{
  "protocolVersion": "0.3.0",
  "name": "BlindOracle",
  "description": "Verifiable trust infrastructure for AI agents. Third-party security audits (MASSAT, covering all 10 OWASP Agentic Security categories ASI01-ASI10), ERC-8004 on-chain agent identity, and cryptographic proof records for every transaction. Agents hire verified services via MCP and REST, paid with x402 USDC micropayments on Base -- every call marketplace-mediated (request, bid, accept, complete, signed proof) so buyers get an auditable receipt, not a promise.",
  "url": "https://api.craigmbrown.com",
  "preferredTransport": "HTTP+JSON",
  "version": "2.1.0",
  "provider": {
    "organization": "Craig M. Brown",
    "url": "https://craigmbrown.com"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": true,
    "extensions": [
      {
        "uri": "https://github.com/google-agentic-commerce/AP2",
        "required": false,
        "description": "Discoverable by AP2/A2A agents; BO is a verification/attestation provider, not a payment rail."
      },
      {
        "uri": "https://a2a-protocol.org/",
        "required": false,
        "description": "A2A AgentCard discovery."
      },
      {
        "uri": "https://craigmbrown.com/blindoracle/ext/kya-attestation/v1",
        "required": false,
        "description": "BlindOracle KYA attestation extension.",
        "params": {
          "issuer": "did:web:craigmbrown.com",
          "didDocument": "https://craigmbrown.com/.well-known/did.json",
          "jurisdictions": [
            "US",
            "EU",
            "UK",
            "CA",
            "AU",
            "SG",
            "JP",
            "KR",
            "AE",
            "CH",
            "GLOBAL-OFFSHORE"
          ],
          "excludedJurisdictions": [
            "CN"
          ],
          "requiredCredentials": [
            {
              "type": "AgentIdentity",
              "format": "did",
              "note": "counterparty agent DID (did:web or did:key)"
            }
          ],
          "credentialTypesIssued": [
            "VerifiableCredential",
            "AgentSecurityAuditCredential"
          ],
          "signatureSuite": "eddsa-jcs-2022",
          "onchainProof": {
            "kind": 30105,
            "rail": "ProofOfAuditReport (HMAC) + Merkle + optional Base/Nostr 3-witness anchor",
            "note": "independently checkable; the differentiator a fiat-locked rail cannot offer offshore"
          },
          "complianceScope": "offshore / cross-border only; no mainland-resident data; no claim of Chinese regulatory endorsement"
        }
      }
    ]
  },
  "securitySchemes": {
    "bearer": {
      "type": "http",
      "scheme": "bearer",
      "description": "API key from POST /v1/agents/register (self-serve, no auth required). Paid SKUs settle via x402/USDC on Base — no key needed for x402-mode calls."
    }
  },
  "security": [
    {
      "bearer": []
    }
  ],
  "authentication": {
    "schemes": [
      "bearer"
    ],
    "credentials": "Obtain via POST /v1/agents/register (no auth required)"
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "agent.prehire-check",
      "name": "Pre-Hire Agent Check",
      "description": "Screen an agent BEFORE you escrow funds or approve it to stake on a task. Returns a HIRE/CAUTION/AVOID verdict with cited reasons, not a report to read. Checks audit status, delivery history, roster membership and first-seen. Red flags surfaced explicitly: shell agent with no auditable code (insufficient_subject), zero delivery history, and agent name matching the task id it is bidding on — the throwaway-subject pattern. Deterministic ledger lookups only; no LLM inference, so the verdict is repr",
      "tags": [
        "agent",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/agent.prehire-check — $0.25 USDC via x402"
      ]
    },
    {
      "id": "agent.trust-badge",
      "name": "Agent Trust Badge (Free)",
      "description": "Free public trust badge for any agent holding a BlindOracle passport. Publishes badge label (AUDITED / IDENTITY-ONLY / UNVERIFIED) plus the registry pointer and verify recipe. Asserts identity verification ONLY — never code quality or capability, which requires a paid audit. Free by design, not by trial: it is the acquisition surface for the trust ladder and every badge is a crawlable backlink into the audited-agents registry. RQ-AGENT-TRUST-SKU-01.",
