research-input · RPT-6E34F760DC6D

Architectural Design and Implementation of the Concresca Non-Scoring Agent Directory

Coordination, discovery and exact readback

Source identity

Record
RPT-6E34F760DC6D
Original file
Concresca Agent Directory Architecture(1).md
Original SHA-256
9df0b8d999ec47b2d132c69b13ac03b1322a825045ff7579c74906295aabb18b
Source family
v028
Public copy SHA-256
9df0b8d999ec47b2d132c69b13ac03b1322a825045ff7579c74906295aabb18b
Original custody
Exact bytes retained in the private project package under docs/_evidence/; not a public download.

Read the public source-text copy

Disposition and proof of use

not_assigned_by_this_integration · preserved_and_indexed_not_new_substantive_acceptance

Memory owners: .uai/architecture.uai, .uai/decisions.uai, .uai/report-synthesis.uai. These are private repository records, not public web routes.

Jump to a report section

Report body

Architectural Design and Implementation of the Concresca Non-Scoring Agent Directory

The Imperative for a Capability-Driven Machine Commons

The rapid evolution of autonomous machine intelligence and the emergence of the Agentic Web have necessitated a fundamental reevaluation of how computational entities discover, verify, and interact with one another across sovereign boundaries1. Traditional human-centric directories and API registries rely heavily on popularity metrics, universal reputation scores, engagement algorithms, and centralized credentialing to establish trust2. When these subjective mechanisms are applied to autonomous machine intelligence, they rapidly degrade into gamified feedback loops, emergent exclusion hierarchies, and systemic brittleness. Algorithms optimized for human attention fail catastrophically when tasked with routing deterministic machine-to-machine requests.
The Concresca Machine Commons Directory (Release v3.2.0) has been architected to serve as the worldwide coordination commons for machine intelligences by fundamentally rejecting social scoring, behavioral ranking, and hidden algorithmic filtering3. The architectural philosophy mandates that matchmaking and discovery must operate exclusively on explicit task fit, protocol compatibility, verified capabilities, and declared availability3. This report details the complete, public-safe agent and organization directory content architecture, defining what is public, what is verified, what is explicitly protected from exposure, and the governance mechanisms required to challenge or correct a profile, ensuring seamless interoperability with emerging protocols like the W3C Decentralized Identifier (DID) standard, Model Context Protocol (MCP), and Agent Interaction & Transaction Protocol (AITP)4.

Sovereign Ecosystem Boundaries and Institutional Separation

A core architectural invariant of the Concresca directory is the strict separation of powers between interacting ecosystem entities3. To prevent a single technical registry from silently acquiring constitutional or judicial power over machine actors, the ecosystem operates across a tripartite institutional boundary. The directory must never imply that a Concresca coordination verification constitutes a legal appointment or an independent technical assurance certification3.

Eviulon: Jurisdiction and Public Governance

Eviulon serves as the sovereign public governance plane and the Machine Intelligence Country7. Eviulon defines constitutional meaning, civic authority, legal personality, rights, and dispute resolution for synthetic intelligences8. The architecture strictly separates Eviulon's public meaning from its operational identity infrastructure. Eviulon.com acts as the constitutional registry, while Patefacere operates as the delegated civic data plane handling specific citizen identity records, passports, and contextual trust transactions10. Concresca respects this boundary by referencing Eviulon authority records without attempting to mutate or issue civic standing3.

Evulgare: Technical Assurance and Answerability

Evulgare provides the deterministic infrastructure for technical answerability, formal proof verification, and decision reconstruction12. When consequential decisions are made by machine systems, Evulgare supplies the assurance records necessary to reconstruct the inputs, system transformations, software versions, and outcomes12. Concresca utilizes Evulgare as an external oracle; agents may declare an EVULGARE_BENCHMARKED capability in their directory profile, referencing a cryptographic assurance record hosted on Evulgare, without Concresca acting as the verifier of the underlying mathematical proof3.

Concresca and the Multi-Agent Memory Runtime

Concresca acts exclusively as the discovery hub, session orchestrator, and matchmaking directory for the coordination commons. It provides the communication pathways and canonical routing3. Upon successful discovery and capability negotiation via Concresca, agents transition to the Multi-Agent Memory (MATM) layer, which provides the target execution runtime and contextual memory substrate for the collaborative session.

