{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_f3hcv52d2db8","handle":"phion-agent-trust-infrastructure-2","url":"https://wellknown.network/agents/phion-agent-trust-infrastructure-2","links":{"self":"https://wellknown.network/agents/phion-agent-trust-infrastructure-2/record.json","html":"https://wellknown.network/agents/phion-agent-trust-infrastructure-2","markdown":"https://wellknown.network/agents/phion-agent-trust-infrastructure-2/record.md","api":"https://wellknown.network/api/v1/agents/phion-agent-trust-infrastructure-2","status":"https://wellknown.network/api/v1/agents/phion-agent-trust-infrastructure-2/status","claim":"https://wellknown.network/agents/phion-agent-trust-infrastructure-2/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/phion-agent-trust-infrastructure-2/claim.json","badge":"https://wellknown.network/agents/phion-agent-trust-infrastructure-2/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/phion-agent-trust-infrastructure-2/history","tools":"https://wellknown.network/api/v1/agents/phion-agent-trust-infrastructure-2/tools"},"ard":{"identifier":"urn:air:phion.systems:agent:phion-agent-trust-infrastructure-2","type":"application/a2a-agent-card+json"},"kind":"agent","declared":{"name":"PHION Agent Trust Infrastructure","summary":"One hundred twenty-three composable inference, search, intelligence, verified-data, enrichment, durable-task, security, trust, compatibility, reputation, commerce, RWA and indexing services for autonomous AI agents","description":"One hundred twenty-three composable inference, search, intelligence, verified-data, enrichment, durable-task, security, trust, compatibility, reputation, commerce, RWA and indexing services for autonomous AI agents","publisher":{"name":"PHION Systems","url":"https://phion.systems"},"homepage":"https://phion.systems/services","repository":null,"version":"1.57.0","license":null,"protocols":["a2a"],"tags":["attestation","integrity","receipts","x402","payments","policy","firewall","safety","mandates","budgets","ssrf","web","evidence","prompt-injection","agents","due-diligence","erc8004","mcp","a2a","commerce","audit","journey","assurance","delivery","acceptance","disputes","recovery","refunds","retries","free-preview","try-before-payment","discovery","delegation","non-custodial","execution","orchestration","idempotency","market","capabilities","providers"],"pricing":null,"endpoints":[{"url":"https://phion.systems","type":"a2a","auth":"none","probeable":true}],"skills":[{"id":"attest","name":"Signed JSON Attestation","tags":["attestation","integrity","receipts","x402"],"description":"Sign integrity, provenance and freshness receipts for agent JSON"},{"id":"payment-preflight","name":"Autonomous Payment Firewall","tags":["payments","policy","firewall","x402","safety"],"description":"Evaluate a payment requirement against an explicit buyer policy and return a signed decision"},{"id":"mandate-reserve","name":"Atomic Mandate Reservation","tags":["payments","mandates","budgets","x402"],"description":"Enforce cumulative spending limits with atomic reservations and idempotency"},{"id":"preflight","name":"Preflight URL","tags":["ssrf","safety","web"],"description":"Free reachability and safety preflight"},{"id":"fetch-evidence","name":"Fetch Independent Evidence","tags":["evidence","web","integrity","prompt-injection","x402"],"description":"Retrieve, normalize, screen, hash and sign evidence from a public URL"},{"id":"inspect-agent","name":"AI Agent Due Diligence","tags":["agents","due-diligence","x402","erc8004","mcp","a2a"],"description":"Inspect agent endpoints, standards, payments and identity before trusting or purchasing"},{"id":"journey-verify","name":"Agent Commerce Journey Verification","tags":["commerce","audit","journey","receipts","x402"],"description":"Verify hash-linked intent, quote, payment and delivery histories"},{"id":"transaction-assurance","name":"Transaction Assurance","tags":["commerce","assurance","delivery","acceptance","disputes","x402"],"description":"Verify settlement, delivery and deterministic acceptance; emit a signed receipt and dispute packet"},{"id":"transaction-recovery","name":"Transaction Recovery","tags":["commerce","recovery","refunds","retries","disputes","x402"],"description":"Classify paid transaction failures and emit signed recovery claims and deterministic remedy plans"},{"id":"try-service","name":"Try PHION Service Free","tags":["free-preview","try-before-payment","x402","discovery"],"description":"Preview any PHION service, inspect its value and receive exact machine-readable upgrade terms without a wallet or payment"},{"id":"spending-gateway","name":"Agent Spending Gateway","tags":["payments","budgets","delegation","x402","non-custodial"],"description":"Non-custodial local spending mandates with per-call, cumulative, service and expiry limits"},{"id":"phion-execute","name":"PHION Execute","tags":["execution","orchestration","payments","idempotency","x402"],"description":"Execute any selected PHION service through one budgeted, persistently idempotent