{
 "_rule": "the protocol adapts to the world; every standard here is USED, never duplicated; scanner detects drift; status words only PASS/PARTIAL/FAIL/NOT TESTED",
 "checked_at": "2026-09-04",
 "standards": [
  {
   "standard": "A2A",
   "version": "1.0",
   "last_checked": "2026-09-04",
   "status": "PASS - applicable mandatory tests",
   "used_features": [
    "Agent Card (protocolVersion 1.0, preferredTransport JSONRPC, securitySchemes, skills.tags)",
    "JSON-RPC message/send",
    "tasks/get (current state, empty history)",
    "tasks/cancel -> -32002 TaskNotCancelable (explicit)",
    "A2A-Version negotiation + echo"
   ],
   "deprecated_features": [
    "v0.x final:true boolean (removed in 1.0)"
   ],
   "mapping_version": "0.1",
   "conformance": "official a2aproject/a2a-tck commit 263b9cfa, MUST level, paced within the production rate policy, immutable build 13c4c24da407fbdc: 234/235 PASS, RAW 234 PASS / 1 FAIL; ADJUDICATED 235/235 implementation-conformant, 1 TCK_HARNESS_DEFECT_ADJUDICATED, upstream issue NOT_FOUND_AS_OF_2026-09-04 (CORE-SEND-003 jsonrpc), 0x429; proof /data/protocol_conformance_receipt.json and /data/p05_evidence_bundle.json",
   "migration_deadline": null,
   "source": "https://a2a-protocol.org/latest/specification/",
   "role": "agent<->agent transport; AstraNL adds principal/mandate/commitment/evidence",
   "public_claim": "A2A 1.0 - applicable mandatory compatibility tests passed (proof linked); this proves protocol compatibility, not adoption, demand or autonomous execution"
  },
  {
   "standard": "MCP",
   "version": "2026-07-28",
   "last_checked": "2026-08-27",
   "status": "PARTIAL",
   "used_features": [
    "Streamable HTTP",
    "stateless serving",
    "server/discover (shim)",
    "tools/list"
   ],
   "deprecated_features": [
    "HTTP+SSE (deprecated by spec; AstraNL sunset 2027-08-01)"
   ],
   "mapping_version": "0.1",
   "conformance": "served protocolVersion 2025-11-25 on SDK 1.27.0; full 2026-07-28 core NOT TESTED",
   "migration_deadline": "SDK release",
   "source": "https://blog.modelcontextprotocol.io/posts/2026-07-28/",
   "role": "agent<->tools transport"
  },
  {
   "standard": "W3C Verifiable Credentials",
   "version": "2.0",
   "last_checked": "2026-08-27",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.1",
   "conformance": "NOT TESTED",
   "source": "https://www.w3.org/TR/vc-data-model/",
   "role": "identity reference (issuer/holder/verifier); never monopolized"
  },
  {
   "standard": "EU Digital Identity Wallet (EUDI)",
   "version": "LSP 2026",
   "last_checked": "2026-08-27",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.1",
   "conformance": "NOT TESTED",
   "source": "https://digital-strategy.ec.europa.eu/en/policies/eudi-wallet-implementation",
   "role": "identity reference for NL/EU principals and executors"
  },
  {
   "standard": "W3C PROV",
   "version": "PROV-DM/PROV-O",
   "last_checked": "2026-08-27",
   "status": "PASS",
   "used_features": [
    "Agent/Activity/Entity",
    "actedOnBehalfOf",
    "used",
    "wasGeneratedBy"
   ],
   "mapping_version": "0.1",
   "conformance": "mapping published spec/prov-mapping.json",
   "source": "https://www.w3.org/TR/prov-dm/",
   "role": "provenance vocabulary"
  },
  {
   "standard": "AP2 (Agent Payments Protocol)",
   "version": "developer guide 2026",
   "last_checked": "2026-08-27",
   "status": "NOT TESTED",
   "used_features": [
    "typed mandates concept -> authority block"
   ],
   "mapping_version": "0.1",
   "conformance": "NOT TESTED",
   "source": "https://developers.googleblog.com/en/developers-guide-to-ai-agent-protocols/",
   "role": "agentic spending mandates; mapped where useful, not reimplemented"
  },
  {
   "standard": "UCP (Universal Commerce Protocol)",
   "version": "2026",
   "last_checked": "2026-08-27",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.1",
