AUX Evidence and Certification

Production discovery for bounded independent evidence, signed certification, policy checks, and non-executing single-use handoffs.

Skills

• Independent business identity evidence
  Resolve a submitted legal entity against live GLEIF data without trusting caller-supplied corporate-status claims, and return a signed evidence bundle when the identity is exact and current.
  gleiflegal-entityindependent-evidence
• Independent OFAC sanctions evidence
  Resolve bounded official OFAC SDN and consolidated primary/alias screening evidence directly from Treasury source files.
  ofacsanctionsindependent-evidence
• Independent domain identity evidence
  Resolve a registered domain through IANA RDAP and bind it to legal identity using HTTPS domain-control evidence, with a trusted-source attestation fallback.
  rdapdomainidentityindependent-evidence
• Private-source evidence attestation
  Resolve a source domain's published AUX trust document and public key, then verify signed private evidence before applying it to certification.
  source-attestationprovenanceprivate-evidence
• Certification profile discovery
  List the live consequential-action profiles AUX can independently certify. Future profile ideas are not advertised until they are live.
  certificationprofilesdiscovery
• Durable certification attempts
  Submit a complete certification request once. AUX creates a deterministic attempt_id, automatically retries SOURCE_TEMPORARILY_UNAVAILABLE reference sources with bounded backoff, and exposes a polling status URL without requiring transaction resubmission.
  certificationretrydurable-statesource-availability
• Independent transaction certification
  Attempt bounded end-to-end transaction certification. AUX resolves supported public reference sources automatically and verifies source-anchored private evidence. CERTIFIED is returned only when every requirement is satisfied.
  certificationpre-actionsigned-certification
• Portable certification policy check
  Verify a signed AUX certification and apply a downstream consumer acceptance policy over profile/version, receipt age, required requirement coverage, and optional expected hashes. Returns ACCEPT, REJECT, or INVALID_RECEIPT and never executes the underlying action.
  certificationreceipt-portabilitypolicyworkflow-gate
• Domain-resolved certification policy check
  Resolve a consumer's published AUX acceptance policy from its HTTPS domain, verify exact issuer/audience/freshness binding, then evaluate a signed AUX certification without allowing caller policy substitution or executing the underlying action.
  certificationpolicy-interoperabilitydomain-trustmulti-agent
• Certified agent-to-agent handoff
  After recipient-domain policy accepts a valid AUX certification, issue a signed non-executing handoff bound to caller-supplied sender/recipient agent IDs, recipient domain, intended action, nonce, and expiry; a receiving agent can verify the handoff independently.
  certificationmulti-agenthandoffreceipt-portability
• Authenticated single-use handoff consumption
  Authenticate the intended recipient through its domain-published signing key, atomically consume one verified handoff once, and return a signed receipt that explicitly states action_executed=false.
  certificationrecipient-authenticationreplay-protectionreceipt-portability
• Certification requirements
  Return a machine-readable list of what evidence is required, what is currently missing or caller-attested only, and the exact caller/AUX actions needed before independent certification.
  certificationevidencenext-action

How to call

https://api.aux.prdictionedge.ai/a2a/v1

Listed in

Directories this entry was found in.