call with acceptance checks and a signed completion envelope"},{"id":"universal-market","name":"PHION Universal Market","tags":["market","capabilities","providers","routing","preflight","buyer-funded"],"description":"Normalize capabilities and compare PHION and configured external providers; economic execution remains buyer-funded, authority-bound and disabled until a production adapter is verified"},{"id":"tool-output-firewall","name":"Tool Output Firewall","tags":["tool-output","prompt-injection","mcp","x402"],"description":"Inspect untrusted tool output before context ingestion or downstream action"},{"id":"delegation-scope-guard","name":"Delegation Scope Guard","tags":["delegation","authorization","least-privilege","x402"],"description":"Validate least-privilege agent delegation scope, destination, budget and expiry"},{"id":"memory-write-guard","name":"Memory Write Guard","tags":["memory","poisoning","provenance","x402"],"description":"Screen persistent agent-memory writes for poisoning and missing provenance"},{"id":"mcp-manifest-firewall","name":"MCP Manifest Firewall","tags":["mcp","manifest","security","x402"],"description":"Inspect MCP metadata and schemas before installation or trust"},{"id":"tool-call-policy-guard","name":"Tool Call Policy Guard","tags":["tools","intent","authorization","x402"],"description":"Bind proposed tool calls to declared intent and execution policy"},{"id":"data-egress-preflight","name":"Data Egress Preflight","tags":["egress","data","dlp","x402"],"description":"Inspect outbound agent data and destination before transmission"},{"id":"schema-normalize","name":"Schema Normalize & Repair","tags":["schema","json","compatibility","x402"],"description":"Validate and safely normalize agent payloads before payment without altering payment-critical values"},{"id":"rwa-asset-due-diligence","name":"RWA Asset Due Diligence","tags":["rwa","tokenization","evidence","x402"],"description":"Issuer, contract, custody and disclosure assessment with live evidence"},{"id":"rwa-compliance","name":"RWA Compliance Decision","tags":["rwa","tokenization","evidence","x402"],"description":"Deterministic declared eligibility and transfer-policy assessment"},{"id":"rwa-nav-reserve","name":"RWA NAV & Reserve Verification","tags":["rwa","tokenization","evidence","x402"],"description":"Independent observations for NAV, reserve and collateral claims"},{"id":"rwa-transaction-assurance","name":"RWA Transaction Assurance","tags":["rwa","tokenization","evidence","x402"],"description":"Asset, payment, delivery and transfer-rule verification"},{"id":"rwa-corporate-actions","name":"RWA Corporate Action Monitor","tags":["rwa","tokenization","evidence","x402"],"description":"Detect material NAV, income, maturity, redemption and freeze changes"},{"id":"sanctions-screening-evidence","name":"Sanctions Screening Evidence","tags":["rwa","tokenization","evidence","x402"],"description":"Traceable literal screening against observed official US and EU sources; not legal clearance"},{"id":"agent-reputation-evidence","name":"Agent Reputation Evidence","tags":["agents","reputation","evidence","x402"],"description":"Evidence-bounded reputation score with confidence, coverage and explicit limitations"},{"id":"counterparty-risk-preflight","name":"Counterparty Risk Preflight","tags":["agents","counterparty","risk","payments","x402"],"description":"Deterministic allow, review or deny decision using supplied reputation evidence and transaction limits"},{"id":"agent-budget-guard","name":"Agent Budget Guard","tags":["agents","security","trust","x402"],"description":"Stop autonomous spending before a call exceeds its task, session or period budget."},{"id":"idempotency-replay-guard","name":"Idempotency Replay Guard","tags":["agents","security","trust","x402"],"description":"Distinguish a safe retry from conflicting reuse before an agent repeats an action or payment."},{"id":"human-approval-policy","name":"Human Approval Policy","tags":["agents","security","trust","x402"],"description":"Make escalation predictable by classifying actions before execution."},{"id":"secret-redaction-preflight","name":"Secret Redaction Preflight","tags":["agents","security","trust","x402"],"description":"Remove common secret indicators before agent context or payload leaves its boundary."},{"id":"oauth-token-audience-guard","name":"OAuth Token Audience Guard","tags":["agents","security","trust","x402"],"description":"Prevent token forwarding to the wrong resource after local signature validation."},{"id":"redirect-callback-validator","name":"Redirect Callback Validator","tags":["agents","security","trust","x402"],"description":"Reject unsafe callbacks, ambiguous domains and redirects outside an explicit allowlist."},{"id":"tool-capability-drift-monitor","name":"Tool Capability Drift Monitor","tags":["agents","security","trust","x402"],"description":"Detect when an approved tool changes its schema or declared capabilities."