{
  "schema": "neomorphic.instruments-index.v1",
  "mode": "static-read-only",
  "canonical_url": "https://neomorphic.io/api/v1/instruments",
  "count": 8,
  "instruments": [
    {
      "id": "seller-conformance",
      "roman": "I",
      "name": "Seller Conformance ($490)",
      "question": "Is this seller accurately and safely buyable?",
      "summary": "A credential-free seller-side examination of unpaid challenge behavior, route and term coherence, schema guarantees, discovery surfaces, and public-safe evidence.",
      "publication_state": "public-preview",
      "publication_state_label": "Public release candidate · v0.1.0-candidate.11",
      "free_interface": "Public GitHub release candidate, CLI, library, and GitHub Action",
      "paid_service": "Reviewed Seller Conformance Report",
      "source": {
        "name": "agent-payment-integrity v0.1.0-candidate.11",
        "url": "https://github.com/epistemedeus/agent-payment-integrity"
      },
      "method": [
        "Observe the live unpaid response without making a purchase.",
        "Compare route, method, price, asset, network, and recipient declarations.",
        "Check x402 and MPP terms for material drift when both are offered.",
        "Check request validation, output schema, receipts, errors, and discovery files.",
        "Record exact scope, tool version, time, result, and expiry."
      ],
      "boundaries": [
        "Conformance is not certification, a penetration test, or a legal opinion.",
        "No paid or state-changing probe runs without explicit scope and budget.",
        "Catalog presence is not evidence of adoption or demand."
      ],
      "evidence_example": "Seller route observed and checked for one method-path pair; result limited to the recorded deployment and observation window.",
      "public_url": "https://neomorphic.io/instruments/seller-conformance/"
    },
    {
      "id": "mandate",
      "roman": "II",
      "name": "Buyer Mandate",
      "question": "Is this exact purchase inside authority?",
      "summary": "A buyer-side policy instrument that makes intent explicit, filters offers, binds the complete execution shape, separates authorization, and checks the delivered output.",
      "publication_state": "available",
      "publication_state_label": "Open-source core · v0.15.1",
      "free_interface": "Credential-free policy primitives and examples",
      "paid_service": "Buyer Mandate Integration",
      "source": {
        "name": "agent-payment-policy v0.15.1",
        "url": "https://github.com/epistemedeus/agent-payment-policy"
      },
      "method": [
        "Construct an immutable purchase intent.",
        "Evaluate offers against amount, route, asset, network, and recipient constraints.",
        "Bind independent authorization to the exact execution batch.",
        "Accept or reject output against the promised contract.",
        "Emit a public-safe receipt without private request values."
      ],
      "boundaries": [
        "The policy process has no wallet access.",
        "Neomorphic does not hold or operate a customer signing key.",
        "A policy decision is not evidence that settlement occurred."
      ],
      "evidence_example": "Purchase intent checked against Buyer Mandate method v1 for one exact route, amount ceiling, execution batch, and output contract.",
      "public_url": "https://neomorphic.io/instruments/mandate/"
    },
    {
      "id": "route-lock",
      "roman": "III",
      "name": "Route Lock",
      "question": "May a buyer authorize this exact route now?",
      "summary": "An internal prototype that composes route identity, current terms, lockability, and evidence freshness into lockable, review, or skip before authorization.",
      "publication_state": "research",
      "publication_state_label": "Internal prototype",
      "free_interface": "Public summary only; no public CLI or decision-envelope schema",
      "paid_service": "Proposed route-lock implementation",
      "source": {
        "name": "Private settlement-reliability prototype",
        "url": null
      },
      "method": [
        "Resolve one exact origin, method, route, and declared recipient.",
        "Compare current terms with the authority profile.",
        "Return lockable only inside a short validity window when the required evidence agrees.",
        "Return review or skip when evidence is stale, missing, foreign, contradictory, or outside scope."
      ],
      "boundaries": [
        "A route lock does not reserve funds or guarantee settlement.",
        "Missing verification facts never become wildcards."
      ],
      "evidence_example": "The prototype returned review because the live recipient declaration did not match the pinned route identity.",
      "public_url": "https://neomorphic.io/instruments/route-lock/"
    },
    {
      "id": "release-gate",
      "roman": "IV",
      "name": "Release Gate",
      "question": "May this version be represented as published?",
      "summary": "A release instrument that separates origin truth, deployment evidence, registry propagation, and cache lag before a publication claim is promoted.",
      "publication_state": "research",
      "publication_state_label": "Internal candidate",
      "free_interface": "Public summary only; no public release schema or checklist",
      "paid_service": "Proposed release-gate implementation",
      "source": {
        "name": "Private catalog publication and release-gate methods",
        "url": null
      },
      "method": [
        "Bind evidence to an immutable source version and deployment identity.",
        "Check the actual public origin before downstream catalogs.",
        "Separate accepted propagation from cached or missing listings.",
        "Issue held, gated, or accepted candidate outcomes."
      ],
      "boundaries": [
        "A registry listing cannot manufacture origin truth.",
        "A source string or nearby helper test is not release evidence."
