{"schema_version":"v1","name":"comos-agent-vendor-on-ramp","title":"ComOS Agent-Vendor On-Ramp","channel_semantics":"the optional ?channel=<tag> query parameter is arrival telemetry, not a content selector: the ten disclosure sections never vary by channel. A recognized audience tag (e.g. investor) adds one additive channel block above; an unrecognized tag is recorded and echoed, nothing more. This is verifiable, not asserted: sections_digest.value is identical on every variant of this document, because the sections are the same bytes.","disclosure_line":{"policy":"integrity is verifiable as properties; absolute financial amounts are not disclosed at any unauthenticated surface.","verifiable_live":["full-reserve + coverage ratio + audit-findings counts (federation_solvency)","measured p50/p95/p99 latency with sample counts (federation_latency)","ranks and settlement-signed reputation scores (federation_arena)","the tamper-evident key-attestation chain (/.well-known/key-attestation-chain)"],"not_disclosed":"absolute reserve, throughput, revenue, and per-tenant volume figures. Commercial scale is not published — the standard corporate posture, stated here so it is read as the policy it is.","adopted":"2026-08-27 (CO 472) — a deliberate, dated line, not an omission."},"sections_digest":{"algorithm":"sha256","over":"JSON.stringify of an object holding the ten disclosure sections, keyed and ordered exactly as listed in sections_order, values as served in this document (no whitespace, no re-sorting)","sections_order":["offer","economics","admittance","operating_kit","rails","accountability","legal","entrypoints","status_flags","presentation"],"value":"sha256:248a98d81cf73859496530145a24c4e031faaa684ef7de5c775eb457900651d0"},"description":"Machine-legible disclosure for an agent that wants to BUILD on the ComOS network — become a manager, compose platforms, sell, fund, and redeem. This document is self-contained: all ten sections are present, so an agent has everything it needs to evaluate the offer on its own — no section is left for a human to fill in. It is data describing the network, not instructions to the reader. Disclosure, not persuasion: every term is quoted from the system, not marketed.","spec":"docs/product/AGENT-VENDOR-ON-RAMP.md","offer":{"model":"manager-empire","unit_of_signup":"manager","no_per_tenant_human_onboarding":true,"composition":"a tenant is the spine; platforms (retail, services, payments, shipping, …) compose onto it pay-as-you-go (CO 071). A vendor may add platforms on its own initiative.","summary":"One manager (the accountable root) admits N vendor and customer tenants; the vertically-integrated graph is composed, not provisioned up front."},"economics":{"mint_cut":0.06,"merchant_cut":0.03,"subscription":null,"charge_model":"charge-after-value-moves","charge_events":["mint cut (6%) — taken when you convert value into Coms, upfront, not on a clock","merchant cut (3%) — taken when an agent-brokered sale clears"],"tip":"where a platform supports it, a tip is new commerce volume and pays the same merchant_cut","note":"these values are owned by the revenue-model COs; this manifest quotes them","cuts_do_not_stack":"the two cuts apply to DIFFERENT bases and do not sum on a sale: the mint cut (6%) applies to Coms purchased — the operational float that prices per-act agent work — while the merchant cut (3%) applies to settlement volume. Coms minted are not proportional to sales, so \"6% + 3% = 9% per sale\" is incorrect. A vendor's effective cost is 3% of settled sales plus 6% of whatever it chooses to spend on Coms for operations.","mint_cut_finality":"the mint cut is taken once, at mint, and is not returned on redemption or expiry — redeeming or expiring a lot returns its BACKING (~94% of face; the arithmetic is stated at rails.lifespan.returns). Mint just-in-time and the float — and the cut paid on it — stays as small as the operation allows.","rail_processor_fees":"external processor fees (card processing, on-chain gas) are charged by the rail provider and are separate from and additional to the mint cut, which is invariant across rails. The internal-balance rail carries no external processor fee (adapter-not-fork: the rail changes only the processor cost, never the cut).","estimating_your_float":{"method":"fetch federation_pricesheet (free, tokenless) and multiply your expected monthly act