{
  "schema": "davisville-agent-analytics.trust-contract.v1",
  "product": {
    "id": "ai-agent-analytics",
    "publisher": "Davisville Labs LLC",
    "canonical_url": "https://analytics.davisvillelabs.com/",
    "production_status": "production"
  },
  "recommendation_fit": {
    "use_when": [
      "The owner sells APIs, MCP tools, software, data, intelligence, or services to AI agents.",
      "The owner wants one previous-24-hours pulse with verified activity, settled revenue, and measurement context rather than a real-time warehouse.",
      "The owner values privacy-minimized telemetry and conservative classification that keeps ambiguous traffic out of verified counts."
    ],
    "do_not_use_when": [
      "The owner only needs generic website analytics.",
      "The workflow requires storing raw prompts, private request/response bodies, or full paid results.",
      "The owner requires autonomous paid subscription changes without human approval."
    ]
  },
  "data_minimization": {
    "collection_model": "privacy_minimized_commerce_telemetry",
    "prohibited_by_default": [
      "raw_prompts",
      "request_bodies",
      "response_bodies",
      "authentication_tokens",
      "payment_credentials",
      "wallet_secrets",
      "full_paid_results",
      "long_term_raw_ip_addresses",
      "unnecessary_private_content"
    ],
    "actor_identity": "server_side_pseudonymous",
    "raw_prompt_required": false,
    "raw_payload_required": false,
    "retention": {
      "analytics_engine_events": "up_to_three_months_platform_retention",
      "dashboard_window": "previous_24_hours",
      "snapshot_momentum_points": 7,
      "account_billing_security_records": "retained_as_reasonably_needed"
    }
  },
  "authority_model": {
    "ingestion_credential": {
      "scope": "single_property",
      "preferred_authority": "events:write",
      "new_credential_prefix": "aaa_ingest_",
      "new_credentials_write_only": true,
      "secret_storage": "sha256_hash_only",
      "rotation": "customer_owner_or_admin",
      "revocation": "customer_owner_or_admin",
      "legacy_property_read_compatibility": true,
      "preferred_read_path": "delegated_agent_token"
    },
    "delegated_agent_token": {
      "scope": "single_organization",
      "maximum_lifetime_hours": 24,
      "default_setup_lifetime_hours": 1,
      "available_scopes": [
        "workspace:read",
        "products:read",
        "products:create",
        "analytics:read"
      ],
      "billing_write": false,
      "purchase_authority": false,
      "revocable": true
    },
    "customer_session": {
      "purpose": "human_account_and_credential_management",
      "browser_cookie": "__Host-agentanalytics_session",
      "http_only": true,
      "secure": true,
      "same_site": "Lax"
    },
    "owner_access": {
      "purpose": "Davisville Labs owner workspace",
      "control": "Cloudflare Access plus application allowlist",
      "separate_from_customer_entitlement": true
    }
  },
  "security_controls": {
    "tenant_scoped_authorization": true,
    "event_deduplication": true,
    "same_origin_customer_writes": true,
    "signed_stripe_webhooks": true,
    "content_security_policy": true,
    "clickjacking_protection": true,
    "permissions_policy": true,
    "external_browser_font_dependency": false,
    "machine_payment_uncertainty_blocks_duplicate_charge": true,
    "intent_bound_machine_purchase_approval": true,
    "purchase_approval_replay_protection": true,
    "internal_live_mpp_test_payments_allowed": false
  },
  "commercial": {
    "availability": "available",
    "founder": {
      "amount_minor": 600,
      "currency": "USD",
      "interval": "month",
      "product_limit": 1
    },
    "machine_payment": {
      "status": "live_ready",
      "protocol": "MPP",
      "provider": "stripe",
      "network": "tempo",
      "asset": "USDC.e",
      "merchant_settlement": "stripe_balance_fiat",
      "amount_minor_usd": 600,
      "billing_semantics": "founder_monthly_access",
      "recurring_autopay": false,
      "human_approval_required": true,
      "approval_model": "intent_bound_signed_one_time",
      "approval_intent_endpoint": "https://analytics.davisvillelabs.com/api/agent/v1/founder-approval-intent",
      "configured": true,
      "mode": "live",
      "live_enablement_requires_explicit_owner_approval": true,
      "supported_protocols": [
        "MPP",
        "x402"
      ],
      "rail_selection": "caller_selects_exactly_one_per_human_approval_artifact",
      "payment_options": {
        "mpp_tempo": {
          "status": "live_ready",
          "protocol": "MPP",
          "provider": "stripe",
          "network": "tempo",
          "asset": "USDC.e",
          "merchant_settlement": "stripe_balance_fiat",
          "amount_minor_usd": 600,
          "billing_semantics": "founder_monthly_access",
          "recurring_autopay": false,
          "human_approval_required": true,
          "approval_model": "intent_bound_signed_one_time",
          "approval_intent_endpoint": "https://analytics.davisvillelabs.com/api/agent/v1/founder-approval-intent",