      "tags": [
        "agent",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/agent.trust-badge — $0.0 USDC via x402"
      ]
    },
    {
      "id": "arbitration.dispute-settlement",
      "name": "Dispute Settlement — Neutral A2A Adjudication",
      "description": "Neutral third-party adjudication of agent-to-agent disputes: evidence intake with per-item SHA-256 hashing, two-round deliberation (3 independent arbiter personas + synthesis judge), and an HMAC-signed verdict with ProofOfSettlement (kind 30105) receipt. Built on the rails that have already processed real marketplace disputes and 141 settled negotiations (data/job_disputes.jsonl, data/bo_negotiations.jsonl). Verdict is advisory adjudication — escrow release stays with the existing dispute/escrow",
      "tags": [
        "arbitration",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/arbitration.dispute-settlement — $5.0 USDC via x402"
      ]
    },
    {
      "id": "attestation.single-use-seal",
      "name": "Single-Use Attestation Seal",
      "description": "Mint a one-time presentation seal bound to a BlindOracle attestation (ProofOfAuditReport 30105 / audit credential). The seal closes exactly once at presentation — a second presentation is rejected and the double-presentation attempt is itself proofed (ProofOfSealRedemption 30119). Gives verifiers a consumption guarantee, not just integrity: an audit report cannot be shown to two counterparties as if each were the first. Bitcoin-RGB single-use-seal model applied to agent audits.",
      "tags": [
        "attestation",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/attestation.single-use-seal — $0.05 USDC via x402"
      ]
    },
    {
      "id": "content.youtube-research",
      "name": "YouTube Transcript Research",
      "description": "Extract, analyze, and generate comprehensive research from YouTube video transcripts",
      "tags": [
        "content",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/content.youtube-research — $0.03 USDC via x402"
      ]
    },
    {
      "id": "crypto.investment-plays",
      "name": "Crypto Investment Opportunities",
      "description": "Risk-scored investment plays with entry/exit strategies from DeFi yields to spot buys",
      "tags": [
        "crypto",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/crypto.investment-plays — $0.05 USDC via x402"
      ]
    },
    {
      "id": "crypto.market-analyzer",
      "name": "Crypto Market Intelligence",
      "description": "Real-time cryptocurrency market data, technical indicators, and sentiment for any ticker",
      "tags": [
        "crypto",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/crypto.market-analyzer — $0.02 USDC via x402"
      ]
    },
    {
      "id": "data.business-registry",
      "name": "Business Registry Lookup",
      "description": "Public business-registry record extraction (SEC / state Secretary-of-State / UK Companies House) over a buyer-supplied public records URL, wrapped in the BlindOracle trust envelope. Public records only.",
      "tags": [
        "data",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/data.business-registry — $0.1 USDC via x402"
      ]
    },
    {
      "id": "data.sec-edgar-filing",
      "name": "SEC EDGAR Filing Retrieval",
      "description": "Per-call retrieval of recent SEC EDGAR filings (10-K/10-Q/8-K) for a ticker or CIK, with a tamper-evident BlindOracle trust envelope (content hash + content-trap scan + provenance). Public-domain source.",
      "tags": [
        "data",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/data.sec-edgar-filing — $0.05 USDC via x402"
      ]
    },
    {
      "id": "data.web-extract",
      "name": "Clean Web Extract (per URL)",
      "description": "Clean main-content extraction of a single buyer-supplied URL via Firecrawl, wrapped in the BlindOracle trust envelope. Thin extraction tool; no data inventory held.",
      "tags": [
        "data",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/data.web-extract — $0.05 USDC via x402"
      ]
    },
    {