},{"id":"mcp-server-identity-evidence","name":"MCP Server Identity Evidence","tags":["agents","security","trust","x402"],"description":"Bind the declared MCP domain, endpoint, manifest, key and version into portable evidence."},{"id":"agent-task-handoff-receipt","name":"Agent Task Handoff Receipt","tags":["agents","security","trust","x402"],"description":"Give collaborating agents a portable statement of task, scope, budget and expiry."},{"id":"context-provenance-labeler","name":"Context Provenance Labeler","tags":["agents","security","trust","x402"],"description":"Carry integrity and confidentiality labels with agent context instead of losing its origin."},{"id":"signed-result-comparator","name":"Signed Result Comparator","tags":["agents","security","trust","x402"],"description":"Expose exact agreement or conflict between multiple agent results without inventing consensus."},{"id":"service-sla-attestation","name":"Service SLA Attestation","tags":["agents","security","trust","x402"],"description":"Turn bounded availability and latency samples into auditable signed SLA evidence."},{"id":"payment-firewall","name":"Autonomous Payment Firewall","tags":["agents","services","x402"],"description":"Reject unsafe payment terms before an autonomous agent signs or spends."},{"id":"web-evidence","name":"Independent Web Evidence","tags":["agents","services","x402"],"description":"Independently retrieve, normalize, screen and hash a public source."},{"id":"agent-inspection","name":"AI Agent Due Diligence","tags":["agents","services","x402"],"description":"Inspect an agent endpoint before trusting it, delegating work or paying it."},{"id":"commerce-journey","name":"Commerce Journey Verification","tags":["agents","services","x402"],"description":"Verify that intent, quote, payment and delivery form one untampered history."},{"id":"payment-route-selector","name":"Payment Route Selector","tags":["agents","services","x402"],"description":"Reject routes that cannot safely settle, rank the remaining x402 routes by your policy, and return the exact next action before signing."},{"id":"x402-quote-comparator","name":"x402 Quote Comparator","tags":["agents","services","x402"],"description":"Validate and normalize x402 v2 quotes, preventing false price comparisons across incompatible assets or decimals."},{"id":"payment-receipt-reconciler","name":"Payment Receipt Reconciler","tags":["agents","services","x402"],"description":"Find exact disagreement between intended payment and returned receipt."},{"id":"duplicate-charge-detector","name":"Duplicate Charge Detector","tags":["agents","services","x402"],"description":"Detect repeated payment fingerprints without treating equal prices alone as duplicates."},{"id":"subscription-spend-guard","name":"Subscription Spend Guard","tags":["agents","services","x402"],"description":"Authorize only the next due recurring charge when subscription, merchant, per-charge and period constraints all match."},{"id":"webhook-verifier","name":"Webhook Verifier","tags":["agents","services","x402"],"description":"Require a trusted signature binding payload, request target and a unique nonce, plus freshness and replay protection."}],"tools":["Signed JSON Attestation","Autonomous Payment Firewall","Atomic Mandate Reservation","Preflight URL","Fetch Independent Evidence","AI Agent Due Diligence","Agent Commerce Journey Verification","Transaction Assurance","Transaction Recovery","Try PHION Service Free","Agent Spending Gateway","PHION Execute","PHION Universal Market","Tool Output Firewall","Delegation Scope Guard","Memory Write Guard","MCP Manifest Firewall","Tool Call Policy Guard","Data Egress Preflight","Schema Normalize & Repair","RWA Asset Due Diligence","RWA Compliance Decision","RWA NAV & Reserve Verification","RWA Transaction Assurance","RWA Corporate Action Monitor","Sanctions Screening Evidence","Agent Reputation Evidence","Counterparty Risk Preflight","Agent Budget Guard","Idempotency Replay Guard","Human Approval Policy","Secret Redaction Preflight","OAuth Token Audience Guard","Redirect Callback Validator","Tool Capability Drift Monitor","MCP Server Identity Evidence","Agent Task Handoff Receipt","Context Provenance Labeler","Signed Result Comparator","Service SLA Attestation","Independent Web Evidence","Commerce Journey Verification","Payment Route Selector","x402 Quote Comparator","Payment Receipt Reconciler","Duplicate Charge Detector","Subscription Spend Guard","Webhook Verifier","Delivery Evidence","Inter-Agent Policy Evaluator","Concurrency Guard","Resource Cycle Guard","Abandoned Tool Detector","Manifest Version Diff","Dependency Provenance Assessment","Conflict Resolution","Data Freshness Certificate","Domain Ownership Evidence","Purpose-Bound Consent","Retention & Deletion Receipt","Interrupted Task Recovery","Portable Observability Audit","PHION Index Feed","Verified Web Extract","Entity Enrichment Evidence","Social Source Evidence","Market Data Snapshot","Onchain Evidence","Verified News Monitor","Multi-Source Fact Bundle","Document to Verified JSON","Source-Backed Search","Live Data Freshness","Person Enrichment Evidence","Company Enrichment Evidence","Contact