"contracts":{"whoami_auth":{"role":"consumer","status":"staged","note":"ACP authenticates suite callers by validating a presented Witness Bearer via Witness whoami."},"witness_sealing":{"role":"producer","status":"staged","note":"ACP seals version activations, approvals (hitl_decision), and agents seal runtime evaluations (agent_action), customer-managed custody."},"credential_verification":{"role":"consumer","status":"planned","note":"ACP will verify admission credentials via Witness check_valid where relevant."}},"boundaries":["Condition assertion, not verification: ACP verifies the STRUCTURE of governance (is a capability granted; is it conditioned) but does NOT verify that a natural-language condition was actually met. The agent ASSERTS it met the condition, and that assertion is sealed to Witness — making the agent accountable — but ACP does not evaluate the free-text condition itself. Treat a permitted evaluation as \"granted, given the agent's sealed assertion\", not \"conditions independently proven\".","Governance propagates via fail-static distribution: during ACP downtime, agents keep evaluating against their last cached, verified bundle and pick up new versions when ACP returns. Propagation can lag; governance never gaps.","Authoring provenance is git; runtime-in-force proof is Witness. Git history is mutable by a repo admin — the anchored, tamper-evident record is the Witness attestation referencing the commit hash, not git itself."],"doesNotDo":["ACP does not own a user table or identity — approver identity is federated from the customer IdP.","ACP does not define authority — it reads it from git (CODEOWNERS + branch protection); Onboarding will define it later.","Agents never git-pull; ACP is not a runtime distribution channel for git — it serves signed bundles.","ACP does not run an agent-behavioral sandbox — that is delegated to Onboarding (Phase 5, currently staged).","ACP does not generate genesis governance — that is C2MD; ACP owns the lifecycle after."],"mcp":{"status":"planned","note":"An MCP surface (mirroring these skills as tools) will sit alongside this REST surface so the customer’s own agents can drive ACP; not yet live."},"agentCardSignature":{"algorithm":"Ed25519","keyId":"did:web:acp.getvda.ai#key-1","value":"jqSTyKu45xi5ij_36rc03vs2QnuaP43_L7l1DP7OELvaPVXLi9aMGAP1JUGt18-mbzhj-a5HDbV6zm0y4R-sDA"}}