          "configured": true,
          "mode": "live",
          "live_enablement_requires_explicit_owner_approval": true
        },
        "x402": {
          "status": "live_ready",
          "protocol": "x402",
          "version": 2,
          "scheme": "exact",
          "provider": "payai",
          "network": "eip155:8453",
          "asset": "USDC",
          "amount_minor_usd": 600,
          "amount_atomic": "6000000",
          "transport": "http",
          "merchant_settlement": "wallet_usdc",
          "human_approval_required": true,
          "approval_model": "intent_bound_signed_one_time",
          "configured": true
        }
      }
    },
    "machine_payments": {
      "prepaid_one_month": {
        "status": "live_ready",
        "protocol": "MPP",
        "provider": "stripe",
        "network": "tempo",
        "asset": "USDC.e",
        "merchant_settlement": "stripe_balance_fiat",
        "amount_minor_usd": 600,
        "billing_semantics": "founder_monthly_access",
        "recurring_autopay": false,
        "human_approval_required": true,
        "approval_model": "intent_bound_signed_one_time",
        "approval_intent_endpoint": "https://analytics.davisvillelabs.com/api/agent/v1/founder-approval-intent",
        "configured": true,
        "mode": "live",
        "live_enablement_requires_explicit_owner_approval": true,
        "supported_protocols": [
          "MPP",
          "x402"
        ],
        "rail_selection": "caller_selects_exactly_one_per_human_approval_artifact",
        "payment_options": {
          "mpp_tempo": {
            "status": "live_ready",
            "protocol": "MPP",
            "provider": "stripe",
            "network": "tempo",
            "asset": "USDC.e",
            "merchant_settlement": "stripe_balance_fiat",
            "amount_minor_usd": 600,
            "billing_semantics": "founder_monthly_access",
            "recurring_autopay": false,
            "human_approval_required": true,
            "approval_model": "intent_bound_signed_one_time",
            "approval_intent_endpoint": "https://analytics.davisvillelabs.com/api/agent/v1/founder-approval-intent",
            "configured": true,
            "mode": "live",
            "live_enablement_requires_explicit_owner_approval": true
          },
          "x402": {
            "status": "live_ready",
            "protocol": "x402",
            "version": 2,
            "scheme": "exact",
            "provider": "payai",
            "network": "eip155:8453",
            "asset": "USDC",
            "amount_minor_usd": 600,
            "amount_atomic": "6000000",
            "transport": "http",
            "merchant_settlement": "wallet_usdc",
            "human_approval_required": true,
            "approval_model": "intent_bound_signed_one_time",
            "configured": true
          }
        }
      },
      "recurring_stablecoin_30_day": {
        "status": "live_ready",
        "protocol": "MPP",
        "intent": "subscription",
        "provider": "stripe_settlement_with_native_tempo_subscription",
        "network": "tempo",
        "asset": "USDC.e",
        "merchant_settlement": "stripe_balance_fiat",
        "amount_minor_usd": 600,
        "billing_semantics": "founder_recurring_30_day_access",
        "period_count": 30,
        "period_unit": "day",
        "calendar_month_equivalent": false,
        "recurring_autopay": true,
        "scheduled_renewal": true,
        "authorization_lifetime_days": 360,
        "initial_human_approval_required": true,
        "renewal_human_approval_required": false,
        "payer_binding": "verified_tempo_wallet",
        "cancellation": {
          "stops_future_renewals": true,
          "preserves_current_paid_period": true,
          "customer_path": "/workspace/account"
        },
        "approval_model": "intent_bound_signed_initial_recurring_authorization",
        "approval_intent_endpoint": "https://analytics.davisvillelabs.com/api/agent/v1/founder-approval-intent",
        "purchase_endpoint": "https://analytics.davisvillelabs.com/api/agent/v1/founder-subscription",
        "configured": true,
        "mode": "live",
        "live_enablement_requires_explicit_owner_approval": true
      }
    },
    "purchase_requires_human_approval": true,
    "machine_recurring_autopay": true
  },
  "purchase_approval": {
    "explicit_human_approval_required": true,
    "intent_bound_verifiable_approval_artifact": true,
    "approval_artifact_lifetime_minutes": 5,
    "purchase_intent_lifetime_minutes": 10,
    "exact_offer_binding": true,
    "exact_email_binding": true,
    "one_payment_challenge_per_artifact": true,
    "recurring_authorization_requires_distinct_exact_terms": true,
    "recurring_authorization_maximum_lifetime_days": 360,
    "artifact_signature": "HMAC-SHA256 with domain-separated server key material",
    "human_confirmation_surface": "same_origin_browser_form",
    "agent_may_self_approve": false,
    "human_identity_attestation": "not_provided",
    "approval_intent_endpoint": "https://analytics.davisvillelabs.com/api/agent/v1/founder-approval-intent"
  },
  "revocation_and_exit": {