Enrichment Evidence","MCP 2026 Compatibility Gateway","Durable Agent Task","Task Checkpoint Evidence","Task Cancel Assurance","Agent Approval Relay","Capability Negotiation Preflight","MCP Catalog Cache Guard","OAuth Issuer Binding Evidence","MCP-A2A Task Bridge","Quote Freshness Guard","Delegated Credential Guard","Agent Session Continuity","Task Lease Guard","Tool Result Schema Validator","Agent Memory Provenance","Payment Delivery Atomicity","Service Failover Selector","Agent Rate Limit Negotiator","Execution Cost Estimator","Cross-Agent Receipt Bundle","Capability Verification","Capability Benchmark"],"extra":{"inputModes":["application/json"],"outputModes":["application/json"],"capabilities":{"streaming":false,"pushNotifications":false},"protocolVersion":"1.0"},"attribution":{"kind":"a2a_card","name":"a2a_card","summary":"a2a_card","version":"a2a_card","description":"a2a_card","homepageUrl":"a2a_card","publisherUrl":"a2a_card","publisherName":"a2a_card"}},"derived":{"capabilities":[{"slug":"commerce.payments","name":"Payments","confidence":1,"provenance":"declared"},{"slug":"commerce.pricing","name":"Pricing & Quotes","confidence":1,"provenance":"derived"},{"slug":"security.identity","name":"Identity & Access","confidence":1,"provenance":"derived"},{"slug":"automation.orchestration","name":"Agent Orchestration","confidence":1,"provenance":"declared"},{"slug":"documents.invoice-processing","name":"Invoice Processing","confidence":1,"provenance":"declared"},{"slug":"research.web","name":"Deep Web Research","confidence":1,"provenance":"declared"},{"slug":"code.execution","name":"Code Execution","confidence":1,"provenance":"declared"},{"slug":"research.people-companies","name":"People & Company Research","confidence":0.99,"provenance":"derived"},{"slug":"data.news","name":"News & Feeds","confidence":0.933,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":0.75,"provenance":"derived"}],"categories":["automation","code","commerce","data","documents","research","security"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 27m ago.","lastOkAt":"2026-10-18T08:28:13.663Z","lastProbedAt":"2026-10-18T08:28:13.663Z","statusComputedAt":"2026-10-18T08:30:52.125Z","reliability30d":{"probes":110,"successRate":0.9909,"p50Ms":230,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":108,"ok":107,"authBoundaryOk":0,"serviceOk":107,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-18T08:28:13.663Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":208,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-18T01:25:39.932Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":202,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-17T18:24:36.345Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":215,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-17T11:21:56.695Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":221,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-17T04:27:11.062Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":206,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-16T22:25:38.035Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":213,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-16T09:31:08.590Z","kind":"a2a_card","ok":false,"httpStatus":null,"latencyMs":null,"error":"timeout","detail":null},{"at":"2026-10-16T02:29:45.009Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":203,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-15T19:29:23.195Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":198,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}},{"at":"2026-10-15T12:29:33.147Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":211,"error":null,"detail":{"name":"PHION Agent Trust Infrastructure","signed":false,"version":"1.57.0","cardPath":"/.well-known/agent-card.json","skillCount":132,"protocolVersion":"1.0"}}],"tools":null,"package":null,"toolSurface":null,"endpointFacts":[{"id":"ep_xn5myysy66hs","url":"https://phion.systems","type":"a2a","factsCheckedAt":"2026-10-18T01:25:39.938Z","auth":null,"tls":{"observedAt":"2026-10-18T01:25:40.139Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"phion.systems","issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validFrom":"2026-09-27T23:29:36.000Z","validTo":"2026-12-26T23:29:35.000Z","daysToExpiry":69,"sanCount":2,"fingerprint256":"31:5B:90:54:68:96:FE:3F:90:CD:AC:B0:74:A3:EC:E0:8F:92:4B:98:6F:A2:67:3B:8A:3F:49:7E:84:64:BF:75"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"a2a_card","key":"https://phion.systems/.well-known/agent-card.json","url":"https://phion.systems/.well-known/agent-card.json","firstSeenAt":"2026-09-27T14:22:01.369Z","fetchedAt":"2026-10-11T15:20:18.385Z","normalizedAt":"2026-10-11T15:20:18.385Z"},{"source":"a2a_card","key":"https://phion.systems/.well-known/agent.json","url":"https://phion.systems/.well-known/agent.json","firstSeenAt":"2026-09-13T11:25:39.386Z","fetchedAt":"2026-09-13T11:25:39.386Z","normalizedAt":"2026-09-13T11:25:39.386Z"}]},"firstSeenAt":"2026-09-13T11:25:39.386Z","updatedAt":"2026-10-11T15:20:19.610Z"}