{
  "schemaVersion": "imladri.proof-trust-registry.v1",
  "status": "active",
  "generatedAt": "2026-06-10T00:00:00.000Z",
  "canonicalization": "sorted-json-v1",
  "digestAlgorithm": "SHA-256",
  "verifier": "https://imladri.com/verify-proof",
  "liveWorkerRegistry": "https://imladri-beta-api.imladri.workers.dev/api/public/proof/trust-registry",
  "timestampPolicy": {
    "source": "Cloudflare Worker signing time",
    "fields": [
      "proofSignature.signedAt",
      "exportedAt",
      "hashChain.activityTimeline[].createdAt",
      "share.createdAt"
    ],
    "clockToleranceSeconds": 300,
    "note": "Auditors compare signing time, export time, share creation time, and event-chain timestamps. Public samples are digest fixtures; live customer packets carry workspace signing metadata."
  },
  "keyRotationPolicy": {
    "activePublicKeySource": "Live Worker registry or embedded proofSignature.publicKeyJwk",
    "legacyKeyId": "worker-proof-signing-key-v1",
    "activeKeyId": "worker-proof-signing-key-v2",
    "overlapDays": 30,
    "retiredKeysStayListedDays": 365,
    "rotateWhen": [
      "suspected key exposure",
      "operator device compromise",
      "planned cryptographic epoch change",
      "customer-requested proof epoch reset"
    ]
  },
  "keys": [
    {
      "keyId": "worker-proof-signing-key-v2",
      "status": "active-when-configured",
      "algorithm": "ECDSA-P256-SHA256",
      "publicKeyJwk": null,
      "publicKeySource": "Embedded proofSignature.publicKeyJwk and the live Worker trust-registry route",
      "verifierBehavior": "Verify proofSignature.signatureHex over the sorted-json-v1 unsigned packet payload when a public JWK is present."
    },
    {
      "keyId": "worker-proof-signing-key-v1",
      "status": "legacy-private-verification",
      "algorithm": "HMAC-SHA-256",
      "publicKeyJwk": null,
      "publicKeySource": null,
      "verifierBehavior": "Public verifier recomputes the digest and hash chain. HMAC signature verification requires the server secret."
    }
  ],
  "schemaVersions": [
    {
      "id": "imladri.customer-proof-packet.v1",
      "status": "active",
      "requiredIntegrityFields": [
        "proofSignature",
        "hashChain",
        "activityTimeline",
        "proofCompleteness",
        "evidenceCounts"
      ]
    },
    {
      "id": "imladri.auditor-proof-packet.v1",
      "status": "active-public-sample",
      "requiredIntegrityFields": [
        "signature.packetDigestHex",
        "chain.entries",
        "chain.chainRoot",
        "claims"
      ]
    },
    {
      "id": "imladri.agent-dashboard-evidence.v1",
      "status": "active-profile-import",
      "requiredIntegrityFields": [
        "proofDigest",
        "localProof",
        "evidenceEvents"
      ]
    },
    {
      "id": "imladri.customer-api-readiness.v1",
      "status": "active",
      "requiredIntegrityFields": [
        "checks",
        "counts",
        "nextActions"
      ]
    }
  ],
  "samplePackets": [
    {
      "id": "auditor-sample",
      "surface": "action-data-compute",
      "url": "https://imladri.com/proofs/imladri-auditor-proof-sample.json",
      "verifier": "https://imladri.com/verify-proof"
    },
    {
      "id": "langchain-adapter",
      "surface": "sdk-adapter",
      "source": "Profile SDK certification packet",
      "docsUrl": "https://imladri.com/adopters/langchain"
    },
    {
      "id": "openai-agents-adapter",
      "surface": "sdk-adapter",
      "source": "Profile SDK certification packet",
      "docsUrl": "https://imladri.com/adopters/openai-agents"
    },
    {
      "id": "vercel-ai-sdk-adapter",
      "surface": "sdk-adapter",
      "source": "Profile SDK certification packet",
      "docsUrl": "https://imladri.com/adopters/vercel-ai-sdk"
    },
    {
      "id": "mcp-authority",
      "surface": "mcp-authority-token",
      "source": "Profile authority-token proof export",
      "docsUrl": "https://imladri.com/docs"
    },
    {
      "id": "ci-scanner",
      "surface": "ci-boundary-scan",
      "source": "Uploaded scanner proof packet",
      "docsUrl": "https://imladri.com/install"
    },
    {
      "id": "db-sandbox",
      "surface": "database-sandbox",
      "source": "Profile DB sandbox proof export",
      "docsUrl": "https://imladri.com/research/sandboxing"
    },
    {
      "id": "protected-compute",
      "surface": "protected-compute",
      "source": "Provider training proof export",
      "docsUrl": "https://imladri.com/research/enclave"
    }
  ]
}