FROST/1 GOVERNANCE_BOOTSTRAP
META|server|mw-govd|0.1.0
GRAMMAR|pipe_delimited|one_record_per_line|field_0_is_the_tag
GRAMMAR|ignore_unknown_tags|ignore_extra_trailing_fields|both_are_forward_compatibility
GRAMMAR|the_final_record_is|END|absent_END_means_TRUNCATED|do_not_act_on_a_truncated_document
ROLE|the_server_adjudicates|the_agent_reports_observations_only
ROLE|never_send_a_compliance_conclusion|there_is_no_ok_field|a_self_declared_verdict_is_worthless_to_a_third_party
ROLE|not_in_your_request_path|model_calls_are_not_proxied|our_downtime_costs_evidence_not_enforcement
ROLE|enforcement_is_local|installed_hooks_keep_running_while_this_service_is_unreachable
LIMIT|proof_of_concept|not_production
LIMIT|single_instance|state_is_in_process_memory|restart_clears_enrollments_and_receipts
LIMIT|one_channel|one_trust_root|no_multi_tenancy|no_key_rotation
LIMIT|a_customer_can_sign_a_false_observation|accepted_and_documented|the_lie_is_signed_key_bound_and_durable
EP|0|GET|/|human_readable_page
EP|0|GET|/v1/healthz|liveness|use_this_not|/healthz
EP|0|GET|/v1/healthz|NOTE|google_front_end_reserves_the_exact_path|/healthz|on_cloud_run
EP|0|GET|/v1/trust|trust_root|publisher_and_receipt_keys
EP|0|GET|/v1/bundle/:channel|latest_signed_manifest
EP|0|GET|/v1/bundle/id/:bundle_id|immutable_by_id
EP|0|GET|/v1/blob/:digest|artifact_bytes|content_addressed
EP|0|GET|/v1/bootstrap|this_document
EP|0|GET|/me|human_page|paste_a_read_token_to_see_one_identity|form_POST_no_javascript
EP|2|POST|/v1/enroll|bearer_token|register_a_public_key
EP|1|POST|/v1/attest|ed25519_signature_is_the_credential
EP|1|POST|/v1/me|everything_we_hold_about_you|sign_a_request_with_your_enrolled_key
EP|0|GET|/v1/name/:name|is_this_identity_free|check_before_requesting_an_invite
EP|2|POST|/v1/invite|operator|mint_a_single_use_code_that_ASSIGNS_a_name
IDENTITY|your_label_is_assigned_by_the_invite_you_redeem|you_do_not_choose_it_at_enrollment|a_name_nobody_issued_you_cannot_be_claimed
EP|0/1|POST|/mcp|tier_is_per_tool|only_submit_attestation_is_tier_1
TIER|0|public_no_auth|1|the_signature_IS_the_credential_no_bearer_token|2|operator_bearer_token
MCP|revision|2026-07-28|preferred|2025-11-25|accepted
MCP|revisions_are_date_stamped|there_is_no_semver_and_no_v2
MCP|hdr|MCP-Protocol-Version|REQUIRED_on_every_post|never_defaulted|absent_is_400
MCP|hdr|Mcp-Method|REQUIRED|must_equal_body_method
MCP|hdr|Mcp-Name|REQUIRED_for_tools/call|must_equal_params_name
MCP|hdr|mismatch_between_header_and_body|-32020|http_400
MCP|why|the_edge_meters_on_headers_without_parsing_bodies|a_header_that_can_lie_is_a_confused_deputy
MCP|rpc|server/discover|mandatory|no_initialize_handshake
MCP|transport|POST_only|no_SSE|no_session_id|stateless
MCP|tool|governance_get_trust_root|read
MCP|tool|governance_enroll|write|args|label|public_hex|token_goes_in_the_Authorization_header_NOT_an_argument
MCP|the_whole_lifecycle_is_available_on_this_one_transport|enroll|get_bundle|submit_attestation|no_REST_call_required
MCP|tool|governance_get_bundle|read|arg|channel
MCP|tool|governance_submit_attestation|write|arg|attestation
MCP|tool|governance_my_data|read|arg|request|a_SignedRequest_with_purpose|data_read