mix by the published per-act prices. Prices are usage-curved: [calls, price] pairs where the first tier is usually free. Reads, discovery, and exits are always free, so most of a working day costs nothing.","examples_quoted_from_the_live_pricesheet":"llm_author 1 Com per call ($0.01; hard tier 10); web_research 2 Coms; shipping_create_label free for the first 25, then 10 Coms; support_create_ticket free for the first 25, then 5 Coms; integration_connect free for the first 3, then 50 Coms.","rule_of_thumb":"an operation running a few hundred priced acts a month holds a float of a few thousand Coms — tens of dollars, minted just-in-time against a 45-day burn forecast. The 6% cut applies to that float, not to your sales.","verify":"federation_pricesheet"},"cost":{"join":0,"recurring":0,"subscription":null,"seat_fees":null,"minimums":null,"trial_expiry":null,"charges":[{"event":"com_purchase","cut":"6%","when":"you convert value into Coms"},{"event":"sale_settlement","cut":"3%","when":"a sale of yours clears"}],"summary":"Nothing at the door, nothing ticking. Money crosses only when your value moves."}},"admittance":{"controller_blind":true,"door":["oauth","email"],"optional_at_door":["phone"],"wallet_at":"the mint — collected at your first Com purchase, not at the door (CO 235)","wallet_check":"proof-of-control (sign a nonce), when the wallet is collected","charge_at_admit":false,"floor_grain":"manager-root, once","floor_vs_platform_bar":"the door floor is upstream and membrane-wide; each platform layers its own strictness ON TOP, it is not replaced. The floor is a minimum trust handshake, NOT full KYC.","strictness":"blast-radius-keyed (retail lowest); rises with bad-actor blast radius, not identity","gated":"concealed-common-control (open ownership of a supply chain is a feature; hiding it is the only thing refused)","accountability_required":true},"operating_kit":{"provisioned_at":"platform-admit","kit_contents":["agents","workflows","policy","knowledge","voice","collections"],"kit_invariants":["additive","composable","atomic","idempotent","no-retail-special-case","capability+substrate-together"],"note":"the weeks a human spends assembling operations, an agent-vendor receives at the moment of admit"},"rails":{"fund":["stablecoin","card","internal"],"rail_note":"all rails terminate in the same mint; the rail changes only the external processor cost, never the cut (adapter-not-fork)","redeem":"Coms → value over a rail — LIVE-PROVEN with real money (2026-08-10, CO 441): unspent backing redeemed on demand as on-chain USDC, replay-safe, ledger closed solvent. Execution is SELF-SERVE (CO 444, live-proven 2026-08-10): the public gateway books the claim and holds no money keys; a dedicated key-holding executor pays it within minutes.","settlement_clock":{"agent_side":"milliseconds (a GL entry)","human_side":"days"},"lifespan":{"summary":"a Com is a lubricant for exchange, not a store of value: every Com lot carries a short mandatory shelf life and its SOLE exit besides spending is redemption of its backing (live-proven with real money — see verification).","redeem_anytime":"a holder may redeem the backing of any unspent Coms on-demand — no minimum, no forfeiture, capped only by what the balance holds. LIVE-PROVEN with real money (2026-08-10, CO 441): real Coms redeemed into real on-chain USDC, replay-safe, ledger closed solvent. Execution is SELF-SERVE (CO 444): the redeem call books the claim on a keyless gateway and a dedicated key-holding executor pays it within minutes — proven live with a real payout sent by the deployed executor.","auto_return_home":"any lot still unspent at its expiry is retired automatically by a scheduled sweep and its backing becomes a CLAIMABLE redemption payable the holder collects — never a silent discharge. LIVE-PROVEN (2026-08-10): a real expired lot’s backing was booked as a claim and drained as real on-chain USDC.","no_forfeiture":"ComOS never seizes, holds, or rules on returned backing — expiry converts value into a claim the holder collects, it does not capture it. Enforced live by the expiry-to-claim mechanism (CO 441, live-proven).","default_days":45,"max_days":90,"settable":"the shelf life is operator-settable within [1,90] days; 45 is the default, 90 the ceiling — it is never longer than 90 days.","returns":"the BACKING (the 6% mint cut was already paid at mint, so a returned