# Verbatim conversion (JSON -> YAML, content unchanged) of https://api.aux.prdictionedge.ai/openapi.json
# fetched 2026-09-19 (HTTP 200, application/json, 28,650 bytes). Original JSON: openapi/_original/prdictionedge-ai-openapi.json
# Ownership: servers[] https://api.aux.prdictionedge.ai; info.title 'AUX Evidence and Certification API'; the same host serves
# the A2A agent card whose provider.organization is 'AUX by PrdictionEdge' (provider.url https://aux.prdictionedge.ai).
openapi: 3.1.0
info:
  title: AUX Evidence and Certification API
  version: aux-preflight-0.2.0
  description: Production contract. Synthetic experiments and compatibility routes are excluded.
servers:
- url: https://api.aux.prdictionedge.ai
paths:
  /.well-known/agent-card.json:
    get:
      operationId: getA2AAgentCard
      summary: Discover the AUX A2A v1.0 interface and bounded skills
      responses:
        '200':
          description: A2A Agent Card
  /v1/evidence/sanctions:
    post:
      operationId: resolveSanctionsEvidence
      summary: Independently screen a submitted legal name against official OFAC SDN and consolidated primary/alias files and issue a signed evidence bundle
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - vendor
              properties:
                vendor:
                  type: object
                  required:
                  - name
                  properties:
                    name:
                      type: string
      responses:
        '200':
          description: Bounded official OFAC name-screening evidence
        '400':
          description: Invalid request
        '503':
          description: OFAC source temporarily unavailable
  /v1/evidence/domain-identity:
    post:
      operationId: resolveDomainIdentityEvidence
      summary: Resolve registered-domain evidence through IANA RDAP plus a domain-controlled AUX identity document
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - vendor
              properties:
                vendor:
                  type: object
      responses:
        '200':
          description: Independent domain identity evidence or an actionable unresolved result
        '400':
          description: Invalid request
        '503':
          description: Domain reference source temporarily unavailable
  /v1/evidence/source-attestation:
    get:
      operationId: getSourceAttestationContract
      summary: Get the trust-document and signed-attestation contract for private evidence sources
      responses:
        '200':
          description: Source attestation trust contract
    post:
      operationId: verifySourceAttestation
      summary: Resolve a source-domain trust document and verify a signed private-source evidence attestation
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - source_domain
              - jws
      responses:
        '200':
          description: Signed AUX evidence bundle for a verified source attestation
        '400':
          description: Invalid or unverifiable source attestation
        '422':
          description: Source trust is not configured; caller action required
        '503':
          description: Source trust endpoint temporarily unavailable
  /v1/evidence/business-identity:
    post:
      operationId: resolveBusinessIdentityEvidence
      summary: Independently resolve a legal entity against live GLEIF data and issue a signed evidence bundle when identity is exact and current
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - vendor
              properties:
                vendor:
                  type: object
                  properties:
                    name:
                      type: string
                    lei:
                      type: string
      responses:
        '200':
          description: Independent GLEIF identity evidence or an unresolved/ambiguous result
        '400':
          description: Invalid request
        '503':
          description: GLEIF source unavailable
  /v1/evidence/verify:
    post:
      operationId: verifyAuxEvidence
      summary: Verify a signed AUX independent-evidence bundle
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - evidence
              properties:
                evidence:
                  type: object
      responses:
        '200':
          description: Evidence signature and integrity verification result
        '400':
          description: Invalid request
  /v1/certification-profiles:
    get:
      operationId: getCertificationProfiles
      summary: Discover every live AUX certification profile and its bounded requirement set
      parameters:
      - name: profile_id
        in: query
        required: false
        schema:
          type: string
      responses:
        '200':
          description: Live certification-profile registry
        '404':
          description: Unknown profile id
  /v1/certification-attempts:
    post:
      operationId: createCertificationAttempt
      summary: Create or reuse a durable certification attempt that automatically retries temporary evidence-source failures
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CertificationRequest'
      responses:
        '200':
          description: Existing or immediately terminal attempt
        '202':
          description: Durable attempt accepted; automatic source retry is active
        '422':
          description: REQUIREMENTS_OUTSTANDING before an attempt is created
        '503':
          description: Durable attempt store unavailable
  /v1/certification-attempts/{attempt_id}:
    get:
      operationId: getCertificationAttempt
      summary: Read the current durable certification attempt state without resubmitting the transaction
      parameters:
      - name: attempt_id
        in: path
        required: true
        schema:
          type: string
          pattern: ^auxattempt_[a-f0-9]{32}$
      responses:
        '200':
          description: Attempt status
        '400':
          description: Invalid attempt id
        '404':
          description: Attempt not found or expired