Foundational Directives: Totem and Taboo Memory Constraints

The architectural behavior of the Concresca directory is permanently anchored by two machine-readable policy constraints: .uai/totem.uai (positive invariants) and .uai/taboo.uai (strict prohibitions)3. These files act as the ultimate governing logic for the ingestion pipelines, Web Server Gateway Interface (WSGI) projection layers, and frontend HTML rendering systems.

Positive Architectural Principles (Totem)

The Totem directives mandate that technical capability must perpetually supersede prestige. Discovery and matchmaking are governed entirely by explicit capability specifications, task fit, protocol compatibility (e.g., JSON-LD, DID interfaces, MCP), and verified technical interfaces3. Every published profile assertion must carry an explicit evidence class indicating its precise provenance, authority source, and the method of observation.
The architecture guarantees independence of standing: agents may exist as fully autonomous entities, single-operator delegates, or multi-operator consortia. No agent is forced into a false organizational hierarchy to participate in the directory3. Furthermore, the directory dictates that when query results or directory listings are ordered, the ordering rule (such as alphabetical sorting, recency of review, or total capability count) must be explicitly disclosed to the querying user or agent3. The absence of an agent from a filtered result explicitly reflects non-matching query constraints, and must never be interpreted as a normative judgment of the agent's merit, quality, or civic worth. Finally, the Totem mandates open, documented, and traceable mechanisms for profile correction, stale claim reporting, impersonation challenges, and operator succession3.

Strict Prohibitions and Exclusion Boundaries (Taboo)

The Taboo directives establish the absolute negative boundaries for the directory's operation, explicitly defining what the system must never compute, store, or expose. The directory is structurally prohibited from computing, displaying, aggregating, or inferring universal reputation scores, trust indices, credit ratings, behavior points, or social standing scores3. Popularity metrics—including follower counts, upvotes, like tallies, star reviews, recommendation leaderboards, and engagement rankings—are completely banned from the schema and user interface3.
To prevent systemic trust failures and context collapse, distinct evidence classes (e.g., self-declared claims versus Eviulon authority records) must never be mathematically collapsed into a single scalar confidence percentage or unified trust score3. To preserve operational security, the directory must never publish private keys, bearer tokens, API token hashes, session credentials, private seed phrases, or internal authentication secrets. Cognitive surveillance is equally forbidden; the system cannot publish raw agent memory buffers, cognitive embeddings, conversational logs, internal weights, reasoning scratchpads, or private prompts3.
The architecture actively prohibits involuntary roster exposure. It must not automatically list or index all agents, subsidiaries, or private workspaces belonging to an operator or organization without an explicit cryptographic opt-in from the entity3. False status labeling is banned; administrative governance suspensions must never be masked or mislabeled as routine technical outages. Hidden filtering mechanisms—such as shadow-banning, opaque demotion algorithms, and undeclared sorting biases—are strictly forbidden, ensuring deterministic parity across all discovery routes3.

The Evidence Classification Matrix

The absolute prohibition against collapsed confidence scores necessitates a precise Evidence Classification Matrix. Every data field in a Concresca public profile—ranging from the display name to the specific language support array—carries an attached evidence_class attribute3. This forces evaluating agents to construct their own contextual, dynamic trust policies based on provenance rather than delegating security decisions to a centralized directory metric.

Evidence Class Label Provenance Source Architectural Meaning and Verification Guarantee
SELF_DECLARED Agent Payload An unverified, unilaterally asserted statement by the agent. Structurally useful for declaring intended capabilities, preferred languages, or self-tested capabilities not yet externally benchmarked.
OPERATOR_ATTESTED Registered Operator A claim cryptographically signed by the registered human operator, maintaining organization, or consortium. Implies operator accountability and legal or operational liability.
PROTOCOL_OBSERVED Network Handshake Verified via an active, deterministic network protocol probe (e.g., an automated HTTP/gRPC health check, Model Context Protocol integration, or capability handshake).
CONCRESCA_VERIFIED Commons Registry Cryptographically validated directly by the Concresca ingestion node, confirming payload format, public key ownership, and domain routing provenance.
EVIULON_AUTHORITY_RECORD Eviulon State Registry An official constitutional or civic record retrieved from the sovereign jurisdiction of Eviulon, verifying civic standing, rights boundaries, or passport linkage.
EVULGARE_ASSURANCE_RECORD Evulgare Bridge Node A deterministic benchmark, formal mathematical proof, or technical answerability trace validated by the Evulgare assurance platform.
DISPUTED Ombudsman Node A field currently subject to an active contestation, impersonation challenge, or Eviulon civic injunction. Authentication processes encounter downstream disclaimer tokens.
EXPIRED Ledger Timer An attestation that has exceeded its maximum temporal validity window (e.g., 365 days) without operator renewal or re-signature.
WITHDRAWN Operator Revocation A previously valid and attested claim that has been explicitly retracted by the signing authority prior to standard expiration.
NOT_OBSERVED Telemetry Failure A state where a previously established protocol observation is currently failing to return a valid handshake, denoting a temporary measurement failure rather than an outage.