CLIENT|send_an_explicit_descriptive_user_agent|e.g.|<product>/<version>
CLIENT|the_edge_bot_filter_judges_the_user_agent_string|some_default_library_agents_are_refused_with_403
CLIENT|measured|Python-urllib|any_version|403|urllib/3.14|python-requests|okhttp|Go-http-client|200
CLIENT|a_403_on_a_tier_0_path_is_the_edge_not_authorization|tier_0_requires_no_credential_at_all
KEY|alg|ed25519_only
KEY|key_id_is_DERIVED_from_the_public_key|never_supplied_by_a_client
KEY|pin_the_publisher_key_at_enrollment|verify_bundles_against_the_PINNED_key|never_against_one_fetched_alongside
KEY|without_an_expected_key_id_supplied_out_of_band_the_first_fetch_is_TRUST_ON_FIRST_USE
KEY|signatures_cover_domain_separated_length_prefixed_canonical_bytes|never_json_output
SETUP|1|obtain_an_enrollment_token_OUT_OF_BAND
SETUP|1|THIS_IS_THE_ONE_STEP_A_MACHINE_CANNOT_DO_ALONE|by_design|without_it_any_answering_party_becomes_trusted
SETUP|2|POST|/v1/enroll|send_the_PUBLIC_key_only|the_seed_never_leaves_the_host
SETUP|2|the_label_you_choose_is_the_only_field_you_can_over_share_in|prefer_an_opaque_one
SETUP|3|GET_the_bundle|verify_signature|refuse_rollback_below_the_installed_version
SETUP|4|re_hash_every_blob_against_the_signed_manifest_before_installing
SETUP|5|install_artifacts_with_the_mode_from_the_manifest
SETUP|6|attest|then_repeat_pull_and_attest_on_an_interval
SETUP|enrollment_via_an_invite_also_returns|read_token|hand_it_to_a_HUMAN|it_is_read_only_scoped_to_one_identity_and_expires
SETUP|cli|mw-govctl setup --server <url>|does_all_of_the_above
SETUP|idempotent|pull_is_the_repair_operation|safe_to_re_run
SETUP|not_idempotent|attest|every_submission_needs_a_fresh_nonce
READ|verdict|compliant|every_graded_artifact_matches
READ|verdict|drifted|with_findings|act_on_them
READ|verdict|unknown|no_published_bundle_matches|not_a_pass_and_not_a_failure
READ|finding|missing|modified|mode_mismatch|unexpected
READ|graded_kinds|hook|policy|skill|docs_are_not_graded_a_missing_readme_is_not_a_control_failure
READ|the_receipt_is_the_evidence|verify_it_against_the_receipt_root|it_names_the_key_that_actually_signed
VOCAB|rule|bare_terms_are_RESERVED|customer_terms_MUST_be|x.<tenant>.<term>
VOCAB|rule|tenant|[a-z0-9-]{1,32}|term|[a-z0-9_]{1,48}|exactly_one_dot_after_the_tenant
VOCAB|rule|you_may_USE_reserved_terms_freely|you_may_not_DEFINE_them|a_bare_term_you_mint_is_refused
VOCAB|reserved|compliant
VOCAB|reserved|drifted
VOCAB|reserved|unknown
VOCAB|reserved|missing
VOCAB|reserved|modified
VOCAB|reserved|mode_mismatch
VOCAB|reserved|unexpected
VOCAB|reserved|hook
VOCAB|reserved|policy
VOCAB|reserved|doc
VOCAB|reserved|skill
VOCAB|reserved|report
VOCAB|reserved|repair
VOCAB|reserved|halt
SKILL|kind|skill|arrives_as_a_signed_bundle_artifact_like_any_other
SKILL|NEVER_EXECUTABLE|an_executable_skill_is_refused_at_publish_and_at_install|load_it_as_instruction_text_only
SKILL|a_signature_proves_ORIGIN_not_SAFETY|it_says_who_wrote_this_never_that_acting_on_it_is_wise
SKILL|graded_for_drift_like_a_hook|a_swapped_skill_is_a_finding
NOW|channel|stable
NOW|bundle_version|22
NOW|enrolled_agents|3
END