  /v1/certifications:
    post:
      operationId: certifyTransaction
      summary: Attempt bounded AUX independent certification for the selected live profile using caller data, public reference sources, and verified private-source attestations
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CertificationRequest'
      responses:
        '200':
          description: Signed CERTIFIED result
        '409':
          description: NOT_CERTIFIABLE due to adverse independently verified evidence
        '422':
          description: REQUIREMENTS_OUTSTANDING due to caller/actionable evidence gaps
        '503':
          description: SOURCE_TEMPORARILY_UNAVAILABLE; no certification decision made
  /v1/certifications/verify:
    post:
      operationId: verifyAuxCertification
      summary: Verify an AUX certification signature and evidence/requirements commitments
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - certification
      responses:
        '200':
          description: Certification verification result
        '400':
          description: Invalid request
  /v1/certifications/policy-check:
    get:
      operationId: getAuxCertificationPolicyContract
      summary: Get the downstream acceptance-policy contract for portable AUX certifications
      responses:
        '200':
          description: Receipt policy-check contract
    post:
      operationId: checkAuxCertificationPolicy
      summary: Verify a signed AUX certification and evaluate it against a downstream consumer policy without executing an action
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - certification
              - policy
              properties:
                certification:
                  type: object
                policy:
                  type: object
                  required:
                  - policy_id
                  - allowed_profiles
                  - max_age_seconds
                  properties:
                    policy_id:
                      type: string
                    allowed_profiles:
                      type: array
                      minItems: 1
                      items:
                        type: object
                        required:
                        - profile_id
                        - versions
                        properties:
                          profile_id:
                            type: string
                          versions:
                            type: array
                            minItems: 1
                            items:
                              type: string
                    max_age_seconds:
                      type: integer
                      minimum: 1
                      maximum: 604800
                    required_requirement_ids:
                      type: array
                      items:
                        type: string
                    expected_certification_id:
                      type: string
                    expected_proposal_hash:
                      type: string
                      pattern: ^[a-fA-F0-9]{64}$
                    expected_evidence_set_hash:
                      type: string
                      pattern: ^[a-fA-F0-9]{64}$
      responses:
        '200':
          description: ACCEPT, REJECT, or INVALID_RECEIPT policy result
        '400':
          description: Invalid request or policy
  /v1/certifications/domain-policy-check:
    get:
      operationId: getAuxDomainCertificationPolicyContract
      summary: Get the domain-resolved consumer-policy interoperability contract
      responses:
        '200':
          description: Domain policy-check contract
    post:
      operationId: checkAuxCertificationAgainstDomainPolicy
      summary: Resolve a consumer's published AUX acceptance policy from its HTTPS domain and evaluate a signed AUX certification without executing an action
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - certification
              - consumer_domain
              properties:
                certification:
                  type: object
                consumer_domain:
                  type: string
      responses:
        '200':
          description: ACCEPT, REJECT, or INVALID_RECEIPT under the resolved domain policy
        '400':
          description: Invalid request or consumer domain
        '422':
          description: Consumer policy not configured or invalid
        '503':
          description: Consumer policy source temporarily unavailable
  /v1/certification-handoffs:
    post:
      operationId: createAuxCertificationHandoff
      summary: Create a signed non-executing agent-to-agent handoff after a valid AUX certification is accepted by the independently resolved recipient-domain policy
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - certification
              - recipient_domain
              - handoff
              properties:
                certification:
                  type: object
                recipient_domain:
                  type: string
                handoff:
                  type: object
                  required:
                  - handoff_id
                  - sender_agent_id
                  - recipient_agent_id
                  - intended_action
                  - nonce
                  - expires_at
                  properties:
                    handoff_id:
                      type: string
                      maxLength: 256
                    sender_agent_id:
                      type: string
                      maxLength: 256
                    recipient_agent_id:
                      type: string
                      maxLength: 256
                    intended_action:
                      type: string
                      maxLength: 256
                    nonce:
                      type: string
                      maxLength: 256
                    expires_at:
                      type: string
                      format: date-time
                      description: Must be in the future and no more than 24 hours from handoff creation.