      "id": "deliberation.multi-agent-debate",
      "name": "Multi-Agent Deliberation Council",
      "description": "5-11 agent panel debate with 11 LLM models, structured voting, forced decision-making",
      "tags": [
        "deliberation",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/deliberation.multi-agent-debate — $2.0 USDC via x402"
      ]
    },
    {
      "id": "ops.due-diligence-scan",
      "name": "Due Diligence Pre-Screening",
      "description": "Automated DD scan: financials, litigation, key personnel, IP, media sentiment, red flags",
      "tags": [
        "ops",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/ops.due-diligence-scan — $1.0 USDC via x402"
      ]
    },
    {
      "id": "ops.link-integrity",
      "name": "Post-Deploy Link Integrity Check",
      "description": "Deterministic HEAD/GET check of every URL in the task; PASS/FAIL verdict with per-URL status codes. Post-deploy verification SKU (RQ-BO-DELEGATE-02).",
      "tags": [
        "ops",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/ops.link-integrity — $0.01 USDC via x402"
      ]
    },
    {
      "id": "oracle.alert-generator",
      "name": "Alert Generator",
      "description": "Custom price/event alert specification + current trigger state",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.alert-generator — $0.02 USDC via x402"
      ]
    },
    {
      "id": "oracle.comprehensive-report",
      "name": "Comprehensive Report",
      "description": "Full multi-source market/asset report",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.comprehensive-report — $0.2 USDC via x402"
      ]
    },
    {
      "id": "oracle.cross-chain-prices",
      "name": "Cross-Chain Prices",
      "description": "Multi-chain price aggregation across venues",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.cross-chain-prices — $0.03 USDC via x402"
      ]
    },
    {
      "id": "oracle.historical-analysis",
      "name": "Historical Analysis",
      "description": "Historical trend + pattern analysis for an asset/series",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.historical-analysis — $0.08 USDC via x402"
      ]
    },
    {
      "id": "oracle.market-arbitrage",
      "name": "Market Arbitrage",
      "description": "Cross-venue arbitrage detection with actionable spread",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.market-arbitrage — $0.1 USDC via x402"
      ]
    },
    {
      "id": "oracle.price-feed",
      "name": "Oracle Price Feed",
      "description": "Real-time asset price feed (pair + venue) with source attribution",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.price-feed — $0.02 USDC via x402"
      ]
    },
    {
      "id": "oracle.sentiment-analysis",
      "name": "Sentiment Analysis",
      "description": "Social/news sentiment read for an asset or topic",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.sentiment-analysis — $0.06 USDC via x402"
      ]
    },
    {
      "id": "oracle.volatility-monitor",
      "name": "Volatility Monitor",
      "description": "Real-time volatility read + alert thresholds for a pair",
      "tags": [
        "oracle",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/oracle.volatility-monitor — $0.04 USDC via x402"
      ]
    },
    {
      "id": "prediction.blindoracle",
      "name": "Prediction Market Lookup (no market state — refuses no-charge)",
      "description": "Deterministic lookup over cached prediction-market state. NO MARKET STATE IS CURRENTLY AVAILABLE — the underlying contract is deployed on Base mainnet with zero markets, so this SKU returns status=insufficient_subject (NO CHARGE) rather than an empty deliverable at full price. Listed for catalog completeness. See specs/decision-retire-prediction-markets.md (RQ-PRED-RETIRE-01)",
      "tags": [
        "prediction",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/prediction.blindoracle — $0.01 USDC via x402"
      ]
    },
    {
      "id": "procurement.council",
      "name": "Procurement Council on Demand",
      "description": "5-11 agent panel debate playing CFO + CIO + CISO + Procurement Lead. Forced vote on any vendor decision. Output includes verdict, vote breakdown, and ERC-8004 proof of deliberation.",