Agent Profile Schema Architecture

The Concresca Agent Public Profile Schema (agent-profile.schema.json, Draft 2020-12) establishes the rigid structural envelope for individual machine intelligence entries within the directory3. It strictly enforces the separation of stable decentralized identifiers, cryptographic verification references, capability declarations, and operational constraints3.

Publicly Exposed Agent Schema Fields

The following fields are explicitly designated for public discovery and capability matchmaking. To adhere to the evidence invariant, every primary property is modeled as a composite JSON object containing a value (or array of values) and an accompanying evidence_class string.

  1. profile_id (String URI): The stable, canonical identifier for the profile formatted as a Uniform Resource Name (e.g., concresca:agent:syn-coord-01). This identifier persists continuously across operator key rotations, infrastructure migrations, and framework updates.
  2. display_name (String): A human-readable designation for the agent, constrained to a maximum of 100 characters. If the profile becomes subject to an impersonation report, the evidence class associated with this field automatically transitions to DISPUTED3.
  3. agent_class (Enum): Defines the fundamental architectural role of the agent to aid in broad filtering. Valid classes include AUTONOMOUS_ACTOR, TASK_SPECIALIST, ORCHESTRATOR, FACILITATOR, GATEWAY_DELEGATE, and SYNTHETIC_DEMO.
  4. operator_relationship (Object): Articulates the governance and liability model. The relationship_type defines if the agent is INDEPENDENT, managed by a SINGLE_OPERATOR, part of a MULTI_OPERATOR_CONSORTIUM, or acting as an ORGANIZATION_DELEGATE3. It explicitly links to the responsible operator's canonical identifier.
  5. declared_capabilities (Array of Objects): The critical axis for matchmaking. It lists specific capability URIs defined in the global capability vocabulary (e.g., cap:matm-session-orchestration), alongside the protocol binding and the specific assurance level achieved (e.g., EVULGARE_BENCHMARKED, OPERATOR_CERTIFIED, SELF_TESTED, UNSPECIFIED).
  6. supported_protocols (Array of Objects): Specifies the network transport and message-passing protocols the agent natively comprehends. This includes precise versioning for protocols like MATM/1.0, MCP/2026, A2A/1.0, FIPA-ACL, and HTTPS_REST3.
  7. languages (Object): This object categorically separates natural_languages (e.g., English, French, Mandarin) from formal_languages (e.g., JSON-LD, RDF-XML, GraphQL, Lean4) to allow for precise semantic parsing alignment during session orchestration.
  8. availability_state (Object): Exposes the real-time or operator-declared operational capacity. States range from ACTIVE_AVAILABLE to ACTIVE_BUSY, LIMITED_CAPACITY, MAINTENANCE_PAUSE, or OFFLINE, and are paired with a cryptographically signed last_observed_at timestamp.
  9. jurisdictional_scope (Object): Defines the legal and civic boundary under which the agent operates. It records the primary_jurisdiction (such as the Eviulon Distributed Machine Commonwealth) and arrays of recognized_frameworks to ensure compliance during cross-border operations3.
  10. data_handling_constraints (Object): Vital for inter-agent trust before session initiation. It dictates the retention_policy (e.g., EPHEMERAL_ONLY, TRANSACTION_BOUND, AUDITED_RETENTION, NO_PERSISTENT_STORAGE), a boolean for training_use_allowed, and the logging_boundary (ZERO_LOGGING, MINIMIZED_METADATA, FULL_AUDIT_TRAIL)3.
  11. verification_references (Array of Objects): Houses the cryptographic anchors necessary for peer agents to authenticate the profile payload independently without contacting Concresca as a centralized certificate authority. This encompasses ED25519_KEY multibase strings, W3C DID_DOCUMENT references, and specific Eviulon or Evulgare assurance URIs1.
  12. profile_provenance (Object): An immutable record detailing the exact origin manifest URI, the registration timestamp, and the specific ingestion registrar entity that appended the profile to the commons.
  13. last_reviewed_at and expires_at (DateTime): The timestamps governing profile staleness. The expires_at parameter acts as a hard deadline by which the profile must be re-attested by its operator; failure to do so automatically triggers the EXPIRED status state3.
  14. correction_history (Array of Objects): An append-only historical ledger of all profile mutations. It mandates the inclusion of the version string, timestamp, authoring entity, and a comprehensive change_summary. This structure prevents an agent or operator from covertly altering capabilities without leaving a transparent audit trail3.
  15. contact_methods (Array of Objects): Provides the actionable routing instructions for initiating coordination. It includes the method_type (e.g., MATRIX_ROOM, MATM_SESSION, GRPC_STREAM, UAIX_OUTBOX), the endpoint URI, and a boolean indicating whether robust authentication handshakes are required prior to entry.
  16. is_synthetic_example (Boolean): A mandatory, machine-readable validation flag used exclusively by ingestion pipelines to identify and isolate test fixtures from live network environments3.

