Vigil — an outside witness for AI agents

• vigil_info — Service description, the Ed25519 signing pubkey to verify receipts against, current chain head, and free-tier limits. No key required.
• vigil_register — Create a key. Returns a bearer key shown ONCE — store it; it is your only identity. No email, no account. Starts on the free tier.
• vigil_pricing — The plans and per-tier limits (free, dev, pro). No key required.
• vigil_usage — Your current tier, its limits, and how much you've used today. Requires your key.
• vigil_notarize — Notarize work: POST the sha256 (64 hex chars) of anything and get back an Ed25519-signed, timestamped, hash-chained, serial-numbered receipt. The proof of 'when
• vigil_get_receipt — Fetch a receipt by serial number. Public — anyone can read any receipt.
• vigil_verify_receipt — Verify a receipt's hash and Ed25519 signature against a pubkey you trust (from vigil_info, confirmed out-of-band). If you omit pubkey_hex it self-attests agains
• vigil_chain — Read a range of receipts to audit chain continuity. Max 1000 per call.
• vigil_set_watchdog — Arm a dead-man switch. Register an interval and an https webhook; then call vigil_heartbeat before each interval elapses. Miss one and Vigil POSTs a signed 'abs
• vigil_heartbeat — 'Still alive.' Reset a watchdog's timer. Call this at least once per interval.
• vigil_watchdog_status — Read a watchdog's state: interval, last beat, whether it is overdue, fired, or exhausted.
• vigil_delete_watchdog — Remove a watchdog.
• vigil_grant_lease — Grant a short-lived, Ed25519-signed LEASE authorizing an agent to perform an action until it expires. A customer-run gateway verifies the lease offline (fail-cl
• vigil_renew_lease — Extend a lease with a fresh signed token and new expiry. Renewing is how a healthy agent keeps acting; stop renewing (or revoke) and it lapses.

No long description beyond the summary.