5 of 9 dimensions PROVED

PROVED Discoverymandatory

• PASS record_validated — SVCB at travel.agenthaven.dev: RRSIG validated locally against the zone DNSKEY, DS matched at the parent; chain above the zone by the resolver AD flag (True)
• PASS card_url_declared — key65400 = https://travel.agenthaven.dev/.well-known/agent-card.json
• PASS dane_endpoint — travel.agenthaven.dev presents SPKI 3e974da4286b4a05… matching TLSA 3 1 1 from an authenticated answer; certificate valid to 2026-11-25T20:47:09Z
• PASS card_digest — cap-sha256 MxWh6g4dj_u0ToZ_0Czb71ek_NNgBclqYL2rdzyPMFg vs fetched MxWh6g4dj_u0ToZ_0Czb71ek_NNgBclqYL2rdzyPMFg
• PASS endpoint_in_zone — https://travel.agenthaven.dev/a2a inside agenthaven.dev (POC profile)

Evidence: dns/travel.agenthaven.dev.SVCB.wire · seller/agent-card.json

PROVED Publisher controlmandatory

• PASS dane_key_host — dns-aid.agenthaven.dev presents SPKI 3ff63922c2b33fdc… matching TLSA 3 1 1; valid to 2026-12-01T09:27:20Z
• PASS record_signature — sig kid dnsaid-2026-09 verifies; binding ok; svcb claim covers the wire; expires 2026-12-06; kid is a label, thumbprint Ol3NxvkXhB-Q…

Evidence: dns/travel.agenthaven.dev.SVCB.txt · seller/dns-aid-jwks.json

PROVED Registered identitymandatory

• PASS ans_records — _ans present; badge https://transparency.ans.godaddy.com/v1/agents/9a311416-b877-4f0d-8ee5-1d63d047e82f
• PASS ans_receipt — transparency receipt 200, Merkle proof leaf 199068
• PASS ans_status — registry entry 200: lifecycle {"status": "ACTIVE"}; expires 2026-11-25T20:47:09Z; trust score 55 (a third-party opinion, shown as one)

Evidence: seller/_ans-badge.txt · seller/_ans.txt · seller/ans-registry-entry.json · seller/ans-transparency-receipt.json

PROVED Instancemandatory

• PASS seller_svid — spiffe://agenthaven.dev/merchant/demo-travel-seller/y53CDyiqoPptlOkBPKGmxLzl7WcTDWMqII7yZtfPu2Y: SVID verifies against the bundle (trust domain agenthaven.dev); vouches for the instance key (same); expires 2026-12-01

Evidence: seller/spiffe-bundle.json · seller/spiffe-svid.json

NOT_TESTED Mandatemandatory

Not tested — the external mandate path needs an authority; the seller's refusals on the self-issued path are in its ledger but not replayed by this verifier yet

NOT_TESTED Paymentmandatory

Not tested — simulated rail in this run; Stripe test mode confirmation needs a read key

PROVED Attributionmandatory

• PASS seller_ledger — 54 entries, head 0bfe1d2c1f8d…, 50 attributed, 4 unattributed, 0 foreign signer, 0 forged, 0 unverifiable
• PASS checkout_closed — 2 intent entries closed by checkout.completed, 0 not closed since the terminal entry exists, 4 predate it; settlement simulation: simulated; completions claiming a charge: 0
• PASS checkpoints — 2 checkpoint(s) signed by the instance, heads match the chain; 0 sealed at no witness; 2 unsealed

Evidence: seller/checkpoints.json · seller/ledger.json (as a page)

NOT_TESTED Revocationmandatory

Not tested — no authority to revoke at, no ANS revocation mechanics yet

FAILED Roguemandatory

Why — refusals_marked: header_forbidden refusals written since this run began: 0; carrying this run's claimed_exercise: none; unmarked: 0 (the seller writes at most two per unverified source per minute)

• PASS rogue_R-21 — alg: none: 401 header_forbidden (expected header_forbidden)
• PASS rogue_R-22 — HS256 with the public key as the secret: 401 header_forbidden (expected header_forbidden)
• PASS rogue_R-23 — jku pointing at a rogue-controlled key set: 401 header_forbidden (expected header_forbidden)
• PASS rogue_no_intent — 10 correlation ids refused as header_forbidden in the seller ledger; PaymentIntents under them: 0
• FAIL refusals_marked — header_forbidden refusals written since this run began: 0; carrying this run's claimed_exercise: none; unmarked: 0 (the seller writes at most two per unverified source per minute)
• PASS refusals_attributed — 22 refusals in the seller ledger before this run; 10 carry claimed_exercise, 12 do not (customers, or written before 2026-09-09). The mark is the caller's claim, recorded by the seller and read by no check.

Evidence: rogue/R-21.response.json · rogue/R-22.response.json · rogue/R-23.response.json · seller/ledger-after-rogue.json · seller/ledger.json (as a page)