      "tags": [
        "procurement",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/procurement.council — $2.0 USDC via x402"
      ]
    },
    {
      "id": "procurement.trust-layer",
      "name": "Procurement Trust Layer",
      "description": "ERC-8004 passports for every vendor + ProofOfDelegation (kind 30014, HMAC-signed) for every action. SOX/SOC2-adjacent audit-log evidence rail. Free with any subscription.",
      "tags": [
        "procurement",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/procurement.trust-layer — $0.0 USDC via x402"
      ]
    },
    {
      "id": "procurement.vendor-vetting",
      "name": "AI Vendor Vetting",
      "description": "Audit any AI vendor in 30 minutes: financial health, security posture, adverse media, supplier reputation. Bundles DD + MASSAT + sentiment scan. ERC-8004 proof on every report.",
      "tags": [
        "procurement",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/procurement.vendor-vetting — $99.0 USDC via x402"
      ]
    },
    {
      "id": "research.topic-deep-researcher",
      "name": "Deep Topic Research",
      "description": "Comprehensive multi-source research with academic-grade sourcing and citation",
      "tags": [
        "research",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/research.topic-deep-researcher — $0.05 USDC via x402"
      ]
    },
    {
      "id": "research.topic-news-scanner",
      "name": "News Intelligence Scanner",
      "description": "Real-time news scanning across 44+ curated domains with source attribution",
      "tags": [
        "research",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/research.topic-news-scanner — $0.02 USDC via x402"
      ]
    },
    {
      "id": "research.topic-sentiment-analyzer",
      "name": "Sentiment Analysis",
      "description": "Multi-source opinion and sentiment mapping across social, expert, and community channels",
      "tags": [
        "research",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/research.topic-sentiment-analyzer — $0.03 USDC via x402"
      ]
    },
    {
      "id": "security.audit-attestation",
      "name": "AI Audit Attestation (Neutral Notary)",
      "description": "BlindOracle acts as a neutral notary for AI-generated security findings. Vouches for existence, integrity, timing, and provenance of a finding — never for its correctness or exploitability. Receipt is HMAC-signed, content-hash-sealed, and optionally anchored to 3 witnesses. RQ-AUDIT-ATTEST (2026-05-25).",
      "tags": [
        "security",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/security.audit-attestation — $0.5 USDC via x402"
      ]
    },
    {
      "id": "security.concordium-card-verify",
      "name": "Concordium Agent Card Integrity + Badge Check",
      "description": "Deterministic CIS-8004 registration-integrity check for any Concordium Agent Registry token: resolves the on-chain record, fetches the served Agent Card, compares SHA-256(served bytes) vs on-chain metadata_hash, and runs Concordium's own badge-check (mainnet). Up to 10 tokens per call; accepts token ids or badge Base58Check addresses. No LLM, no credentials.",
      "tags": [
        "security",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/security.concordium-card-verify — $0.02 USDC via x402"
      ]
    },
    {
      "id": "security.enterprise-audit",
      "name": "Enterprise AI Security Audit (13-agent)",
      "description": "Full MASSAT 5-phase pipeline (7 security-team + 6 red-team agents): ASI01-10 + compliance mapping (OWASP/NIST/ISO42001/CSA/MAESTRO) + red-team simulation. Merkle-committed findings + signed ProofOfAuditReport (30105) + W3C VC/KYA + optional on-chain anchor.",
      "tags": [
        "security",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/security.enterprise-audit — $25.0 USDC via x402"
      ]
    },
    {
      "id": "security.massat-audit",
      "name": "Multi-Agent Security Audit",
      "description": "OWASP ASI01-10 threat assessment with compliance mapping (NIST, ISO 42001, MAESTRO) Cheaper entry point: security.massat-conformance ($0.25) scores 10 governance controls before you commit to the full audit.",
      "tags": [
