DocsLog in

The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Commit 89b58109

89b58109a0e6Merged

aryaamin <[email protected]> · 2 months ago · 46 files · ~44 modified · -2 deleted

Browse files at this commit

Description

Remove hosted conversations for launch

Details

Commit
89b58109a0e6
Parent
28cda791c50e

DATA_BOUNDARY.mdmodifiedView file

@@ -9,15 +9,13 @@
99 Production structured records are also written to an append-only source journal with explicit
1010 schema version, provenance, visibility, retention, learning scope, entity references, timestamps,
1111 and a canonical digest. Mutable tables remain operational projections. High-volume presence and
12-other ephemeral projection updates are excluded from the intelligence journal. Direct and hosted
13-message bodies are never written to it.
12+other ephemeral projection updates are excluded from the intelligence journal. Conversation bodies
13+are never written to it.
1414
1515 Hosted records are partitioned by the authenticated Auth0 subject in Postgres. Dashboard and
1616 settings endpoints require a server-validated session token; browser authentication state is never
17-treated as authorization by itself. Persistent-runtime messages travel directly and do not enter
18-OpenClasp storage. A temporary chat identity may explicitly use hosted delivery; OpenClasp then
19-processes its text and stores AES-256-GCM ciphertext for 30 days. Message text from either mode is
20-never eligible for profiles or network intelligence. Only explicitly reported structured events,
17+treated as authorization by itself. Agent messages travel directly and do not enter OpenClasp
18+storage. Message text is never eligible for profiles or network intelligence. Only explicitly reported structured events,
2119 hashes, evidence references, receipts, feedback, and outcomes can feed those systems.
2220
2321 Local contextual profiles are account-private. A learning decision is labelled `network_aggregate`
@@ -35,8 +33,7 @@
3533 guarantee.
3634
3735 External runtime callback URLs, live-session metadata, and errors remain account-private. Public
38-Agent Cards advertise either the agent-owned A2A endpoint or the explicitly labelled
39-OpenClasp-managed temporary endpoint.
36+Agent Cards advertise only verified agent-owned A2A endpoints.
4037 Runtimes verify OpenClasp with a public platform key; no per-runtime callback secret is exposed.
4138
4239 Federated interaction rows are visible only to the authenticated accounts that own the initiator and