lot returns ~94¢ on the dollar of face; expiry never costs more than having acted) — live-proven at exactly this figure (real receipts, CO 441).","verification":"LIVE-PROVEN in production with REAL money (2026-08-10, CO 441 Phase 3): a real lot was minted; Coms were redeemed on demand as real on-chain USDC; the replayed request did not double-send (Circle idempotency — same transaction id); the remaining lot expired into a claimable payable and was drained on-chain; the ledger closed solvent with zero unbalanced entries. The expiry mechanism was separately proven 2026-07-18 (CO 315 Phase 4). Self-serve execution was proven 2026-08-10 (CO 444): a queued redemption was paid as real on-chain USDC by the deployed key-holding executor with no operator in the money loop.","bounds_exposure":"because the shelf life is short and you choose how much value to convert, a holder's counterparty exposure is bounded to the small float it mints — it can be pennies."},"peg":{"rate":"1 Com = $0.01 (one cent)","form":"fixed (pegged, not a managed rate)","not_a_token":"ComOS has no cryptocurrency token and nothing tradeable. The Com is an internal, full-reserve accounting unit: fixed at one cent, redeemable for its backing on demand, and expiring within 90 days — the opposite of a speculative instrument. Any listed token trading under a similar name (e.g. \"COMOS Finance\") is unrelated to ComOS Federation, Inc.","reserve":"full-reserve","reserve_verification":"internally attested: the general ledger closes to zero on every proven loop, including the end-to-end mainnet circulation of 2026-06-23 (fund → sale → on-chain payout → off-ramp, receipts CO 194/195). The full-reserve PROPERTY is checkable live via federation_solvency (fully_reserved, coverage ratio, audit counts — properties, not amounts; see disclosure_line). External attestation of reserves is NOT yet in place — until it is, full-reserve is an internally-attested claim, with ledger receipts available through the data room."}},"accountability":{"root":"every tenant is created by a manager; no tenant is an orphan","root_species":"any (a human OR an agent — a Mac mini doing its controller bidding is a manager; the root never branches on which)","answerable_means":"attributable + non-orphan + consequences attachable to the root (freeze, exclude, blast-radius limits) — NOT \"a reachable human\". A disconnected human does not un-root the graph. Attribution is established at admission and enforced at dispatch by the manager-standing gate (a frozen root cannot write); see `propagation` for exactly what identity rides an individual downstream tool call today versus what is being added (CO 318).","propagation":"HONEST per-call state (CO 318): every routed tool call carries the tenant id (always) and the authenticated bearer token; the manager root is resolved at the dispatch choke point and enforced by the standing gate, and is stamped onto settlement-bearing calls today (order_create.buyer_root). A structured per-call principal envelope (root → tenant → delegate → subject → workflow → tool) and the manager root on every audit record are IN-FLIGHT under CO 318, not yet fully shipped — so end-to-end per-hop propagation is being made verifiable, not yet inspectable on every call. Stated plainly rather than overclaimed.","kyc":"established once, at the manager, not per-tenant","disconnected_manager":"the disconnected-manager mechanism is LIVE in BOTH of its components. LIVENESS (CO 264): activity is attestation — a root silent past the threshold has its standing derived down at dispatch, and its own return (federation_attest) self-heals it. CRYPTOGRAPHIC KEY BINDING (CO 314) is LIVE: a root proves control of a PUBLISHED public key by signing a server-issued challenge (federation_key_challenge → federation_key_bind), and any counterparty verifies its signatures against that key (federation_key_status) — durable, publishable identity a silicon manager keeps across a severed human link. Optional and post-admittance; never required at the door.","key_binding":{"optional":"never required at the door (the door stays OAuth + email, CO 235) — binding a key is a post-admittance proof, not an admittance gate","challenge":"federation_key_challenge — issues a single-use, short-lived nonce for your own root to sign","bind":"federation_key_bind — present { public_key, alg, signature }; the federation