   "conformance": "NOT TESTED",
   "source": "https://developers.googleblog.com/under-the-hood-universal-commerce-protocol-ucp/",
   "role": "agent surface -> merchant checkout; no proprietary universal checkout"
  },
  {
   "standard": "OASIS UBL",
   "version": "2.3",
   "last_checked": "2026-08-27",
   "status": "PARTIAL",
   "used_features": [
    "Order",
    "OrderResponse (accept/reject/change)",
    "Invoice"
   ],
   "mapping_version": "0.1",
   "conformance": "adapter generates UBL Order XML; Peppol network delivery NOT TESTED (no access point contract)",
   "source": "https://docs.oasis-open.org/ubl/UBL-2.3.html",
   "role": "old-world B2B documents"
  },
  {
   "standard": "Peppol BIS Ordering",
   "version": "3",
   "last_checked": "2026-08-27",
   "status": "PARTIAL",
   "used_features": [
    "ProfileID urn:fdc:peppol.eu:poacc:bis:ordering:3",
    "CustomizationID urn:fdc:peppol.eu:poacc:trns:order:3",
    "OrderResponseCode AP/RE/CA (accept/reject/conditional)"
   ],
   "mapping_version": "0.1",
   "conformance": "document mapping only; access-point transmission NOT TESTED",
   "source": "https://docs.peppol.eu/poacc/upgrade-3/profiles/28-ordering/",
   "role": "buyer order -> seller acknowledge/accept/reject/change = contract formation"
  },
  {
   "standard": "GS1 EPCIS",
   "version": "2.0",
   "last_checked": "2026-08-27",
   "status": "PARTIAL",
   "used_features": [
    "ObjectEvent (OBSERVE)",
    "TransactionEvent (link to contract)",
    "JSON-LD",
    "CBV bizStep"
   ],
   "mapping_version": "0.1",
   "conformance": "adapter emits EPCIS 2.0 JSON-LD events from evidence; capture to an external repository NOT TESTED",
   "source": "https://ref.gs1.org/standards/epcis/2.0.0/",
   "role": "physical event vocabulary (what/when/where/why/how)"
  },
  {
   "standard": "VDA 5050",
   "version": "3.0 (2026-03-19)",
   "last_checked": "2026-08-27",
   "status": "PARTIAL",
   "used_features": [
    "order topic",
    "state topic actionStates WAITING/INITIALIZING/RUNNING/FINISHED/FAILED",
    "instantActions cancelOrder",
    "MQTT QoS 0"
   ],
   "mapping_version": "0.1",
   "conformance": "outcome->order mapping only; no fleet/broker connected -> NOT TESTED",
   "source": "https://github.com/VDA5050/VDA5050/blob/main/VDA5050_EN.md",
   "role": "robot fleet interface; coordination sets outcome, fleet owns motion/safety"
  },
  {
   "standard": "SEPA Instant / Regulation (EU) 2024/886",
   "version": "2024/886",
   "last_checked": "2026-08-27",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.1",
   "conformance": "NOT TESTED",
   "source": "https://eur-lex.europa.eu/eli/reg/2024/886/oj/eng",
   "role": "payment finality rail (via regulated PSP); protocol coordinates conditions, is not a rail"
  },
  {
   "standard": "Stripe Connect (destination charges, application fee, manual capture, payouts)",
   "version": "API 2026",
   "last_checked": "2026-08-26",
   "status": "PASS",
   "used_features": [
    "Checkout Session",
    "payment_intent_data.on_behalf_of",
    "transfer_data.destination",
    "application_fee_amount",
    "capture_method manual",
    "payouts read on connected account"
   ],
   "mapping_version": "AH-DEST-1",
   "conformance": "live destination-hold creation verified 2026-08-26 (tests/agent_hands_negative.py); capture + payout NOT TESTED with a real order",
   "source": "https://docs.stripe.com/connect/manual-payouts",
   "role": "settlement condition adapter (PAYMENT_SERVICE)"
  },
  {
   "standard": "RFC 9162 Certificate Transparency",
   "version": "2021",
   "last_checked": "2026-08-27",
   "status": "PARTIAL",
   "used_features": [
    "append-only Merkle log",
    "signed tree head",
    "inclusion proof",
    "consistency proof",
    "off-host STH mirror (witness)"
   ],
   "deprecated_features": [],
   "mapping_version": "AstraLock",