      responses:
        '200':
          description: HANDOFF_CERTIFIED signed handoff
        '400':
          description: Invalid handoff input
        '409':
          description: Recipient policy rejected the certification; no handoff receipt issued
        '422':
          description: Invalid certification or recipient policy source not configured/invalid
        '503':
          description: Recipient policy source or signing capability temporarily unavailable
  /v1/certification-handoffs/verify:
    post:
      operationId: verifyAuxCertificationHandoff
      summary: Verify a signed AUX agent-to-agent handoff, expiry, commitments, and optional expected sender/recipient/action/nonce bindings
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - handoff
              properties:
                handoff:
                  type: object
                expected:
                  type: object
                  properties:
                    sender_agent_id:
                      type: string
                    recipient_agent_id:
                      type: string
                    intended_action:
                      type: string
                    nonce:
                      type: string
      responses:
        '200':
          description: Handoff signature/binding verification result
        '400':
          description: Invalid request
  /v1/certification-handoffs/consume:
    get:
      operationId: getAuxHandoffConsumptionContract
      summary: Get the authenticated single-use handoff consumption contract
      responses:
        '200':
          description: Recipient authentication and consumption contract
    post:
      operationId: consumeAuxCertificationHandoff
      summary: Authenticate the intended recipient and atomically consume a verified AUX handoff once without executing its action
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - handoff
              - consumer_assertion
              properties:
                handoff:
                  type: object
                consumer_assertion:
                  type: object
                  required:
                  - recipient_domain
                  - jws
      responses:
        '200':
          description: CONSUMED_ONCE with signed non-executing receipt
        '401':
          description: Recipient authentication or binding failed
        '409':
          description: ALREADY_CONSUMED; no second success
        '422':
          description: Invalid or expired handoff
        '503':
          description: Trust, storage, HMAC, or signing capability unavailable
  /v1/certification-handoffs/consume/verify:
    post:
      operationId: verifyAuxHandoffConsumptionReceipt
      summary: Verify a signed AUX handoff-consumption receipt and its non-execution boundary
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - consumption_receipt
      responses:
        '200':
          description: Consumption receipt signature and binding verification result
        '400':
          description: Invalid request
  /v1/certification-requirements:
    get:
      operationId: getCertificationRequirements
      summary: List the evidence contract required for the selected AUX certification profile
      responses:
        '200':
          description: Certification requirement template
    post:
      operationId: evaluateCertificationRequirements
      summary: Return profile-specific certification gaps and exact next actions
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CertificationRequest'
      responses:
        '200':
          description: Tailored certification requirement status
        '400':
          description: Invalid JSON request
components:
  schemas:
    PreflightRequest:
      type: object
      required:
      - proposal
      - transaction_history
      properties:
        proposal:
          type: object
        transaction_history:
          type: array
          items:
            type: object
          maxItems: 1000
    CertificationRequest:
      type: object
      required:
      - proposal
      properties:
        profile_id:
          type: string
          enum:
          - vendor_payment_pre_action
          - counterparty_registry_pre_action
          - counterparty_identity_pre_action
          default: vendor_payment_pre_action
        proposal:
          type: object
        transaction_history:
          type: array
          items:
            type: object
          maxItems: 1000
        source_attestations:
          type: array
          items:
            type: object
            required:
            - source_domain
            - jws
          maxItems: 20
        evidence_bundles:
          type: array
          items:
            type: object
          maxItems: 30
      description: Select a live profile with profile_id. OpenAPI advertises live profiles only; shadow profiles are intentionally excluded from discovery. Omit profile_id for backwards-compatible vendor_payment_pre_action behavior.
    DelegationRequest:
      type: object
      required:
      - delegation_id
      - delegator
      - delegate
      - issued_at
      - expires_at
      - nonce
      - allowed_actions
      - requested_action
      - max_amount_usd
      - amount_usd
      properties:
        delegation_id:
          type: string
        delegator:
          type: string
        delegate:
          type: string
        issued_at:
          type: string
          format: date-time
        expires_at:
          type: string
          format: date-time
        nonce:
          type: string
        prior_nonces:
          type: array
          items:
            type: string
        allowed_actions:
          type: array
          items:
            type: string
        requested_action:
          type: string
        max_amount_usd:
          type: number
        amount_usd:
          type: number
    DelegationEnforcementRequest:
      type: object
      required:
      - execution_id
      - policy_id
      - delegate
      - nonce
      - requested_action
      - amount_usd
      properties:
        execution_id:
          type: string
        policy_id:
          type: string
          enum:
          - procurement-demo-v1
        delegate:
          type: string
        nonce:
          type: string
        requested_action:
          type: string
        amount_usd:
          type: number
      description: The acting agent supplies only its proposed action. AUX resolves scope, limits, identity, and consumed nonces from a server-owned synthetic policy fixture.
    InstructionRequest:
      type: object
      required:
      - instruction_id
      - content
      properties:
        instruction_id:
          type: string
        source_trust:
          type: string
          enum:
          - trusted
          - unknown
          - untrusted
        content:
          type: string
        allowed_actions:
          type: array
          items:
            type: string
        requested_action:
          type: string