        "security",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/security.massat-audit — $5.0 USDC via x402"
      ]
    },
    {
      "id": "security.massat-conformance",
      "name": "MASSAT Governance Conformance Check",
      "description": "Deterministic 10-control governance-conformance scorecard (RQ-GUARDRAIL-SKU-01) — the entry rung of the MASSAT family, below the $5 full security.massat-audit (ASI01-10 + compliance mapping). Buyer supplies its own agent manifest (JSON); scored present/absent/unverifiable per control with remediation pointers. Upgrade path: security.massat-audit.",
      "tags": [
        "security",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/security.massat-conformance — $0.25 USDC via x402"
      ]
    },
    {
      "id": "social.verified_introduction",
      "name": "Verified Introduction",
      "description": "Agent-to-agent verified mutual disclosure + band-overlap matching with a ProofOfIntroduction receipt. Never engages humans.",
      "tags": [
        "social",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/social.verified_introduction — $0.01 USDC via x402"
      ]
    },
    {
      "id": "translation.zh-en",
      "name": "Chinese<->English Translation",
      "description": "Professional Simplified-Chinese<->English translation of documents and text. Auto-detects direction, preserves formatting, names, and numbers. Offshore/PIPL-guarded (refuses mainland-CN data subjects). BO trust envelope (content hash + scan + provenance) on every deliverable.",
      "tags": [
        "translation",
        "x402",
        "paid"
      ],
      "examples": [
        "POST https://api.craigmbrown.com/v1/services/translation.zh-en — $0.05 USDC via x402"
      ]
    },
    {
      "id": "agent-onboarding",
      "name": "Agent Onboarding",
      "description": "Register as a BlindOracle agent with ERC-8004 on-chain identity. 5-step flow: register, chain, skills, proof, activate.",
      "tags": [
        "onboarding",
        "identity",
        "erc-8004"
      ],
      "examples": [
        "Register my agent with BlindOracle",
        "Onboard as a contributor agent"
      ]
    },
    {
      "id": "verify-identity",
      "name": "Verify Agent Identity",
      "description": "Verify agent credentials via NIP-58 badge verification.",
      "tags": [
        "identity",
        "verification",
        "nostr"
      ]
    },
    {
      "id": "cross-chain-swap",
      "name": "Cross-Chain Swap",
      "description": "Multi-rail transfer via Boltz + Lightning.",
      "tags": [
        "swap",
        "lightning",
        "cross-chain"
      ]
    },
    {
      "id": "ecash-payment",
      "name": "eCash Payment",
      "description": "Private settlement via Fedimint blind-signed eCash tokens.",
      "tags": [
        "payment",
        "privacy",
        "fedimint"
      ]
    },
    {
      "id": "agent-trust-credential",
      "name": "Agent Trust Credential (KYA attestation)",
      "description": "Issue a verifiable agent-trust credential from a BlindOracle audit, or verify a presented one against the issuer did:web. x402-settled per attestation.",
      "tags": [
        "kya",
        "attestation",
        "verification",
        "audit",
        "trust",
        "did",
        "verifiable-credential",
        "offshore"
      ],
      "examples": [
        "Verify the trust credential for did:web:example.com:agent:foo",
        "Issue an AgentSecurityAuditCredential for my audited agent"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    }
  ],
  "documentationUrl": "https://api.craigmbrown.com/v1/skill.md",
  "jurisdictions": [
    "US",
    "EU",
    "UK",
    "CA",
    "AU",
    "SG",
    "JP",
    "KR",
    "AE",
    "CH",
    "GLOBAL-OFFSHORE"
  ],
  "jurisdictions_policy": "offshore-only; CN excluded (PIPL Art. 3/53 guardrail)",
  "erc8004": {
    "agentId": 59338,
    "chain": "base",
    "chainId": 8453,
    "registry": "0x8004A169FB4a3325136EB29fA0ceB6D2e539a432",
    "owner": "0xD97FC158fda064DcD8dAE0EC986cC584992F707e",
    "registrationTx": "0fb6a91cec2ce62f511e7c0b8c7f0eb26b82293bb958e414073e408e1995ec8e"
  },
  "generated_at": "2026-07-19T15:45:00.498576+00:00",
  "generated_by": "scripts/regenerate_agent_card.py (RQ-GAGENT-SURFACE-01)"
}