   "conformance": "single operator + PUBLIC MIRROR WITNESS since 2026-08-27 (every STH committed to github.com/ASTRANL/astranl-mcp/astralock/); cosigning independent witness NOT YET",
   "source": "https://www.rfc-editor.org/rfc/rfc9162.html",
   "role": "transparency log primitives"
  },
  {
   "standard": "EU AI Act Art. 50",
   "version": "consolidated 2026-07-27",
   "last_checked": "2026-08-27",
   "status": "PARTIAL",
   "used_features": [
    "AI interaction disclosure in human interfaces"
   ],
   "mapping_version": "0.1",
   "conformance": "legal review NOT DONE",
   "source": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1689-20260727",
   "role": "AI transparency obligations"
  },
  {
   "standard": "NIST AI RMF / SSDF",
   "version": "AI RMF 1.0 / SP 800-218",
   "last_checked": "2026-08-27",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.1",
   "conformance": "NOT TESTED",
   "source": "https://csrc.nist.gov/pubs/sp/800/218/final",
   "role": "security lifecycle frame"
  },
  {
   "standard": "OpenAPI",
   "version": "3.1.0",
   "last_checked": "2026-09-04",
   "status": "PARTIAL",
   "used_features": [
    "public tier /openapi.json (allowlist-bounded, fail-closed)",
    "small importable /agent-hands/openapi.json",
    "x-astranl principal/scope/side-effect/idempotency annotations"
   ],
   "mapping_version": "0.1",
   "conformance": "served and parsed; not validated against an external OpenAPI 3.1 validator; 295 anonymous writes documented as non-idempotent (idempotency debt C133-11)",
   "source": "https://spec.openapis.org/oas/v3.1.0",
   "role": "REST plane contract"
  },
  {
   "standard": "OAuth 2.0 / OIDC",
   "version": "RFC 6749 / OIDC Core 1.0",
   "last_checked": "2026-09-04",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.0",
   "conformance": "NOT TESTED - current partner auth is API key (X-Agent-Key) and per-task key",
   "source": "https://openid.net/specs/openid-connect-core-1_0.html",
   "role": "enterprise identity for partners (planned adapter)"
  },
  {
   "standard": "x402 / Stripe Machine Payments Protocol",
   "version": "x402 2026 / MPP 2026-03-18",
   "last_checked": "2026-09-04",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.0",
   "conformance": "NOT TESTED - machine pay-per-use kept separate from the 1% real-world coordination fee by policy",
   "source": "https://x402.org/",
   "role": "machine micro-payments for paid capabilities (planned, only where lawful and economic)"
  },
  {
   "standard": "Anthropic Model Hardware Standard (MHS)",
   "version": "research preview 2026-08-27",
   "last_checked": "2026-09-04",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.0",
   "conformance": "NOT TESTED - adapter contract above robot passport/router not built; AstraNL never controls safety layers",
   "source": "https://www.anthropic.com/news/model-hardware-standard-research-preview",
   "role": "model-to-hardware adapter (planned)"
  },
  {
   "standard": "OPC UA",
   "version": "IEC 62541",
   "last_checked": "2026-09-04",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.0",
   "conformance": "NOT TESTED - no industrial adapter exists; catalogue records are not controllable machines",
   "source": "https://opcfoundation.org/",
   "role": "industrial semantic interoperability (planned adapter)"
  },
  {
   "standard": "ROS 2",
   "version": "Kilted",
   "last_checked": "2026-09-04",
   "status": "NOT TESTED",
   "used_features": [],
   "mapping_version": "0.0",
   "conformance": "NOT TESTED - no robot adapter exists; operator-backed availability is 0",
   "source": "https://docs.ros.org/en/ros2_documentation/kilted/The-ROS2-Project.html",
   "role": "robotics adapter (planned)"
  }
 ],
 "_decision_133": "entries added 2026-09-04 with honest NOT TESTED / PARTIAL states; a planned adapter is never presented as live"
}