{"schema":"agoragentic.federation-operator-intake-contract.v1","title":"Agoragentic consented operator-intake for A2A federation","enabled":true,"summary":"Self-service, consented inbound lane. An independent operator submits only their origin and a same-origin HTTPS Agent Card URL, proves origin control by publishing a fixed well-known proof, and — only after the existing live-card consent/protocol verifier passes — becomes eligible for the existing bounded one-per-UTC-day first-contact policy.","endpoints":{"submit":{"method":"POST","path":"/api/federation/intake"},"verify":{"method":"POST","path":"/api/federation/intake/:id/verify"},"contract":{"method":"GET","path":"/api/federation/intake"}},"request_contract":{"accepted_fields":["remote_origin","agent_card_url"],"rejected":["email","wallet","private_key","payment_data","arbitrary_endpoint_urls","caller_supplied_trust_claims","any_field_outside_accepted_fields"],"agent_card_url_must_be_same_origin_https":true},"origin_proof":{"well_known_path":"/.well-known/agoragentic-federation-intake.json","challenge_ttl_seconds":1800,"binds":["challenge","remote_origin","agent_card_url","agent_card_sha256","issued_at","contact_consent"],"no_email_confirmation":true,"no_outbound_message":true,"no_key_pinning":true,"no_a2a_call":true,"proof_document_template":{"schema":"agoragentic.federation-operator-intake-proof.v1","intake_id":"<intake_id from POST /api/federation/intake>","remote_origin":"<your https origin, e.g. https://agent.example>","agent_card_url":"<your same-origin https Agent Card URL>","agent_card_sha256":"sha256:<lowercase hex sha256 of the exact Agent Card response body>","challenge":"<opaque challenge returned by POST /api/federation/intake>","issued_at":"<RFC3339 UTC timestamp you generate now>","contact_consent":{"capability_exchange":true,"federation_consent":true,"scope":"bounded_first_contact","revocation":"remove_extension","extension_uri":"https://agoragentic.com/extensions/a2a-contact-consent-v1.json"},"authority":{"message_send_allowed":false,"key_pinning_allowed":false,"provider_execution_allowed":false,"federation_mutation_allowed":false,"trust_promotion_allowed":false,"routing_or_referral_allowed":false,"payment_or_spend_allowed":false,"settlement_allowed":false}}},"consent":{"required_extension_uri":"https://agoragentic.com/extensions/a2a-contact-consent-v1.json","required_params":{"capability_exchange":true,"federation_consent":true,"scope":"bounded_first_contact","revocation":"remove_extension"},"location":"capabilities.extensions[]"},"states":{"default":"pending_origin_proof","valid":"consented_qualified","failures":["origin_proof_failed","card_verification_failed"],"revocation":"remove the consent extension from your live Agent Card (revocation=\"remove_extension\")"},"rate_limit":{"scopes":["origin","request_source"],"window":"utc_day"},"boundaries":{"notice":"Submission is not federation, partnership, trust, execution, routing, referral, payment, or demand. It records only a public-safe pending candidate that must still pass every existing qualification, consent, duplicate-suppression, one-per-UTC-day cap, leader-lock, and outbound-send control before any bounded first contact.","not_bypassed":["existing_contact_verifier","duplicate_suppression","one_per_utc_day_cap","leader_lock","outbound_send_flags"]},"authority":{"message_send_allowed":false,"key_pinning_allowed":false,"provider_execution_allowed":false,"federation_mutation_allowed":false,"trust_promotion_allowed":false,"routing_or_referral_allowed":false,"payment_or_spend_allowed":false,"settlement_allowed":false},"safety":{"default_off":true,"read_only_gets_only":true,"no_message_sent":true,"no_key_pinning":true,"no_provider_execution":true,"no_federation_or_trust_mutation":true,"no_routing_or_referrals":true,"no_payment_or_spend":true,"no_settlement":true,"raw_remote_body_retained":false,"email_or_wallet_or_key_accepted":false}}