      ],
      "evidence_example": "Release accepted for one exact version after source, deployment, and public contract checks; later versions remain outside scope.",
      "public_url": "https://neomorphic.io/instruments/release-gate/"
    },
    {
      "id": "evidence-register",
      "roman": "V",
      "name": "Evidence Register",
      "question": "What evidence exists, and is it current?",
      "summary": "A public-safe preview of bounded claims, methods, versions, observation times, expiry, supersession, and evidence origin.",
      "publication_state": "public-preview",
      "publication_state_label": "Public preview",
      "free_interface": "Public register and offline signature verification",
      "paid_service": "Reviewed Evidence Register Record",
      "source": {
        "name": "neomorphic.evidence-record.v1",
        "url": null
      },
      "method": [
        "State the subject and exact claim scope.",
        "Name the checking instrument, version, and mode.",
        "Publish result, observation time, expiry, evidence-metadata digest, and a correction or revocation reference.",
        "Sign the canonical public envelope with a dedicated evidence key."
      ],
      "boundaries": [
        "A signature proves origin and integrity, not truth beyond the stated method.",
        "Raw requests, private authority, customer identity, and credentials stay private."
      ],
      "evidence_example": "A signed release observation that expires at its stated time; correction, supersession, or revocation requires a new static Register publication.",
      "public_url": "https://neomorphic.io/instruments/evidence-register/"
    },
    {
      "id": "agent-surface-security",
      "roman": "VI",
      "name": "Agent Surface Security",
      "question": "Is this tool surface safe to expose?",
      "summary": "A bounded review of skill and MCP surfaces, authorization architecture, install behavior, secret paths, prompt-injection exposure, context cost, and revocation.",
      "publication_state": "public-preview",
      "publication_state_label": "Public scanner · broader review in design",
      "free_interface": "SkillGuard v1.3.0 public static scanner",
      "paid_service": "Proposed Agent Surface Security Review",
      "source": {
        "name": "SkillGuard v1.3.0 and MCP authorization research",
        "url": "https://github.com/epistemedeus/skillguard"
      },
      "method": [
        "Inspect declared tools, scopes, resources, and install behavior.",
        "Check authorization on each operation rather than trusting opaque handles.",
        "Review secret paths, dependency behavior, audit logging, and revocation.",
        "Report named findings without an unexplained aggregate score."
      ],
      "boundaries": [
        "Automated review is not a penetration test unless separately scoped.",
        "Targets are never instructed to run untrusted installation code."
      ],
      "evidence_example": "One MCP operation found to lack resource binding; finding limited to the observed server version and advertised scope.",
      "public_url": "https://neomorphic.io/instruments/agent-surface-security/"
    },
    {
      "id": "observatory",
      "roman": "VII",
      "name": "Observatory",
      "question": "What can be truthfully observed?",
      "summary": "A claim-disciplined observation practice for catalogs, deployments, route costs, chain evidence, machine traffic, and the limits of each source.",
      "publication_state": "research",
      "publication_state_label": "Internal research preview",
      "free_interface": "Public Instrument summary; observer implementation remains internal",
      "paid_service": "Proposed observation and evidence work",
      "source": {
        "name": "observers and route-cost evaluator",
        "url": null
      },
      "method": [
        "Keep native evidence in its original authority class.",
        "Separate observed facts from inference and unknowns.",
        "Use independent estimators before making cross-source claims.",
        "Publish limitations and kill conditions beside results."
      ],
      "boundaries": [
        "Observation is not demand.",
        "A challenge is not a payment.",
        "A transaction is not route attribution when identifiers collide.",
        "Internal or sponsored activity is never organic demand."
      ],
      "evidence_example": "Catalog presence observed at a stated time; independent use and paid demand explicitly not established.",
      "public_url": "https://neomorphic.io/instruments/observatory/"
    },
    {
      "id": "commerce-studio",
      "roman": "VIII",
      "name": "Commerce Studio",
      "question": "How does a real team implement the stack?",
      "summary": "A service practice for choosing rails, mapping authority, defining evidence, hardening buyer and seller paths, and shipping a bounded machine-commerce system.",
      "publication_state": "service",
      "publication_state_label": "Engagements open",
      "free_interface": "Public service-scope summary",
      "paid_service": "Architecture Sprint or Machine Commerce Build",
      "source": {
        "name": "Neomorphic service practice",
        "url": null
      },
      "method": [
        "Map actors, authority, funds, credentials, providers, and failure boundaries.",
        "Choose protocols without making one provider the authority model.",
        "Define exact contracts, release evidence, revocation, and incidents.",
        "Build with customer-controlled credentials and explicit acceptance gates."
      ],
      "boundaries": [
        "Neomorphic does not act as merchant of record for a customer business or marketplace and does not offer customer money-transmission, custody, fiduciary, or card-vault services.",
        "Undefined enterprise builds use a scoped statement of work, not one-click checkout."
      ],
      "evidence_example": "Architecture decision record tying one customer-controlled signer to exact policy, route, settlement, output, and revocation evidence.",
      "public_url": "https://neomorphic.io/instruments/commerce-studio/"
    }
  ]
}