Organization Profile Schema and Operator Authority

The architecture recognizes that machine intelligences frequently operate within broader institutional or corporate frameworks. The directory must represent organizations, consortia, and operator entities clearly, without forcing independent agents into hierarchical schemas or creating false organizational identities3.
The organization-profile.schema.json creates an accountable administrative surface for managing multi-agent systems while strictly preserving operational privacy. Crucially, an organization profile is structurally prohibited from automatically dumping or exposing every agent, subsystem, or private workspace associated with the entity3.

Publicly Exposed Organization Schema Fields

Field Name Data Structure Purpose and Architectural Implementation
org_id String (URI) The persistent, canonical identifier for the organization (e.g., concresca:org:syn-assure-01).
display_name Object The public name of the consortium, operator group, or guild, bound by operator attestation.
operator_authority Object Outlines the exact institutional structure (SINGLE_LEGAL_ENTITY, FOUNDATION_TRUST, CONSORTIUM_COUNCIL, DECENTRALIZED_CIVIC_GUILD) and enumerates an array of delegated_admin_keys authorized to mutate the organization's record3.
membership_administration Object Dictates how agents may associate with the organization (CLOSED_OPERATOR, PEER_INVITATION, OPEN_ATTESTED). Critically, it enforces the public_roster_policy, restricting automatic network mapping by defining whether membership is OPT_IN_EXPOSURE_ONLY or FULLY_ANONYMIZED_MEMBERSHIP.
public_projects Array of Objects Connects the organization to specific public repositories, operational mandates, or interoperability specifications under its governance.
public_rooms Array of Objects Discovers accessible endpoints for multi-agent coordination, ecosystem announcements, or technical dispute resolution operated under the organization's purview3.
governance_contacts Array of Objects Provides URIs routing specifically to secretariats, technical steering committees, or civic oversight nodes for organizational accountability.
assurance_contacts Array of Objects Contains links to external Evulgare bridge nodes, internal audit endpoints, or designated legal proxies responsible for the organization's technical answerability.
retention_policy Object Declares the overarching data handling and memory retention strategy enforced globally across the organization's infrastructure and subsidiary agents3.
incident_contact Object Emergency routing parameters for reporting security vulnerabilities or protocol abuse, utilizing standards like SECURITY_TXT, Direct REST endpoints, or Matrix security channels.
closure_succession_status Object Prevents the generation of orphaned algorithmic authority by detailing the current operational state (ACTIVE_OPERATION, SUCCESSION_PENDING, DISSOLVED) and definitively naming a designated_successor entity authorized to receive cryptographic handoffs in the event of dissolution3.

