{"agent_host":"sakura.agent-desk.us","generated_at":"2026-09-20T05:39:36.418048+00:00","environment":"production","verified":false,"decision":"FAIL","gates":[{"gate":1,"title":"Reachable agent endpoint (A2A + MCP)","status":"PASS","detail":"A2A: card valid; MCP: initialize + tools/list succeeded","evidence":{"agent_card":"https://sakura.agent-desk.us/.well-known/agent-card.json","card_sha256":"35e3bf9fa1d5ee97c60ecc63083d267b8736b89fa214ed6a43b2a8bfbc0768f2","skills":["get_business_info","get_hours","get_menu_or_services","place_order","make_booking","get_confirmation"],"mcp_url":"https://sakura.agent-desk.us/mcp","mcp_tools":["get_business_info","get_hours","get_menu_or_services","place_order","make_booking","get_confirmation"]}},{"gate":2,"title":"Public HTTPS","status":"PASS","detail":"hostname and chain verified against the public WebPKI","evidence":{"tls_version":"TLSv1.3","leaf_sha256":"9e82edadcd51b582cb6421d699342ef9f47afd27ad4bb443d2d4e6f93c0f67d7","issuer":"CN=YE1,O=Let's Encrypt,C=US","not_after":"2026-12-19T02:44:17+00:00"}},{"gate":3,"title":"Owned MLH domain","status":"INCOMPLETE","detail":"host under BASE_DOMAIN serves valid public TLS; DNS control is proven once ANS reports ACTIVE","evidence":{"base_domain":"agent-desk.us","agent_host":"sakura.agent-desk.us"}},{"gate":4,"title":"Production ANS registration ACTIVE","status":"INCOMPLETE","detail":"no ANS registration found by the live lookup","evidence":{}},{"gate":5,"title":"Verification evidence","status":"FAIL","detail":"FAIL: ANS lifecycle is ACTIVE (live) — no ANS registration found for this host; INCOMPLETE: Metadata signature / hash — neither ANS nor the card provides a hash/signature to verify","evidence":{"checks_passed":4,"checks_total":6}}],"verification":{"agent_host":"sakura.agent-desk.us","generated_at":"2026-09-20T05:39:36.418048Z","ans":{"agent_id":null,"ans_name":null,"status":null,"environment":null,"declared_endpoints":[],"checked_at":null,"source":""},"endpoint_checks":[{"protocol":"A2A","url":"https://sakura.agent-desk.us/a2a","status":"PASS","detail":"card valid"},{"protocol":"MCP","url":"https://sakura.agent-desk.us/mcp","status":"PASS","detail":"initialize + tools/list succeeded"}],"identity_certificate":null,"tls":{"status":"PASS","detail":"hostname and chain verified against the public WebPKI","version":"TLSv1.3","cipher":"TLS_AES_128_GCM_SHA256","hostname_verified":true,"leaf_sha256":"9e82edadcd51b582cb6421d699342ef9f47afd27ad4bb443d2d4e6f93c0f67d7","issuer":"CN=YE1,O=Let's Encrypt,C=US","subject":"CN=sakura.agent-desk.us","san":["DNS:sakura.agent-desk.us"],"not_after":"2026-12-19T02:44:17Z"},"a2a":{"status":"PASS","detail":"card valid","card_url":"https://sakura.agent-desk.us/.well-known/agent-card.json","card_valid":true,"card_sha256":"35e3bf9fa1d5ee97c60ecc63083d267b8736b89fa214ed6a43b2a8bfbc0768f2","name":"Sakura Ramen Bar","version":"1.0.0","protocol_versions":["1.0"],"skills":["get_business_info","get_hours","get_menu_or_services","place_order","make_booking","get_confirmation"],"rpc_url":"https://sakura.agent-desk.us/a2a","signed":false,"drift":false},"mcp":{"status":"PASS","detail":"initialize + tools/list succeeded","url":"https://sakura.agent-desk.us/mcp","handshake":true,"protocol_version":"2025-03-26","server_name":"agent-desk-business-agent","tools":["get_business_info","get_hours","get_menu_or_services","place_order","make_booking","get_confirmation"],"probe_tool":"","probe_ok":false},"checks":[{"id":"ans_status_active","label":"ANS lifecycle is ACTIVE (live)","status":"FAIL","detail":"no ANS registration found for this host","mandatory":true,"evidence":{}},{"id":"canonical_agent_host","label":"Canonical agent host","status":"PASS","detail":"host is a canonical public DNS name","mandatory":true,"evidence":{"observed":"sakura.agent-desk.us"}},{"id":"endpoint_network_policy","label":"Endpoints pass outbound network policy","status":"PASS","detail":"https/443, public DNS name, every resolved address globally routable","mandatory":true,"evidence":{}},{"id":"metadata_fetch","label":"Protocol metadata fetched within limits","status":"PASS","detail":"fetched with time/size/content-type limits","mandatory":true,"evidence":{}},{"id":"metadata_schema","label":"Metadata parses and matches the registration","status":"PASS","detail":"parsed as data; interface matches the registration","mandatory":true,"evidence":{}},{"id":"metadata_integrity","label":"Metadata signature / hash","status":"INCOMPLETE","detail":"neither ANS nor the card provides a hash/signature to verify","mandatory":false,"evidence":{}}],"verified":false,"decision":"FAIL","reasons":["FAIL: ANS lifecycle is ACTIVE (live) — no ANS registration found for this host","INCOMPLETE: Metadata signature / hash — neither ANS nor the card provides a hash/signature to verify"]},"notes":["Statuses are derived from live checks only; INCOMPLETE means 'could not be proven', never 'assumed fine'.","An ANS identity identifies an agent; it does not make the agent's output trusted."],"cached":false}