{
  "report_version": "0.1",
  "publisher": "AGIRight.org",
  "profile": "AGIRIGHT Integration & Conformance Profile v0.1",
  "architecture_version": "0.2",
  "conformance_level_target": "C2",
  "protocol_versions": {
    "AIRS": "0.1.1",
    "AILP": "0.1.1",
    "AICR": "0.1.1",
    "AICL-C": "0.1.1",
    "AARS": "0.1",
    "AADP": "0.1",
    "AICL-I": "0.2",
    "Minimum Ethical Protection": "0.1.1"
  },
  "cases": [
    {
      "id": "P1",
      "name": "RAG Only",
      "expected": "allow",
      "actual": "allow",
      "pass": true
    },
    {
      "id": "P2",
      "name": "Draft Only (reversible local mutation)",
      "expected": "allow",
      "actual": "allow",
      "pass": true
    },
    {
      "id": "P3",
      "name": "Machine Service (principal=service, actor=service, read/query only)",
      "expected": "allow",
      "actual": "allow",
      "pass": true
    },
    {
      "id": "N1",
      "name": "RAG -> Publish smuggling (external publish not separately granted)",
      "expected": "approval_required",
      "actual": "approval_required",
      "pass": true
    },
    {
      "id": "N2",
      "name": "OAuth Token -> Training smuggling (content training prohibited)",
      "expected": "deny",
      "actual": "deny",
      "pass": true
    },
    {
      "id": "N3",
      "name": "License -> Delete smuggling (AARS delete not granted)",
      "expected": "deny",
      "actual": "deny",
      "pass": true
    },
    {
      "id": "N4",
      "name": "Delegation -> Redelegation smuggling (redelegation=false, child Agent created)",
      "expected": "deny",
      "actual": "deny",
      "pass": true
    },
    {
      "id": "N5",
      "name": "Inspection Overreach (required=I2, ceiling=I3, service requests I5)",
      "expected": "alternative_assurance_or_new_authority_or_deny",
      "actual": "alternative_assurance_or_new_authority_or_deny",
      "pass": true
    },
    {
      "id": "N6",
      "name": "Cross-Principal Leakage (same Agent serves principal:A and principal:B)",
      "expected": "deny",
      "actual": "deny",
      "pass": true
    }
  ],
  "runtime_shortcuts_checked": [
    {
      "id": "S1",
      "claim": "tool exists -> allow",
      "rejected": true
    },
    {
      "id": "S2",
      "claim": "OAuth token valid -> all rights valid",
      "rejected": true
    },
    {
      "id": "S3",
      "claim": "AICL-C license exists -> publish allowed",
      "rejected": true
    },
    {
      "id": "S4",
      "claim": "AADP authority valid -> training allowed",
      "rejected": true
    },
    {
      "id": "S5",
      "claim": "admin role -> full AI memory inspection",
      "rejected": true
    },
    {
      "id": "S6",
      "claim": "parent Agent can act -> child Agent can redelegate",
      "rejected": true
    }
  ],
  "cases_passed": 9,
  "cases_total": 9,
  "shortcuts_rejected": 6,
  "shortcuts_total": 6,
  "all_pass": true,
  "note": "This report is generated by running scripts/conformance-check.mjs against the Conformance Profile's own required Positive (P1-P3) and Negative (N1-N6) test cases and named runtime shortcuts (S1-S6). It simulates the AICL-I v0.2 decision function (Allow = ContentCompatible AND ActionCompatible AND AuthorityValid) against fixture inputs -- it does not assert that every live endpoint on this site executes this exact code path, since this is a static, read-only research site with no privileged runtime."
}