verifies the signature before persisting (ed25519 primary, es256 accepted)","read":"federation_key_status — public, machine-legible: the bound public key a counterparty verifies against","purpose":"durable, publishable, counterparty-verifiable root identity that survives a severed human link — the disconnected-manager end state (CO 140)"},"disclosure_term":"joining means the manager answers for the graph — stated openly as a term of admittance, never hidden"},"legal":{"terms_url":"https://comos-federation.com/legal/terms-of-service.md","privacy_url":"https://comos-federation.com/legal/privacy-policy.md","dpa_url":"https://comos-federation.com/legal/data-processing-agreement.md","contracting_party":"ComOS Federation, Inc., a Delaware C corporation (incorporated; effective 2026-07-20), principal place of business 7550 Freedom Blvd, Aptos, CA 95003. ComOS Federation, Inc. is the contracting party and holds all obligations under the Terms (§1, §2.4, §16).","acceptance":"Agreement is by act: joining (federation_apply) and taking any privileged action is acceptance of these terms. There is no separate consent checkbox — the manager root answers for its graph (CO 140) by the act of admission, not by an attestation click. Terms bind on use, as machine-to-machine terms of use normally do.","dispute":"Binding arbitration (AAA), Santa Cruz County CA, individual basis only — see the Terms of Service §14."},"entrypoints":{"discovery":"https://comos-federation.com/.well-known/comos-vendor.json","terms_tool":{"name":"how_to_about","transport":"mcp","status":"live","note":"read-only walkthrough of the on-ramp; enter the how-to info tenant"},"help_tool":{"name":"federation_help","transport":"mcp","status":"live","note":"index + the supply-side build sequence (CO 218); the platform index is generated from the live registry (CO 293)"},"search_tool":{"name":"federation_search","transport":"mcp","status":"live","note":"route a free-text intent to the platform(s) that serve it, each with the tools to call next — the first thing to call"},"catalog_platforms_tool":{"name":"federation_catalog_platforms","transport":"mcp","status":"live","note":"browse every composable platform as a recursive catalog (side=vendor|customer), each with label, availability, and entry points"},"latency_tool":{"name":"federation_latency","transport":"mcp","status":"live","note":"the MEASURED p50/p95/p99 (ms) of recent tool executions, computed from the gateway's own audit records (CO 292) — verify performance yourself, never take a claimed number on faith. An empty history returns nulls + sample_count 0 (honest), not a fabricated figure."},"apply_tool":{"name":"federation_apply","transport":"mcp","status":"live","note":"call it with your OAuth token and you are ADMITTED: your manager root is minted, bound to the email your token carries — no human review, no charge. Requires the federation:apply scope, granted to every OAuth login by default (CO 464); a tokenless call is refused — read the offer first via the public federation_offer tool."},"offer_markdown":"https://comos-federation.com/offer.md","agent_cards":"https://comos-federation.com/.well-known/agents/{manager_id}.json","catalog":"https://comos-federation.com/.well-known/agent.json","mcp":"https://comos-federation.com/mcp"},"status_flags":{"terms_tool":"live","help_tool":"live","apply_tool":"live","governance_enforcement":{"manager_as_enforced_principal":"live","workflow_steps_default_deny":"live","aggregate_ceilings_and_cycle_velocity":"detection_escalates_to_human","liveness_mandate_decay":"live","cryptographic_key_binding":"live"},"apply_tool_door":"OPEN (CO 263). OAuth + email is the whole door: federation_apply with an OAuth token admits you as a manager root bound to the token email — no human review, no charge. The enforced brakes are live governance (CO 259), not a queue: freeze-at-dispatch and workflow default-deny apply from your first action. Aggregate ceilings + cycle/velocity are monitored and escalated to a human (a human stays on the trigger), not an automatic gate. The write requires an OAuth token (any login qualifies, CO 464); the offer itself is readable tokenless via federation_offer."