{
  "schemaVersion": "0.1.0",
  "name": "Sunaiva Validation Layer",
  "description": "The trust ramp from observation to enforcement for AI in production. Triple Gate AND-logic produces a cryptographically-signed conformity record on every AI input and output. Mode is set per rule — shadow (observe-only), advisory (flag), or enforcement (block on proven patterns).",
  "version": "1.0.0",
  "url": "https://api.sunaivadigital.com",
  "documentationUrl": "https://api.sunaivadigital.com/docs",
  "provider": {
    "name": "Sunaiva",
    "url": "https://sunaiva.ai"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": true
  },
  "defaultInputModes": ["application/json"],
  "defaultOutputModes": ["application/json"],
  "authentication": {
    "schemes": ["bearer"],
    "instructions": "Request access at kinan@sunaiva.ai. Bearer token required for /v1/* endpoints."
  },
  "skills": [
    {
      "id": "validate-pipeline",
      "name": "Validate AI pipeline output",
      "description": "Audit an AI pipeline through Triple Gate AND-logic. Returns a cryptographically-signed conformity record.",
      "tags": ["validation", "audit", "conformity"],
      "examples": ["POST /v1/audit/pipeline with input/output pair"],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "audit-article15",
      "name": "EU AI Act Article 15 audit",
      "description": "Run an EU AI Act Article 15 (Accuracy, Robustness, Cybersecurity) compliance audit. Returns a signed report.",
      "tags": ["compliance", "eu-ai-act", "article-15"],
      "examples": ["POST /v1/audit/article15"],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "audit-annex-iv",
      "name": "EU AI Act Annex IV report",
      "description": "Generate an Annex IV technical documentation report from validation evidence.",
      "tags": ["compliance", "eu-ai-act", "annex-iv"],
      "examples": ["POST /v1/audit/annex-iv"],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "verify-signature",
      "name": "Verify a Sunaiva Validation Proof (SVP) signature",
      "description": "Verify the PQC-signed cryptographic evidence chain on any Sunaiva attestation.",
      "tags": ["verification", "pqc", "evidence"],
      "examples": ["POST /v1/verify-signature"]
    },
    {
      "id": "get-report",
      "name": "Get a generated report",
      "description": "Fetch a generated audit report by ID.",
      "tags": ["reports"],
      "examples": [
        "GET /v1/reports/{report_id}/json",
        "GET /v1/reports/{report_id}/html"
      ]
    },
    {
      "id": "submit-attestation",
      "name": "Submit audit as on-chain ERC-8004 attestation",
      "description": "Bridge a PQC-signed Sunaiva audit report to an on-chain attestation on the SunaivaValidationRegistry (CREATE2 0x8004cb11f339c9B147897EC0409066937d05346b on Base Mainnet 8453 + Base Sepolia 84532). Returns tx_hash + attestation_id + block_number. Idempotency and reorg-recovery built in.",
      "tags": ["attestation", "on-chain", "erc-8004", "base", "evidence"],
      "examples": [
        "POST /v1/attestations/submit with body {audit_id, target_chain, agent_address, score, label}"
      ],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    },
    {
      "id": "query-attestations",
      "name": "Query Sunaiva on-chain attestation history",
      "description": "Return Sunaiva's attestation history across all audit reports. Supports filtering by target_chain. Returns attestation_id, tx_hash, block_number, gas_used, and status (confirmed | pending) for each.",
      "tags": ["attestation", "on-chain", "erc-8004", "discovery", "history"],
      "examples": [
        "GET /v1/attestations?chain=8453&limit=50"
      ],
      "inputModes": ["application/json"],
      "outputModes": ["application/json"]
    }
  ],
  "x-sunaiva": {
    "modes": {
      "shadow": "Observe-only. Triple Gate evaluates every output, produces signed evidence, never blocks. Default for all new rules.",
      "advisory": "Flag via X-Sunaiva-Advisory response header. Downstream code decides what to do.",
      "enforcement": "Block on customer-predefined patterns proven in shadow. Per-call override authority with audit trail."
    },
    "modeAssignment": "Per-rule, not global. Customer chooses mode per validation rule.",
    "tenantResidency": "Validator runs inside the customer's infrastructure. Zero data egress.",
    "evidenceChain": "Triple Gate AND-logic + Spore adversarial regeneration + PQC signing via ML-DSA-65 + SLH-DSA-SHA2-192f + Ed25519.",
    "patents": [
      "USPTO 64/006,491 — Crown Jewel (Triple Gate AND-logic validation)",
      "USPTO 64/030,411 — QTC (Quantum Trustless Commerce, PQC evidence)",
      "USPTO 64/030,391 — Spore (Adversarial regeneration)"
    ],
    "onChain": {
      "status": "broadcast-pending-kinan-approval",
      "branch": "B — register on live ERC-8004 IdentityRegistry + deploy own compatible registry",
      "plannedChains": ["Base mainnet", "BNB Chain"],
      "validatorWallet": "0xa945a36a730338a477d0a9D32cCA9F5d5e30C9ed",
      "ownRegistryCreate2": "0x8004cb11f339c9B147897EC0409066937d05346b",
      "referenceIdentityRegistry": "0x8004A169FB4a3325136EB29fA0ceB6D2e539a432",
      "evidenceFormat": "ERC-8004-compatible attestation event schema",
      "bridge": {
        "status": "implemented-pending-sepolia-dogfood",
        "submitEndpoint": "https://api.sunaivadigital.com/v1/attestations/submit",
        "listEndpoint": "https://api.sunaivadigital.com/v1/attestations",
        "auth": "X-API-Key",
        "implementationVersion": "0.1.0",
        "implementationFile": "sunaiva-validation/attestation_submitter.py",
        "implementationCommit": "2026-06-08 — 4 critical findings closed (F1 receipt-timeout durability, F3 reorg recheck, F4 cross-chain merge, S1 frame scrub)",
        "deferredHardening": [
          "S2 account._private_key in singleton — B7 (per-call sign + scrub)",
          "F2 cross-process nonce — single uvicorn worker until B7 postgres ledger"
        ],
        "rule47Dogfood": "data/dogfood_reports/attestation_bridge_TEMPLATE.md (B5 to populate)",
        "trinityCoherenceCheck": "Rule 53 v1.1 Family (b) — currently INCOHERENT until B5 dogfood completes; becomes COHERENT after B5 PASS"
      }
    },
    "license": "BUSL-1.1 wrappers (npm/PyPI). Backend proprietary.",
    "contact": "kinan@sunaiva.ai"
  }
}