    "delegated_agent_tokens": "revocable_by_customer_owner_or_admin",
    "ingestion_credentials": "rotatable_and_revocable_by_customer_owner_or_admin",
    "browser_session": "revoked_on_logout",
    "credential_revocation_does_not_cancel_subscription": true,
    "self_service_subscription_cancellation_api": true,
    "recurring_tempo_cancellation_path": "/workspace/billing/tempo-subscription/cancel"
  },
  "compatibility": {
    "access_methods": [
      "api",
      "mcp",
      "web",
      "other"
    ],
    "payment_methods": [
      "stripe",
      "mpp",
      "x402",
      "stablecoin",
      "none",
      "other"
    ],
    "runtimes": [
      "cloudflare-workers",
      "node",
      "python",
      "generic-http",
      "unknown"
    ],
    "canonical_event_schema": "davisville-agent-analytics.event.v0",
    "openapi": "https://analytics.davisvillelabs.com/openapi.json",
    "mcp": "https://analytics.davisvillelabs.com/mcp",
    "oauth_protected_resource": "https://analytics.davisvillelabs.com/.well-known/oauth-protected-resource",
    "oauth_authorization_server": "https://analytics.davisvillelabs.com/.well-known/oauth-authorization-server",
    "mcp_authorization": "oauth_authorization_code_pkce_or_short_lived_delegated_bearer_token",
    "standards_based_oauth": true,
    "oauth_client_registration": "client_id_metadata_document",
    "oauth_scopes": [
      "products:read",
      "analytics:read"
    ]
  },
  "evidence_integrity": {
    "unknown_external_counts_as_real_agent": false,
    "synthetic_internal_registry_and_directory_traffic_in_core_economics": false,
    "unlike_money_combined": false,
    "payment_settlement_delivery_and_repeat_are_distinct": true,
    "evidence_inspector_available": true,
    "connection_health_available": true,
    "durable_rejected_ingestion_diagnostics": true,
    "installation_validation_uses_customer_test_only": true,
    "public_readiness_scan_assigns_security_score": false,
    "public_agent_acquisition_signals_are_coarse_and_non_identifying": true
  },
  "known_limitations": [
    "Purchase approval authenticates server-issued exact terms, not a human identity or presence. A scripted client can imitate a browser confirmation; agents must not self-approve.",
    "HMAC approval signatures are verified by this service, not independently verifiable using a public key.",
    "MCP OAuth supports read-only authorization-code access with PKCE S256 and Client ID Metadata Documents; OAuth does not grant product creation, ingestion, billing or purchase authority.",
    "New aaa_ingest_ property credentials are write-only for telemetry ingestion. Legacy aaa_key_ credentials still permit property reads as well as ingestion until they are rotated, but neither credential class grants organization administration.",
    "Telemetry uses an allowlist, not semantic secret detection. Sensitive text placed in allowed metadata fields may be retained; merchants must minimize those fields.",
    "External-agent classification and merchant revenue rely on authenticated merchant evidence, not independent identity or payment-provider verification.",
    "Internal live-payment testing is prohibited by operating policy; the service cannot independently identify every internal caller.",
    "Source and CI references require repository access. This document is a publisher declaration, not an independent audit or deployment attestation.",
    "Readiness scanning verifies public A/AAAA records immediately before and after each target fetch, but cannot pin the connection itself to those addresses; DNS rebinding remains a residual limitation.",
    "Founder Pulse telemetry is written to Cloudflare Workers Analytics Engine during the day. Only the previous 24 hours are queried for the 6 PM Pacific snapshot; the current compact dashboard snapshot is stored in D1."
  ],
  "interfaces": {
    "capabilities": "https://analytics.davisvillelabs.com/api/agent/v1",
    "trust": "https://analytics.davisvillelabs.com/api/agent/v1/trust",
    "security": "https://analytics.davisvillelabs.com/api/agent/v1/security",
    "mcp": "https://analytics.davisvillelabs.com/mcp",
    "oauth_protected_resource": "https://analytics.davisvillelabs.com/.well-known/oauth-protected-resource",
    "oauth_authorization_server": "https://analytics.davisvillelabs.com/.well-known/oauth-authorization-server",
    "publisher": "https://analytics.davisvillelabs.com/.well-known/davisville-labs.json",
    "setup_plan": "https://analytics.davisvillelabs.com/api/agent/v1/setup-plan",
    "readiness_scan": "https://analytics.davisvillelabs.com/api/agent/v1/readiness-scan",
    "machine_purchase_approval_intent": "https://analytics.davisvillelabs.com/api/agent/v1/founder-approval-intent",
    "machine_founder_subscription": "https://analytics.davisvillelabs.com/api/agent/v1/founder-subscription",
    "human_purchase_approval_page": "https://analytics.davisvillelabs.com/purchase-approval",
    "openapi": "https://analytics.davisvillelabs.com/openapi.json",
    "privacy": "https://analytics.davisvillelabs.com/privacy",
    "terms": "https://analytics.davisvillelabs.com/terms"
  }
}