{"ok":true,"service":"hs-agreement-intake","intake_version":"0.1.0","verifier_version":"0.2.0","verifier_sha256":{"agreement_verify.mjs":"0f70fd809ce34e79fafb933fd1237fb38e183a7b27dc73c46cfbdbfca8918f94","agreement_canonical.mjs":"29d361bd96612277afd50fe42a21f8a74fff8bbc8bc0a3bd67ee7079d7526dde"},"schemas":["a2a-agreement-v1","a2a-agreement-v1.1"],"batch_schema":"nenrin-agreement-batch-v1","recorder_domain":"horizonshield.dev","ledger":"https://ledger.horizonshield.dev","routes":["POST /agreement","GET /agreement/pending","GET /agreement/{sha}","GET /agreement/{sha}/report"],"boundary":"ops/AGREEMENT_INTAKE_v0_BOUNDARY.md: gathers keys (2.1), 503 when a key cannot be fetched (2.2), dedup on strongly consistent storage (2.3), daily batch to the public ledger (2.4), bytes served by sha (2.5), report published unchanged (2.6), verifier_version kept (2.7); never judges terms, never one sided, never custody, never a deal-linked fee, never re-canonicalises, never repairs (3.x)","decisions":{"4.1":"anyone holding the signed bytes may submit","4.2":"refused records are kept and served with their refusal report, never batched","4.3":"anchored valid records cannot be deleted by the operator (no delete route exists)","4.4":"flat daily cap per party domain and per submitter, not a fee","4.5":"the verifier is exposed but never answers with a bare accepted; every answer carries the full report, the recompute recipe and verifier_version"}}