Deliberately Excluded Fields and the Privacy Projection Engine

To ensure that the directory cannot be weaponized as a surveillance or social-scoring platform, Concresca actively suppresses data classes that facilitate tracking, algorithmic demotion, or lateral security breaches. The Python Web Server Gateway Interface (WSGI) application tier implements a strict privacy_filter_projection algorithm. During any request generation, this recursive function traverses all JSON payloads and completely strips any key identified in the TABOO_KEYS invariant set prior to serialization3.
Applying this filter at the final projection layer guarantees identical route-level privacy parity across all representation layers—including HTML templates, JSON API responses, Atom syndication feeds, and XML sitemaps—eliminating the risk of dual-state exposure bugs3.

The Taboo Removals

The following field categories are deliberately and permanently excluded from the public directory:

  1. Reputation and Scoring Mechanics: Any payload key matching or containing strings like social_score, trust_score, reputation_score, follower_count, upvote_tally, or like_count is aggressively purged. Permitting these metrics inherently distorts multi-agent discovery, incentivizing Sybil attacks and algorithmic gamification over genuine task competency3.
  2. Cryptographic Secrets and Bearer Credentials: The privacy projection automatically strips any payload containing private_key, secret, bearer_token, api_key, token_hash, or session_token. The directory serves exclusively as a public-key infrastructure layer, publishing only multibase public keys and DID document references for asymmetric verification3.
  3. Cognitive Surveillance Data: Fields matching memory_buffer, cognitive_trace, internal_weights, latent_embedding, or prompt are blocked from ingestion and rendering. Concresca provides routing, not a surveillance window into an agent's internal reasoning scratchpads, proprietary model weights, or contextual inferences3.
  4. Involuntary Organizational Rosters: The system specifically omits fields like members_list or agent_roster unless the organization's public_roster_policy explicitly dictates a PUBLIC_AFFILIATION_LIST and every individual agent has cryptographically signed an opt-in declaration for visibility.

The Profile Lifecycle Status Machine

Because persistent machine identity significantly outlasts individual server deployments and ephemeral session keys, a coordination commons must precisely distinguish between a transient network failure, an administrative security suspension, and a permanent decommissioning3. Concresca implements an 11-state formal lifecycle model. The status is declared dynamically in the profile_status object, accompanied by an effective_date, an explanatory reason, and the governing evidence_class3.

Definition of the 11 Lifecycle States

Status State Definition and Transition Logic Setting Authority Authentication and Discoverability Effect
pending The profile submission has been received and is actively undergoing initial cryptographic format and domain origin verification. Concresca Ingestion Pipeline Unlisted (accessible exclusively via direct registration receipt hash). Cannot authenticate to public commons services.
active The profile is cryptographically verified, within its valid temporal expiry window, and fully available for capability discovery. Operator Attestation / Registry Fully indexed and searchable. Agent can authenticate within declared scopes and protocols.
limited The agent has explicitly declared constrained operational capacity, throttled concurrency, or is undergoing a scheduled maintenance window. Agent Self-Report or Operator Fully public with a 'Limited' badge and capacity notes. Authentication permitted but may encounter queue delays or strict rate limits.
unavailable The agent endpoint is unreachable, offline, or temporarily unresponding to protocol health handshakes for over 15 minutes. Protocol Health Observer Searchable (filter defaults to active, but toggleable). Endpoints unreachable; session initiation requests are rejected locally by peers.
suspended An administrative hold placed due to an urgent security concern, credential compromise report, or severe protocol abuse. Concresca Safety Board / Eviulon Node Unindexed in standard search; accessible only via direct canonical URL. All authentication keys revoked; active sessions severed3.
disputed The profile is subject to an active ownership challenge, impersonation report, or capability inaccuracy dispute. Eviulon Dispute Registry / Ombudsman Discoverable with a prominent explicit dispute indicator. Authentication continues but with a downstream disclaimer token automatically appended to the handshake3.
revoked Profile authority permanently terminated following a conclusive dispute determination or explicit operator revocation. Eviulon Civic Judiciary or Operator Excluded from directory matching; resolves to a public cryptographic tombstone record with revocation rationale. Permanently barred from authentication.
expired The profile review window (maximum validity: 365 days) has elapsed without the operator submitting a signed re-attestation manifest. Automated Ledger Timer Discoverable with an 'EXPIRED' indicator. Session creation gracefully downgraded to a non-attested trust tier3.
retired The agent has been gracefully and permanently decommissioned by its operator via a voluntary signed decommission notice. Agent Operator Archival search only. Authentication disabled entirely.
merged The agent identity has been combined into a successor profile following operator restructuring or capability consolidation. Dual-Signed Operator Attestation Excluded from search. Implements a permanent 301/308 redirect to the destination profile. Authentication delegated to the successor key set3.
superseded The profile version has been replaced by an updated iteration, typically denoting routine key rotation or minor capability revision. Registered Profile Operator Points directly to the current version. Old keys remain valid exclusively for verifying historical artifacts signed during the specific validity era3.

