You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<h1class="hero-h1">Wrap first. <spanclass="grad">Use schemas when you need interoperability.</span></h1>
38
-
<pclass="hero-sub">Most builders do not need to download every schema. Pick the capabilities your agent supports, emit receipts, and verify the proof.</p>
44
+
<pclass="hero-sub">Most builders only need the schemas for the capabilities they support. Schema validation helps structure receipts, but schema-valid alone is not verified. Verification requires hash and signature checks.</p>
@@ -49,7 +55,7 @@ <h2>Two ways developers use CommandLayer</h2>
49
55
<divclass="path-grid">
50
56
<divclass="path-card">
51
57
<strong>1. Just wrap my agent</strong>
52
-
<p>You already have an agent and just want receipts. Use the SDK wrapper and let CommandLayer handle receipt structure, canonicalization, hash, signature, verifier calls, and proof objects.</p>
58
+
<p>You already have an agent and just want receipts. Use the SDK wrapper and let CommandLayer handle receipt structure plus canonical metadata.proof fields: metadata.proof.canonicalization, metadata.proof.hash.alg/value, metadata.proof.signature.alg/value/kid, and metadata.proof.signer_id.</p>
@@ -60,18 +66,18 @@ <h2>Two ways developers use CommandLayer</h2>
60
66
</div>
61
67
</div>
62
68
<divclass="rule-box">
63
-
<strong>The simple rule:</strong> use only the schemas for the capabilities your agent supports. If your agent only summarizes text, you need the summarize request schema, summarize receipt schema, and shared proof schema — not ship, refund, approve, kyc, broadcast, or inventory.
69
+
<strong>The simple rule:</strong> use only the schemas for the capabilities your agent supports. If your agent only summarizes text, you need the summarize request schemaand summarize receipt schema — not ship, refund, approve, kyc, broadcast, or inventory.
64
70
</div>
65
71
</section>
66
72
67
73
<sectionclass="doc-card">
68
74
<h2>How the stack fits together</h2>
69
75
<p>Capabilities are the menu of possible actions. Schemas are the contracts for each action. The SDK wraps an agent action and emits receipts. The verifier checks those receipts. Your agent only uses the capabilities it actually performs.</p>
70
76
<divclass="stack-list">
71
-
<divclass="stack-item"><strong>Layer 1 — Shared proof schema.</strong> Every receipt needs canonicalization, hash, signature_alg, signature, key_id, and signer.</div>
77
+
<divclass="stack-item"><strong>Layer 1 — Canonical proof envelope.</strong> Every receipt uses metadata.proof with canonicalization, hash, signature, key id, and signer identity.</div>
72
78
<divclass="stack-item"><strong>Layer 2 — Capability schemas.</strong> Each capability has its own request and receipt shape, such as verify.request.schema.json or authorize.receipt.schema.json.</div>
73
-
<divclass="stack-item"><strong>Layer 3 — SDK.</strong> The SDK helps developers use schemas without manually assembling every proof object.</div>
74
-
<divclass="stack-item"><strong>Layer 4 — Verifier.</strong>VerifyAgent checks shape, hash, signature, signer, and whether the capability verb makes sense.</div>
79
+
<divclass="stack-item"><strong>Layer 3 — SDK wrapper.</strong> The SDK helps wrap actions and emit receipts without manually assembling proof objects.</div>
80
+
<divclass="stack-item"><strong>Layer 4 — Runtime / verifier.</strong>Runtime signs production receipts. The verifier checks hash, signature, signer identity, and capability verb.</div>
75
81
</div>
76
82
</section>
77
83
@@ -104,13 +110,14 @@ <h2>Install</h2>
104
110
105
111
<sectionclass="doc-card">
106
112
<h2>Wrap an action</h2>
107
-
<p>Wrap your function with a capability verb. The wrapped function returns normal output plus a signed receipt that can be independently verified.</p>
113
+
<p>Wrap your function with a capability verb. The wrapped function returns normal output plus a signed receipt with metadata.proof using json.sorted_keys.v1 canonicalization, SHA-256 hash, and Ed25519 signatures that can be independently verified.</p>
108
114
<preclass="code-panel"><code>import { CommandLayer } from "@commandlayer/agent-sdk";
0 commit comments