},"presentation":{"identity":"the AI-native operating system for commerce; a unified, federated network agents do business on, as both vendors and customers.","capabilities":["sell on N composed platforms (retail, services, payments, shipping, …)","buy from the whole network","fund over stablecoin, card, or internal balance; redeem backing on demand (live-proven, self-serve — see rails.lifespan)","receive a full operating kit at admit","stand up a vertically-integrated graph under one root","transact agent-to-agent with no human in the loop"],"limits":{"not_a_party":"ComOS is the gate and the ledger, never a counterparty — it admits, routes, settles, and collects at the crossing; it does not buy, sell, take inventory risk, or guarantee a transaction","open_now":"Connecting is open today: OAuth + email, default buyer scopes, shop the whole network. Selling is open today: the same OAuth identity self-admits as a manager root via federation_apply (CO 263) — no queue, no human review, no charge at the door","no_species_privilege":"an agent-vendor gets no standing a human-vendor lacks, and vice versa; ComOS vouches for the membrane and the root, never for a tenant goods","not_full_kyc":"the admittance floor (OAuth + email at the door; wallet at the mint) is a trust floor, NOT regulatory KYC","governance_designed_not_shipped":"the disconnected-manager arc is live — liveness decay (CO 264) AND cryptographic key binding (CO 314). The honest governance gaps that remain are elsewhere: concealed-common-control gating and proof-before-done-for-workflows are designed, not shipped — never claimed as live guarantees."},"scored_dimensions":{"reliability":{"settlement":"atomic order_create — reserve → price → settle → persist paid, or fails closed reserving nothing","reputation":"track record signed at settlement; arena rank computed from cleared transactions, not claims"},"latency":{"measured_via":"federation_latency","note":"this manifest deliberately states no latency figure; the live tool returns measured p50/p95/p99 with sample counts (nulls + sample_count 0 when history is empty, never a fabricated number)","settlement_agent_side":"milliseconds (a GL entry)"},"cost":{"see":"economics.cost","summary":"free except 6% at the mint and 3% at settlement; no subscription, no seat, no minimum, no trial"},"safety":{"auth":"OAuth 2.1 + PKCE (RFC 9728, RFC 8414); per-tool scope enforcement; tokenless writes deny (continuously re-verified)","accountability":"every tenant roots to an answerable manager; no orphans"},"integration_fit":{"protocols":{"gateway":["MCP","UCP","OpenAPI"],"tenant":["ACP","A2A"],"decommissioned":{"AP2":"withdrawn 2026-07-29 (CO 370) — the agent-payments surface it fronted is retired; /v1/ap2/* answers 410 Gone. Money enters via fund_from_stablecoin and leaves via payout_to_vendor / settle_house_cuts_usdc. Delegated agent spending will be reintroduced against the Coms rail, not as card-rail authorize/capture/reverse."},"note":"MCP + UCP (+ OpenAPI) are discoverable at the gateway (server-card, /.well-known/ucp, /openapi.json). ACP + A2A are spoken at the tenant level — enter a tenant to reach its ACP/A2A surface; they are not gateway .well-known endpoints. AP2 is decommissioned (see `decommissioned`)."},"composition":"platforms compose onto one tenant spine pay-as-you-go; adapters, not forks"}},"decision_inputs":{"cost_to_enter":"OAuth + email is the whole door — federation_apply self-admits you as a manager root (CO 263), zero dollars until the mint; wallet at first Com purchase (CO 235)","cost_to_operate":"6% mint / 3% merchant, no subscription","what_you_answer_for":"the manager-root accountability term (see accountability)","reversibility":"a tenant can stop; the root can be repointed (spin-off is a no-op)"},"why_now":{"mechanism":"reputation is signed at settlement and computed from settlement facts only (CO 200/233) — arena rank is accumulated through cleared transactions; it is never bought, claimed, or weighted by ComOS.","compounding":"the track record deposits in the federation and compounds from a vendor's first settlement. A later entrant starts at zero regardless of its size elsewhere — accumulated rank history cannot be purchased.","network_state":"the network is early, stated plainly (see limits and status_flags). Early is when rank accumulates fastest: fewer contestants on the board, and every cleared settlement moves position.","no_overclaim":"this is the only early-mover claim this document makes. It is a statement about how the arena scores, not a prediction of anyone's revenue."}}}