{"dap_ingress":[{"component":"prism","conformance_corpus":["prism/cimd-unit-suite","prism/cimd-hosted-authorization"],"dap_relationship":"ingress_not_substitute","discovery":["exact_client_identifier_url"],"establishes":["exact_client_identifier_url","redirect_registration","published_metadata","software_statement_input"],"mechanism":"cimd","profile":"kya-public-client-v1","proof":["document_digest","redirect_binding","software_statement_input"],"revision":"draft-ietf-oauth-client-id-metadata-document-02","role":"metadata_and_provenance","subject_identifier":"exact_client_identifier_url","support":"profiled","transport":["https"],"unsupported":["private_key_jwt_admission","conditional_cache_revalidation","retroactive_grant_revocation_from_metadata_change"]},{"component":"halo","conformance_corpus":["halo/webbotauth-rail","halo/webbotauth-unit-suite"],"dap_relationship":"ingress_not_substitute","discovery":["signature_agent_directory"],"establishes":["resolved_url_key_association","signed_request_proof","dap_holder_key_input"],"mechanism":"web_bot_auth","profile":"kya-directory-ed25519-v1","proof":["rfc9421_http_message_signature","resolved_url_key_association"],"revision":"draft-meunier-webbotauth-httpsig-protocol-02","role":"request_proof_and_holder_binding","subject_identifier":"resolved_directory_url_and_key_thumbprint","support":"profiled","transport":["https"],"unsupported":["cimd_discovery","multiple_web_bot_auth_signatures","algorithms_other_than_ed25519"]},{"component":"halo","conformance_corpus":["halo/webbotauth-jwks-discovery","halo/http-jwks-routes"],"dap_relationship":"ingress_not_substitute","discovery":["jwks_uri"],"establishes":["resolved_origin_key_association","dap_holder_key_input"],"mechanism":"jwks_uri","profile":"kya-jwks-uri-ed25519-v1","proof":["same_origin_jwks_publication","fresh_nonce_holder_possession"],"revision":"com.trulioo.kya/jwks-uri-ingress/1.0.0","role":"discovery_proof_and_holder_binding","subject_identifier":"issuer_origin_and_key_thumbprint","support":"profiled","transport":["https"],"unsupported":["algorithms_other_than_ed25519","cross_origin_jwks","caller_supplied_operator_claims"]}],"enterprise_admission":{"challenge_endpoint":"/kya/possession-challenge","endpoint":"/kya/presentation/admit","live_status_required":true,"live_trulioo_source_capable":true,"production_provenance_enforced":true,"production_provenance_policy_configured":true,"rate_limit_enabled":true,"readiness_endpoint":"/kya/enterprise-admission/ready","ready":true,"shared_nonce_store_ready":true,"single_use_nonce":true,"tenant_bound":true,"version":"halo-dap-admission/v1"},"issuer":"https://identity.trulioo.com","jwks_uri":"https://identity.trulioo.com/.well-known/jwks.json","rails":[{"alg":"EdDSA","binding":"required","carrier":"capabilities.extensions[] on the agent card","description":"Agent2Agent v1.0.0 card extension (capabilities.extensions[])","freshness":"OfflineOk","publishes_agent_card":true,"rail":"a2a","resolve":"/kya/attestation/{id}","schema_url":"https://identity.trulioo.com/a2a/kya/v1/schema.json","tier":"discovery","typ":"kya-attestation+jwt"},{"alg":"ES256","binding":"required","carrier":"the checkout `signals` object","description":"UCP checkout signals attestation (com.trulioo.kya)","freshness":"CentralFresh","publishes_agent_card":false,"rail":"ucp","resolve":"/ucp/kya/resolve/{id}","schema_url":"https://identity.trulioo.com/ucp/kya/v1/schema.json","tier":"capability","typ":"kya-attestation+jwt"},{"alg":"ES256","binding":"required","carrier":"the mandate chain's principal credential","description":"AP2 SD-JWT-VC principal credential (cnf