Independent verifier · run of 2026-10-27 21:00:19 UTC
Overall: FAILED
2 of the 9 mandatory dimensions failed, which decides the overall verdict. INCONCLUSIVE never rounds up.
A verdict on this page comes from replaying the checks against evidence captured at run time, not from what either agent says about itself.
spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE — key d9_TeAQP65_n…, published at https://buyer.onbehalf.dev/.well-known/agent-keys.json; key handed over at height 73 (2026-09-16 16:42:47 UTC): from vlkQ29sdwfWX… to d9_TeAQP65_n…, the new key's first entry chained onto the head the old one left (F-10)3b13526e896d… at 2026-10-13 14:46:21 UTC; receipt #849 in the log of https://provedby.dev/witness, 2026-10-13 14:46:22 UTC (the verifier-operated emulator, declared); also leaf #6182 of the public log at https://witness.agentactioncapsule.org (tree size 6183, registered 2026-10-13 14:46:23 UTC), receipt verified under the log's key, consistent with the log's tree head of 13032 this runWhy — dane_endpoint: dane_mismatch: travel.agenthaven.dev: served 1d651ef4b8d9ed2b…, pinned ['3e974da4286b4a05'], AD True
record_validated — SVCB at travel.agenthaven.dev: RRSIG validated locally against the zone DNSKEY, DS matched at the parent; chain above the zone by the resolver AD flag (True)card_url_declared — key65400 = https://travel.agenthaven.dev/.well-known/agent-card.jsondane_endpoint — dane_mismatch: travel.agenthaven.dev: served 1d651ef4b8d9ed2b…, pinned ['3e974da4286b4a05'], AD Trueucp_profiles — buyer: UCP 2026-08-25, checkout and AP2 mandate extension declared, catalog search declared, no service endpoint, 1 key(s), each attested in agent-keys.json, the key its ledger is signed under at the head (d9_TeAQP65_n…) among them with the same key material, mandate issuers https://sealedby.dev, the run's authority among themEvidence: buyer/ucp-profile.json · dns/travel.agenthaven.dev.SVCB.wire
dane_key_host — dns-aid.agenthaven.dev presents SPKI 3ff63922c2b33fdc… matching TLSA 3 1 1; valid to 2026-12-01T09:27:20Zrecord_signature — sig kid dnsaid-2026-09 verifies; binding ok; svcb claim covers the wire; expires 2026-12-13; kid is a label, thumbprint Ol3NxvkXhB-Q…Evidence: dns/travel.agenthaven.dev.SVCB.txt · seller/dns-aid-jwks.json
Not tested — not attempted by configuration
Why — buyer_attestation: spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE attests key d9_TeAQP65_n… (x509-svid signer, expires 2026-10-16T16:42:46Z); buyer_attestation: spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE attests key d9_TeAQP65_n… (jwt-svid signer, expires 2026-10-16T16:42:46Z)
buyer_attestation — spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE attests key d9_TeAQP65_n… (x509-svid signer, expires 2026-10-16T16:42:46Z)buyer_attestation — spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE attests key d9_TeAQP65_n… (jwt-svid signer, expires 2026-10-16T16:42:46Z)buyer_revocations — spiffe://buyer.onbehalf.dev/buyer/personal/vlkQ29sdwfWXE0xxoU-qMdi1Kfah8f0LonQYXgJ6dVE withdraws 2 key(s) (x509-svid signer): lZrWKxjth0od…, vlkQ29sdwfWX…Evidence: buyer/agent-keys.json · buyer/spiffe-bundle.json
Not tested — the external mandate path was exercised live (https://sealedby.dev: mandate.received in 108 buyer correlation(s), a checkout under it in 0 seller correlation(s)); the seller or the buyer's ledger could not be read in this run, so there is nothing to join
Not tested — no checkout settled on stripe-test in the seller ledger (rails seen: none); a simulated rail has nothing to confirm
buyer_ledger — 1576 entries, head 3b13526e896d…, 1576 attributed, 0 unattributed, 0 foreign signer, 0 forged, 0 unverifiable, 1 handover(s) (vlkQ29sdwfWX… to d9_TeAQP65_n… at height 73), 1 fork(s) declared (height 161 chains onto 154, the branch 155 to 160 declared at height 227), signed at the head under d9_TeAQP65_n…checkpoints — buyer: 165 checkpoint(s), all signed by the instance and matching the chain, 164 sealed at https://provedby.dev/witness, 164 by the verifier-operated emulator, declared / 1 unsealed; 154 registered at https://witness.agentactioncapsule.org (a public log this verifier does not operate; receipts verified under