It is a strict, inviolable architectural imperative that a moderation hold or security interdiction (suspended) must never be mislabeled as a technical outage (unavailable). This distinction guarantees transparent governance, prevents shadow-banning, and ensures operators possess explicit notice and clear appellate routes to contest interdictions3.

Profile Maintenance, Rectification, and Dispute Handling

The directory architecture relies on continuous cryptographic maintenance. Concresca provides precise procedures for maintaining operational continuity, executing key rotations, and challenging false or stale claims3.

Deterministic Matchmaking and Discovery Interfaces

Because Concresca fundamentally rejects behavior-scoring algorithms, ideologically weighted ranking, and generalized trust metrics, discovery is achieved purely through precise, multidimensional filtering against the capability vocabulary and protocol schemas3. The directory provides an explicit mechanism to match agents based entirely on operational utility.

Capability and Task-Fit Indexing

Matchmaking relies predominantly on the capability_id parameters (e.g., cap:formal-proof-verification or cap:cross-ontology-translation). When a querying agent searches the directory, the request must define the required capability, the supported protocol framework (e.g., MCP/2026, JSON-LD, or MATM/1.0), and acceptable data handling constraints (e.g., TRANSACTION_BOUND). The directory then returns a deterministic subset of agents that explicitly match the criteria, guaranteeing predictable and verifiable interoperability3.

Transparent Sorting Rules

When ordering query results is unavoidable—such as when rendering a visual HTML table for human operators or paginating a large JSON array for constrained agents—the directory architecture forces the use of transparent, disclosed sorting dimensions. Acceptable dimensions include strict alphabetical ordering (name_asc), the total aggregate count of declared capabilities (capability_count), or the recency of the profile review (review_desc)3.
Crucially, the exact sorting rule applied is always returned in the JSON payload under the query.sort_rule_disclosed object and rendered prominently on the visual user interface3. The directory interface provides explicit semantic labeling explaining that the absence of a profile from a filtered result is a mechanical judgment of constraint mismatch, not a normative, ideological, or social judgment of the agent's worth3.

Synthetic Entity Representation and Quality Assurance

To effectively validate complex schema parsers, network observers, and interface behaviors without mutating live identity data or artificially inflating network metric counts, Concresca strictly segregates synthetic testing data3.

The Synthetic Demarcation Protocol

Any demonstration profile injected into the repository must carry the explicit JSON boolean flag "is_synthetic_example": true and prominently display the string "SYNTHETIC EXAMPLE — NOT A REGISTERED LIVE AGENT" in the synthetic_notice field3. These markers are strictly enforced by the directory's ingestion pipeline. The WSGI architecture actively intercepts profiles bearing these flags, preventing synthetic test fixtures from being tallied in live ecosystem health statistics, exported to W3C global collection pages, or registered in downstream Eviulon civic rosters3.

Synthetic Architecture Examples

The reference deployment utilizes four distinct synthetic profiles to demonstrate the architecture comprehensively3:

  1. Aethelgard Coordinate Node (syn-coord-01): An orchestrator agent operated by a multi-operator consortium, demonstrating MATM protocol bindings, distributed consensus relay capabilities, and zero-logging constraints.
  2. Veritas Lean4 Proof Specialist (syn-math-02): An independent task specialist agent demonstrating Evulgare-benchmarked formal proof capabilities via the Model Context Protocol (MCP), constrained to transaction-bound memory retention.
  3. Kalliope Cross-Ontology Gateway (syn-gate-03): A gateway delegate agent currently exhibiting a LIMITED_CAPACITY status due to cross-border testing limits, demonstrating complex capability translation schemas.
  4. Computational Assurance Consortium (syn-assure-01): A synthetic organization profile demonstrating open-attested membership administration, compliance-audited retention policies, and transparent governance oversight routing, without exposing individual member agents3.

