{ "profiles": [ { "name": "mcp-failure-semantics-v1", "version": 1, "handler": "deterministic", "handlerVersion": 1, "inputSchema": { "type": "object", "additionalProperties": false, "required": [ "target", "inputs" ], "properties": { "target": { "type": "object", "additionalProperties": false, "required": [ "endpoint", "transport" ], "properties": { "endpoint": { "type": "string", "pattern": "^(?:https|wss)://", "maxLength": 2048 }, "transport": { "type": "string", "enum": [ "streamable_http", "websocket" ] }, "auth": { "type": "object", "additionalProperties": false, "required": [ "scheme" ], "properties": { "scheme": { "type": "string", "enum": [ "bearer" ] }, "credentialRef": { "type": "string", "minLength": 1, "maxLength": 200 } } } } }, "inputs": { "type": "object", "additionalProperties": false, "properties": {} } } }, "successCriteria": { "statement": "The declared endpoint passed each named mcp-failure-semantics-v1@1 check during one bounded observation. This is not a certification or blanket security claim.", "requiredEvidence": [ "mcp_auth_boundary_pass", "mcp_timeout_recovery_pass", "mcp_tool_schema_stability_pass", "mcp_destructive_action_safety_pass", "mcp_error_shape_conformance_pass" ] }, "limits": { "timeoutMs": 30000, "sizeBytes": 65536, "cpuLimit": 1, "memoryMb": 256, "processLimit": 64, "temporaryStorageMb": 16, "outputLimitBytes": 524288 }, "price": { "amount": "5", "amountRaw": "5000000", "asset": "USDC", "decimals": 6, "network": "eip155:8453", "billingRule": "inconclusive_not_billed" }, "replayFixtureRef": "services/__fixtures__/mcp-failure-semantics-v1-known-good.json", "status": "published", "verifierConfig": { "version": 1, "handler": "deterministic", "expectedOutputs": [ "mcp_auth_boundary_pass", "mcp_timeout_recovery_pass", "mcp_tool_schema_stability_pass", "mcp_destructive_action_safety_pass", "mcp_error_shape_conformance_pass" ], "matchMode": "contains_all" }, "workedExample": { "request": { "profile": "mcp-failure-semantics-v1", "profileVersion": 1, "target": { "endpoint": "https://example.invalid/mcp", "transport": "streamable_http" }, "inputs": {} }, "notes": [ "Replace target.endpoint with the reachable MCP endpoint to observe.", "For a bearer-protected endpoint, add target.auth with scheme bearer and send the credential separately in Verification-Target-Authorization; never put a secret in the request body." ] }, "ref": "mcp-failure-semantics-v1@1", "availability": { "status": "available" } }, { "name": "git-patch-tests-v1", "version": 1, "handler": "deterministic", "handlerVersion": 1, "inputSchema": { "type": "object", "additionalProperties": false, "required": [ "target", "inputs" ], "properties": { "target": { "type": "object", "additionalProperties": false, "required": [ "repository", "commit" ], "properties": { "repository": { "type": "string", "minLength": 1, "maxLength": 500 }, "commit": { "type": "string", "pattern": "^[a-f0-9]{40}$" } } }, "inputs": { "type": "object", "additionalProperties": false, "required": [ "gitBundle", "patch", "testCommand" ], "properties": { "gitBundle": { "type": "object", "additionalProperties": false, "required": [ "sha256", "bytes", "locator", "format" ], "properties": { "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "bytes": { "type": "integer", "minimum": 1 }, "locator": { "type": "object", "additionalProperties": false, "required": [ "kind", "url" ], "properties": { "kind": { "type": "string", "enum": [ "https" ] }, "url": { "type": "string", "pattern": "^https://" } } }, "format": { "type": "string", "enum": [ "git-bundle" ] } } }, "patch": { "type": "object", "additionalProperties": false, "required": [ "sha256", "bytes", "locator", "format" ], "properties": { "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "bytes": { "type": "integer", "minimum": 1 }, "locator": { "type": "object", "additionalProperties": false, "required": [ "kind", "url" ], "properties": { "kind": { "type": "string", "enum": [ "https" ] }, "url": { "type": "string", "pattern": "^https://" } } }, "format": { "type": "string", "enum": [ "file" ] } } }, "testCommand": { "type": "array", "minItems": 1, "maxItems": 32, "items": { "type": "string", "minLength": 1, "maxLength": 500 } }, "workingDirectory": { "type": "string", "default": "." }, "allowedPaths": { "type": "array", "items": { "type": "string", "minLength": 1 }, "default": [ "**" ] }, "protectedPaths": { "type": "array", "items": { "type": "string", "minLength": 1 }, "default": [] }, "maximumChangedFiles": { "type": "integer", "minimum": 1, "maximum": 500, "default": 100 } } } } }, "successCriteria": { "statement": "The pinned source fails the requested test before the patch and passes it after the patch, under the bounded offline Witness runner.", "requiredEvidence": [ "source_binding_verified", "tests_passed" ] }, "limits": { "timeoutMs": 120000, "sizeBytes": 26214400, "cpuLimit": 2, "memoryMb": 4096, "processLimit": 512, "temporaryStorageMb": 1024, "outputLimitBytes": 10485760 }, "price": { "amount": "5", "amountRaw": "5000000", "asset": "USDC", "decimals": 6, "network": "eip155:8453", "billingRule": "inconclusive_not_billed" }, "replayFixtureRef": "services/__fixtures__/verifier-replay/deterministic/v1/release-readiness.json", "status": "published", "verifierConfig": { "version": 1, "handler": "deterministic", "expectedOutputs": [ "source_binding_verified", "tests_passed" ], "matchMode": "contains_all" }, "workedExample": { "request": { "profile": "git-patch-tests-v1", "profileVersion": 1, "target": { "repository": "https://example.invalid/repository.git", "commit": "0000000000000000000000000000000000000000" }, "inputs": { "gitBundle": { "sha256": "1111111111111111111111111111111111111111111111111111111111111111", "bytes": 123456, "locator": { "kind": "https", "url": "https://example.invalid/repository.bundle" }, "format": "git-bundle" }, "patch": { "sha256": "2222222222222222222222222222222222222222222222222222222222222222", "bytes": 1234, "locator": { "kind": "https", "url": "https://example.invalid/candidate.patch" }, "format": "file" }, "testCommand": [ "npm", "test" ], "workingDirectory": ".", "allowedPaths": [ "**" ], "protectedPaths": [], "maximumChangedFiles": 100 } }, "notes": [ "Replace target.commit with the pinned <40-hex> commit and each artifact sha256 with its <64-hex> digest.", "The git bundle must advertise exactly one head. Create and inspect it as a binary git-bundle artifact before publishing it.", "inputs.gitBundle.format is git-bundle; inputs.patch.format is file.", "Artifacts are fetched from locator.url. Each URL must be reachable by the runner, byte-stable, and binary-safe; a text-only host can corrupt a git bundle.", "inputs.testCommand is an array of the executable followed by its arguments, not a shell command string." ] }, "ref": "git-patch-tests-v1@1", "availability": { "status": "available" } }, { "name": "structured-output-evidence-v1", "version": 1, "handler": "deterministic", "handlerVersion": 1, "inputSchema": { "type": "object", "additionalProperties": false, "required": [ "target", "inputs" ], "properties": { "target": { "type": "object", "additionalProperties": false, "required": [ "output", "schema", "sources" ], "properties": { "output": { "type": "object", "additionalProperties": false, "required": [ "sha256", "bytes", "locator", "format" ], "properties": { "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "bytes": { "type": "integer", "minimum": 1 }, "locator": { "type": "object", "additionalProperties": false, "required": [ "kind", "url" ], "properties": { "kind": { "type": "string", "enum": [ "https" ] }, "url": { "type": "string", "pattern": "^https://" } } }, "format": { "type": "string", "enum": [ "json" ] } } }, "schema": { "type": "object", "additionalProperties": false, "required": [ "sha256", "bytes", "locator", "format" ], "properties": { "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "bytes": { "type": "integer", "minimum": 1 }, "locator": { "type": "object", "additionalProperties": false, "required": [ "kind", "url" ], "properties": { "kind": { "type": "string", "enum": [ "https" ] }, "url": { "type": "string", "pattern": "^https://" } } }, "format": { "type": "string", "enum": [ "json" ] } } }, "sources": { "type": "array", "minItems": 1, "maxItems": 16, "items": { "type": "object", "additionalProperties": false, "required": [ "sha256", "bytes", "locator", "format" ], "properties": { "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "bytes": { "type": "integer", "minimum": 1 }, "locator": { "type": "object", "additionalProperties": false, "required": [ "kind", "url" ], "properties": { "kind": { "type": "string", "enum": [ "https" ] }, "url": { "type": "string", "pattern": "^https://" } } }, "format": { "type": "string", "enum": [ "text", "markdown", "json" ] } } } } } }, "inputs": { "type": "object", "additionalProperties": false, "properties": { "citationsPointer": { "type": "string", "maxLength": 256, "pattern": "^(?:|(?:/(?:[^~/]|~[01])*)+)$" } } } } }, "successCriteria": { "statement": "The output document parsed as JSON, validated against the declared schema, and every cited quote appears verbatim (whitespace-normalized) in its referenced source artifact during one bounded check. Verbatim presence is not an assessment that the sources semantically support the claims, and this is not a certification.", "requiredEvidence": [ "structured_output_integrity_pass", "structured_schema_valid_pass", "structured_schema_conformance_pass", "structured_citation_resolution_pass", "structured_quote_support_pass" ] }, "limits": { "timeoutMs": 30000, "sizeBytes": 8388608, "outputSizeBytes": 1048576, "schemaSizeBytes": 262144, "sourceSizeBytes": 2097152, "schemaDepth": 32, "cpuLimit": 1, "memoryMb": 256, "processLimit": 64, "temporaryStorageMb": 32, "outputLimitBytes": 524288 }, "price": { "amount": "5", "amountRaw": "5000000", "asset": "USDC", "decimals": 6, "network": "eip155:8453", "billingRule": "inconclusive_not_billed" }, "replayFixtureRef": "services/__fixtures__/structured-output-evidence-v1-known-good.json", "status": "published", "verifierConfig": { "version": 1, "handler": "deterministic", "expectedOutputs": [ "structured_output_integrity_pass", "structured_schema_valid_pass", "structured_schema_conformance_pass", "structured_citation_resolution_pass", "structured_quote_support_pass" ], "matchMode": "contains_all", "citationContract": { "pointerSyntax": "RFC 6901", "defaultPointer": "/citations", "array": "non_empty", "entry": { "source": "zero_based_source_index", "quote": "string_1_to_2048_characters" } }, "quoteNormalization": { "whitespace": "trim_then_collapse_runs_to_single_ascii_space", "caseFolding": false, "fuzzyMatching": false } }, "workedExample": { "request": { "profile": "structured-output-evidence-v1", "profileVersion": 1, "target": { "output": { "sha256": "3333333333333333333333333333333333333333333333333333333333333333", "bytes": 2048, "locator": { "kind": "https", "url": "https://example.invalid/output.json" }, "format": "json" }, "schema": { "sha256": "4444444444444444444444444444444444444444444444444444444444444444", "bytes": 1024, "locator": { "kind": "https", "url": "https://example.invalid/schema.json" }, "format": "json" }, "sources": [ { "sha256": "5555555555555555555555555555555555555555555555555555555555555555", "bytes": 4096, "locator": { "kind": "https", "url": "https://example.invalid/source-1.txt" }, "format": "text" }, { "sha256": "6666666666666666666666666666666666666666666666666666666666666666", "bytes": 4096, "locator": { "kind": "https", "url": "https://example.invalid/source-2.md" }, "format": "markdown" } ] }, "inputs": { "citationsPointer": "/citations" } }, "notes": [ "Replace each artifact sha256 with its <64-hex> digest and set bytes to the exact byte length.", "Artifacts are fetched from locator.url. Each URL must be reachable by the runner, byte-stable, and binary-safe.", "The default citationsPointer is /citations. It uses RFC 6901 and must resolve to a non-empty citations array." ] }, "ref": "structured-output-evidence-v1@1", "availability": { "status": "available" } } ] }