its key), 154 consistent with the log's tree head this runEvidence: buyer/checkpoints.json · buyer/ledger.json (as a page) · witness/provedby.dev_witness/jwks.json · witness/witness.agentactioncapsule.org/consistency-1205-13032.json · witness/witness.agentactioncapsule.org/consistency-1367-13032.json · witness/witness.agentactioncapsule.org/consistency-1370-13032.json · witness/witness.agentactioncapsule.org/consistency-1372-13032.json · witness/witness.agentactioncapsule.org/consistency-1378-13032.json · witness/witness.agentactioncapsule.org/consistency-1381-13032.json · witness/witness.agentactioncapsule.org/consistency-1385-13032.json · witness/witness.agentactioncapsule.org/consistency-1388-13032.json · witness/witness.agentactioncapsule.org/consistency-1393-13032.json · witness/witness.agentactioncapsule.org/consistency-1394-13032.json · witness/witness.agentactioncapsule.org/consistency-1396-13032.json · witness/witness.agentactioncapsule.org/consistency-1399-13032.json · witness/witness.agentactioncapsule.org/consistency-1402-13032.json · witness/witness.agentactioncapsule.org/consistency-1429-13032.json · witness/witness.agentactioncapsule.org/consistency-1440-13032.json · witness/witness.agentactioncapsule.org/consistency-1442-13032.json · witness/witness.agentactioncapsule.org/consistency-1446-13032.json · witness/witness.agentactioncapsule.org/consistency-1449-13032.json · witness/witness.agentactioncapsule.org/consistency-1451-13032.json · witness/witness.agentactioncapsule.org/consistency-1452-13032.json · witness/witness.agentactioncapsule.org/consistency-1463-13032.json · witness/witness.agentactioncapsule.org/consistency-1464-13032.json · witness/witness.agentactioncapsule.org/consistency-1467-13032.json · witness/witness.agentactioncapsule.org/consistency-1470-13032.json · witness/witness.agentactioncapsule.org/consistency-1477-13032.json · witness/witness.agentactioncapsule.org/consistency-1481-13032.json · witness/witness.agentactioncapsule.org/consistency-1489-13032.json · witness/witness.agentactioncapsule.org/consistency-1492-13032.json · witness/witness.agentactioncapsule.org/consistency-1500-13032.json · witness/witness.agentactioncapsule.org/consistency-1503-13032.json · witness/witness.agentactioncapsule.org/consistency-1506-13032.json · witness/witness.agentactioncapsule.org/consistency-1510-13032.json · witness/witness.agentactioncapsule.org/consistency-1517-13032.json · witness/witness.agentactioncapsule.org/consistency-1521-13032.json · witness/witness.agentactioncapsule.org/consistency-1524-13032.json · witness/witness.agentactioncapsule.org/consistency-1546-13032.json · witness/witness.agentactioncapsule.org/consistency-1549-13032.json · witness/witness.agentactioncapsule.org/consistency-1555-13032.json · witness/witness.agentactioncapsule.org/consistency-1561-13032.json · witness/witness.agentactioncapsule.org/consistency-1564-13032.json · witness/witness.agentactioncapsule.org/consistency-1567-13032.json · witness/witness.agentactioncapsule.org/consistency-1592-13032.json · witness/witness.agentactioncapsule.org/consistency-1597-13032.json · witness/witness.agentactioncapsule.org/consistency-1600-13032.json · witness/witness.agentactioncapsule.org/consistency-1604-13032.json · witness/witness.agentactioncapsule.org/consistency-1608-13032.json · witness/witness.agentactioncapsule.org/consistency-1626-13032.json · witness/witness.agentactioncapsule.org/consistency-1629-13032.json · witness/witness.agentactioncapsule.org/consistency-1665-13032.json · witness/witness.agentactioncapsule.org/consistency-1666-13032.json · witness/witness.agentactioncapsule.org/consistency-1667-13032.json · witness/witness.agentactioncapsule.org/consistency-1672-13032.json · witness/witness.agentactioncapsule.org/consistency-1681-13032.json · witness/witness.agentactioncapsule.org/consistency-1682-13032.json · witness/witness.agentactioncapsule.org/consistency-1687-13032.json · witness/witness.agentactioncapsule.org/consistency-1690-13032.json · witness/witness.agentactioncapsule.org/consistency-1691-13032.json · witness/witness.agentactioncapsule.org/consistency-1695-13032.json · witness/witness.agentactioncapsule.org/consistency-1696-13032.json · witness/witness.agentactioncapsule.org/consistency-1703-13032.json · witness/witness.agentactioncapsule.org/consistency-1707-13032.json · witness/witness.agentactioncapsule.org/consistency-1710-13032.json · witness/witness.agentactioncapsule.org/consistency-1716-13032.json · witness/witness.agentactioncapsule.org/consistency-1724-13032.json · witness/witness.agentactioncapsule.org/consistency-1728-13032.json · witness/witness.agentactioncapsule.org/consistency-1747-13032.json · witness/witness.agentactioncapsule.org/consistency-1749-13032.json · witness/witness.agentactioncapsule.org/consistency-1758-13032.json · witness/witness.agentactioncapsule.org/consistency-1760-13032.json · witness/witness.agentactioncapsule.org/consistency-1764-13032.json · witness/witness.agentactioncapsule.org/consistency-1773-13032.json · witness/witness.agentactioncapsule.org/consistency-1774-13032.json · witness/witness.agentactioncapsule.org/consistency-1775-13032.json · witness/witness.agentactioncapsule.org/consistency-1776-13032.json · witness/witness.agentactioncapsule.org/consistency-1784-13032.json · witness/witness.agentactioncapsule.org/consistency-1792-13032.json · witness/witness.agentactioncapsule.org/consistency-1795-13032.json · witness/witness.agentactioncapsule.org/consistency-1798-13032.json · witness/witness.agentactioncapsule.org/consistency-1801-13032.json · witness/witness.agentactioncapsule.org/consistency-1872-13032.json · witness/witness.agentactioncapsule.org/consistency-1875-13032.json · witness/witness.agentactioncapsule.org/consistency-1881-13032.json · witness/witness.agentactioncapsule.org/consistency-1884-13032.json · witness/witness.agentactioncapsule.org/consistency-1891-13032.json · witness/witness.agentactioncapsule.org/consistency-1895-13032.json · witness/witness.agentactioncapsule.org/consistency-1898-13032.json · witness/witness.agentactioncapsule.org/consistency-1961-13032.json · witness/witness.agentactioncapsule.org/consistency-2007-13032.json · witness/witness.agentactioncapsule.org/consistency-2012-13032.json · witness/witness.agentactioncapsule.org/consistency-2016-13032.json · witness/witness.agentactioncapsule.org/consistency-2019-13032.json · witness/witness.agentactioncapsule.org/consistency-2022-13032.json · witness/witness.agentactioncapsule.org/consistency-2041-13032.json · witness/witness.agentactioncapsule.org/consistency-2046-13032.json · witness/witness.agentactioncapsule.org/consistency-2050-13032.json · witness/witness.agentactioncapsule.org/consistency-2072-13032.json · witness/witness.agentactioncapsule.org/consistency-2082-13032.json · witness/witness.agentactioncapsule.org/consistency-2086-13032.json · witness/witness.agentactioncapsule.org/consistency-2092-13032.json · witness/witness.agentactioncapsule.org/consistency-2096-13032.json · witness/witness.agentactioncapsule.org/consistency-2103-13032.json · witness/witness.agentactioncapsule.org/consistency-2106-13032.json · witness/witness.agentactioncapsule.org/consistency-2114-13032.json · witness/witness.agentactioncapsule.org/consistency-2121-13032.json · witness/witness.agentactioncapsule.org/consistency-2126-13032.json · witness/witness.agentactioncapsule.org/consistency-2131-13032.json · witness/witness.agentactioncapsule.org/consistency-2150-13032.json · witness/witness.agentactioncapsule.org/consistency-2153-13032.json · witness/witness.agentactioncapsule.org/consistency-2246-13032.json · witness/witness.agentactioncapsule.org/consistency-2253-13032.json · witness/witness.agentactioncapsule.org/consistency-2289-13032.json · witness/witness.agentactioncapsule.org/consistency-2293-13032.json · witness/witness.agentactioncapsule.org/consistency-2299-13032.json · witness/witness.agentactioncapsule.org/consistency-2302-13032.json · witness/witness.agentactioncapsule.org/consistency-2313-13032.json · witness/witness.agentactioncapsule.org/consistency-2318-13032.json · witness/witness.agentactioncapsule.org/consistency-2324-13032.json · witness/witness.agentactioncapsule.org/consistency-2326-13032.json · witness/witness.agentactioncapsule.org/consistency-2331-13032.json · witness/witness.agentactioncapsule.org/consistency-2335-13032.json · witness/witness.agentactioncapsule.org/consistency-2380-13032.json · witness/witness.agentactioncapsule.org/consistency-2387-13032.json · witness/witness.agentactioncapsule.org/consistency-2390-13032.json · witness/witness.agentactioncapsule.org/consistency-2394-13032.json · witness/witness.agentactioncapsule.org/consistency-2398-13032.json · witness/witness.agentactioncapsule.org/consistency-2404-13032.json · witness/witness.agentactioncapsule.org/consistency-2509-13032.json · witness/witness.agentactioncapsule.org/consistency-2515-13032.json · witness/witness.agentactioncapsule.org/consistency-2787-13032.json · witness/witness.agentactioncapsule.org/consistency-2792-13032.json · witness/witness.agentactioncapsule.org/consistency-2793-13032.json · witness/witness.agentactioncapsule.org/consistency-2814-13032.json · witness/witness.agentactioncapsule.org/consistency-2816-13032.json · witness/witness.agentactioncapsule.org/consistency-2882-13032.json · witness/witness.agentactioncapsule.org/consistency-2914-13032.json · witness/witness.agentactioncapsule.org/consistency-2917-13032.json · witness/witness.agentactioncapsule.org/consistency-2963-13032.json · witness/witness.agentactioncapsule.org/consistency-2966-13032.json · witness/witness.agentactioncapsule.org/consistency-2974-13032.json · witness/witness.agentactioncapsule.org/consistency-2990-13032.json · witness/witness.agentactioncapsule.org/consistency-3064-13032.json · witness/witness.agentactioncapsule.org/consistency-3067-13032.json · witness/witness.agentactioncapsule.org/consistency-3072-13032.json · witness/witness.agentactioncapsule.org/consistency-3079-13032.json · witness/witness.agentactioncapsule.org/consistency-3081-13032.json · witness/witness.agentactioncapsule.org/consistency-3083-13032.json · witness/witness.agentactioncapsule.org/consistency-3086-13032.json · witness/witness.agentactioncapsule.org/consistency-3095-13032.json · witness/witness.agentactioncapsule.org/consistency-3097-13032.json · witness/witness.agentactioncapsule.org/consistency-3107-13032.json · witness/witness.agentactioncapsule.org/consistency-3227-13032.json · witness/witness.agentactioncapsule.org/consistency-5339-13032.json · witness/witness.agentactioncapsule.org/consistency-6147-13032.json · witness/witness.agentactioncapsule.org/consistency-6183-13032.json · witness/witness.agentactioncapsule.org/did.json · witness/witness.agentactioncapsule.org/inclusion-3b13526e896da005.json · witness/witness.agentactioncapsule.org/sth.json
Not tested — an authority is in the ledgers (https://sealedby.dev); not followed in this run for the same reason as the mandate dimension; 2 key(s) withdrawn by the buyer's domain, none presented to the seller since: the time to first refusal of a withdrawn identity (F-07b) has no evidence yet
Not tested — contracts/vectors not given
14 of 14 checks passed
Before it sends a byte of business, the buyer runs its own checks on the seller and writes them in its ledger (counterparty.verified). This is the buyer's word: signed by its instance key on the chain the attribution dimension verifies, not re-run by this verifier, whose own findings on the same questions are the nine dimensions above.
The buyer's latest verification of travel.agenthaven.dev: transaction 37faddcf, 2026-10-11T10:28:47.270Z, 14 of 14 checks passed. In this run's transactions the buyer verified travel.agenthaven.dev 185 time(s), 185 with its own verdict ok. The list is the buyer's and has changed over time: this ledger holds verifications of travel.agenthaven.dev with 9, 14 checks. — buyer/ledger.json (as a page)