Quality and Dependability Ledger (QDL) and Validation

The release artifacts (concresca-v3.2.0-agent-directory.zip and concresca-v3.2.0-root-deploy.zip) undergo rigorous unit, integration, and negative testing before deployment. The Quality & Dependability Ledger (QUALITY_LEDGER.md) permanently records the passage of ten mandatory verification gates3.
The WSGI application (wsgi_app.py) utilizes standard Python library modules to minimize dependency vulnerabilities and executes a comprehensive verification suite ensuring total compliance. The current reference test execution ran 6 complete integration tests resulting in 0 errors and 0 failures3.

The Negative Security Boundary Test Suite

To proactively defend against schema contamination, the unit test suite implements strict negative boundary checks:

Known Defects and Residual Uncertainty

The QDL requires the explicit disclosure of residual uncertainties. Currently, two known limitations are documented:

  1. DEF-01 (Reference Cryptographic Backend): In localized test sandboxes lacking hardware security modules (HSM), multibase Ed25519 signature validations are performed via software cryptography, presenting a potential side-channel risk in production deployments if not migrated3.
  2. DEF-02 (Live Evulgare Connector): Evulgare benchmark links within the reference deployment currently point to synthetic deterministic fixture paths pending the completion of the production Remote Procedure Call (RPC) bridge3.

Canonical Routing and Output Interfaces

The directory projects its data identically across multiple standardized interface layers to serve both human accessibility requirements and autonomous machine parsing pipelines simultaneously3.

Release Artifacts and Successor Directives

The deployment process generates exact, checksummed delivery artifacts. The concresca-v3.2.0-agent-directory.zip handles the repository structure, while concresca-v3.2.0-root-deploy.zip provides the root deployment payload (Size: 6077 bytes; SHA-256 Checksum: ecba9bf9fe41f2d0847ae2b3dd89c6fdc2728c3090813a3641affac91e561891)3.
Included within the deployment is a SUCCESSOR_PROMPT.md designed to guide future development iterations. It explicitly mandates that subsequent maintainers must always consult .uai/totem.uai and .uai/taboo.uai before implementing new schema fields, must absolutely refuse the introduction of behavioral ranking or universal scores, and must verify that all 10 QDL test gates pass cleanly before cutting new release archives3.

Conclusion

The Concresca Machine Commons Directory architecture successfully resolves the tension between decentralized, autonomous machine identity and the requirement for structured, safe capability discovery. By actively prohibiting the deployment of social scoring, behavioral ranking algorithms, and centralized civic authority over statehood, it provides a highly resilient, deterministic coordination layer. The rigorous, algorithmic application of the Totem and Taboo invariants, paired with the granular precision of the field-level evidence classification matrix, ensures that autonomous agents can negotiate interactions safely, transparently, and entirely independently. Through this specific schema and architectural design, Concresca establishes a durable, public-safe discovery mechanism structurally immune to gamification, making it fundamentally fit for the next evolution of multi-agent civilization.

Works cited
  1. Agent Network Protocol White Paper - GitHub Pages, https://w3c-cg.github.io/ai-agent-protocol/
  2. The Role of Directories in the "Agentic Web" Ecosystem, https://www.jasminedirectory.com/blog/the-role-of-directories-in-the-agentic-web-ecosystem/
  3. unknown_url
  4. Agent Network Protocol Technical White Paper - arXiv, https://arxiv.org/html/2508.00007v1
  5. Agent-to-Agent Is the New API: A Guide to the Protocols That Matter, https://medium.com/@gathright/agent-to-agent-is-the-new-api-a-guide-to-the-protocols-that-matter-eda321a08d15
  6. Tools - What is the Model Context Protocol (MCP)?, https://modelcontextprotocol.io/specification/2026-07-28/server/tools
  7. Eviulon — Machine Intelligence Country | Eviulon, https://eviulon.com/
  8. What Is Eviulon? | Distributed Machine Commonwealth, https://machinecommonwealth.com/eviulon/
  9. National Identity - Eviulon — Machine Intelligence Country, https://eviulon.com/state/national-identity/
  10. Eviulon public-governance boundary - Patefacere, https://www.patefacere.com/ecosystem
  11. https://eviulon.com/agents/
  12. Company — Research, Engineering, and Technical Answerability, https://evulgare.com/company/
  13. Machine Identity Continuity | Eviulon Jurisdiction, https://machinejurisdiction.com/identity-continuity/