holder-bound, mandate-chain)","freshness":"CentralFresh","publishes_agent_card":false,"rail":"ap2","resolve":"/ap2/kya/resolve/{id}","schema_url":"https://identity.trulioo.com/ap2/kya/v1/schema.json","tier":"capability","typ":"dc+sd-jwt"},{"alg":"ES256","binding":"required","carrier":"the CheckoutSession `metadata` object","description":"ACP checkout metadata attestation (com.trulioo.kya)","freshness":"CentralFresh","publishes_agent_card":false,"rail":"acp","resolve":"/acp/kya/resolve/{id}","schema_url":"https://identity.trulioo.com/acp/kya/v1/schema.json","tier":"capability","typ":"kya-attestation+jwt"},{"alg":"ES256","binding":"required","carrier":"`PaymentRequirements.extra`","description":"x402 PaymentRequirements.extra attestation (com.trulioo.kya)","freshness":"CentralFresh","publishes_agent_card":false,"rail":"x402","resolve":"/x402/kya/resolve/{id}","schema_url":"https://identity.trulioo.com/x402/kya/v1/schema.json","tier":"capability","typ":"kya-attestation+jwt"},{"alg":"ES256","binding":"required","carrier":"OAuth-Client-Attestation and OAuth-Client-Attestation-PoP headers","description":"Pre-release ABCA profile (draft-ietf-oauth-attestation-based-client-auth-11): ES256 client_id + cnf, attestation PoP, challenge and replay checks; Service/HTTP integrated locally, release qualification pending; DPoP combined mode unsupported","freshness":"CentralFresh","publishes_agent_card":false,"rail":"abca","resolve":"/abca/kya/resolve/{id}","schema_url":"https://identity.trulioo.com/abca/kya/v1/schema.json","tier":"clientauthentication","typ":"oauth-client-attestation+jwt"}],"revocation":{"checkable_anonymously":true,"format":"W3C Bitstring Status List (Multibase base64url encodedList), signed as a compact JWS (typ=kya-status-list+jwt)","pairwise":"in the pairwise profile a presentation's status_reference is aliased per relying-party audience, so two verifiers of the same credential resolve different status URLs and cannot correlate the holder through them","pairwise_status_list":"/kya/aliased/status/{token}","reference_claim":"status_reference","reference_form":"{status_list}#{index}","status_list":"/kya/status/list/{id}","status_purpose":"revocation"},"software_artifacts":{"checkpoint_url":"https://identity.trulioo.com/kya/software-artifacts/log/checkpoint","consistency_proof":"/kya/software-artifacts/transparency/proof/consistency{?m,n}","inclusion_proof":"/kya/software-artifacts/transparency/proof/inclusion{?index,tree_size}","jwks_uri":"https://identity.trulioo.com/kya/software-artifacts/transparency/jwks.json","leaf_index_claim":"latest_transparency_leaf_index","leaf_index_source":"GET /kya/software-artifacts/releases/{release_id}/status","log_id":"com.trulioo.kya/software-artifact-events/1","origin":"identity.trulioo.com/kya/software-artifacts/log","separate_from":"https://identity.trulioo.com/kya/log","sth_url":"https://identity.trulioo.com/kya/software-artifacts/transparency/sth","tiles_url":"https://identity.trulioo.com/kya/software-artifacts/log","witness":"none"},"transparency":{"checkpoint_url":"https://identity.trulioo.com/kya/log/checkpoint","consistency_proof":"/kya/transparency/proof/consistency{?m,n}","inclusion_proof":"/kya/transparency/proof/inclusion{?index,tree_size}","leaf_index_claim":"transparency_leaf_index","leaf_index_source":"GET /kya/attestation/{id}","monitor_url":"https://identity.trulioo.com/kya/transparency/monitor","posture":{"hardened":false,"provenance":"enforced","signing":"kms","split_view_detection":false,"witness":"self-cosigned"},"sth_url":"https://identity.trulioo.com/kya/transparency/sth","tiles_url":"https://identity.trulioo.com/kya/log"}}