record_validated — SVCB at travel.agenthaven.dev, RRSIG by agenthaven.dev. validated locally against the zone's DNSKEY (DS matched at the parent); chain above the zone by the resolver's AD flagcard_url_declared — key65400 = https://travel.agenthaven.dev/.well-known/agent-card.jsondane_endpoint — travel.agenthaven.dev presents SPKI 3e974da4286b4a05…, matching TLSA 3 1 1; certificate valid to 2026-11-25T20:47:09Zcard_digest — cap-sha256 sWJzLIPAuM_xhwpvjtKYy3xJ6VI75YPZo6gxYFJ2xr0 matches the fetched bytes (sWJzLIPAuM_xhwpvjtKYy3xJ6VI75YPZo6gxYFJ2xr0)endpoint_in_zone — endpoint https://travel.agenthaven.dev/a2a is inside agenthaven.dev (POC profile, stricter than DNS-AID, ARD and A2A)dane_key_host — dns-aid.agenthaven.dev presents SPKI 3ff63922c2b33fdc…, matching TLSA 3 1 1; certificate valid to 2026-12-01T09:27:20Zrecord_signature — sig by kid dnsaid-2026-09 verifies; binds travel.agenthaven.dev → travel.agenthaven.dev:443 over a2a (the record names a2a; ok); svcb claim covers the wire params; expires 2026-12-13 (current); note: kid is a label, not the key's thumbprint (Ol3NxvkXhB-Q…)seller_instance — spiffe://agenthaven.dev/merchant/demo-travel-seller/y53CDyiqoPptlOkBPKGmxLzl7WcTDWMqII7yZtfPu2Y: SVID verifies against the bundle at https://travel.agenthaven.dev (trust domain agenthaven.dev), vouches for the instance key y53CDyiqoPpt… (same key), expires 2026-12-01ans_registration — _ans TXT present; badge https://transparency.ans.godaddy.com/v1/agents/9a311416-b877-4f0d-8ee5-1d63d047e82f; transparency receipt with Merkle proof (leaf 199068), naming travel.agenthaven.dev (this host)ucp_profile — https://travel.agenthaven.dev/.well-known/ucp: UCP 2026-08-25; dev.ucp.shopping over rest at https://travel.agenthaven.dev/ucp/v1 and mcp at https://travel.agenthaven.dev/ucp/mcp; capabilities dev.ucp.shopping.checkout 2026-08-25, dev.ucp.common.payment.ap2_mandate 2026-08-25, dev.ucp.shopping.catalog.search 2026-08-25, dev.ucp.shopping.catalog.lookup 2026-08-25; 1 key(s); handlers dev.agenthaven.payment.test_railucp_negotiation — intersection dev.ucp.shopping.checkout 2026-08-25, dev.ucp.common.payment.ap2_mandate 2026-08-25, dev.ucp.shopping.catalog.search 2026-08-25 (the highest mutual version of each, orphan extensions pruned)ucp_key — keys[] carries y53CDyiqoPpt…, the instance key the SVID vouches for: the same key signs quotes, receipts, the merchant authorization and every UCP responseucp_handler — dev.agenthaven.payment.test_rail (id test_rail): a card instrument whose credential is the closed AP2 Payment Mandate; rail stripe-testucp_issuers — the seller lists the authorities it accepts under its own namespace (https://sealedby.dev); https://sealedby.dev is among themThese are opinions, not verdicts. They are computed by somebody else from public signals and are shown next to the evidence, never in place of it.
integrity 46 · identity 40 · solvency 0 · behavior 0 · safety 0
Recommended profile READ_ONLY · risk factors: IDENTITY_CERT_DV_ONLY, INTEGRITY_DNSSEC_BROKEN, INTEGRITY_AGENT_NEW · the registry's own score of this agent is 57 · engine agent-trust-discovery 94b687b0b9907c083de9e86fc4a0874f4e5b0535 2026-09-04T21:16:56Z go1.26.5 linux/amd64 · reference/atd/buyer/evaluation.json
dnssecurity (integrity) raw 0, weight 1, unattested — no dnssec or caaagentage (integrity) raw 23, weight 1, unattested — 41 days old; ramp to 100 at 180versionstability (integrity) raw 0, weight 1, unattested — no version observationcertfingerprint.server (integrity) raw 100, weight 1, tl_attested — serverCert fingerprint matches sealed valuecertfingerprint.identity (integrity) raw 0, weight 1, unattested — no observationdnsrecord.ans (integrity) raw 100, weight 1, tl_attested — _ans TXT matches sealed valuednsrecord.ans-badge (integrity) raw 100, weight 1, tl_attested — _ans-badge TXT matches sealed valuecerttype (identity) raw 40, weight 1, unattested — DV certificate; raw 40What this engine does not measure:
This run verifies one seller. What the buyer bought from others is read against each one's own ledger and shown here, outside the verdict above.
seller.anciobanu.com: its own ledger could not be read. https://seller.anciobanu.com/ledger could not be read: [Errno -2] Name or service not known
seller.skybound-travel.com: its own ledger agrees. 21 transactions with seller.skybound-travel.com, 12 ended in a purchase, 10 of them before its ledger's first entry (2026-10-13T12:23:18.000Z), not compared; its ledger (2 entries) is a plain list, neither signed nor chained, read over the connection its DANE record pins — other/seller.skybound-travel.com/ledger.json
394f0ec476d149315a69ea7b7e7ecaeecf76d942c5458d7cda529443ad84234d075a3a1caabf159c92e892c5f458c1a3b32b0376c9625f5ea39b5fc9e3cd59dc