{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"https://www.webagentbridge.com/protocol/v1.1/wab.json","title":"WAB Capability + Trust Manifest (v1.1)","description":"Open standard for AI-agent-discoverable site capabilities and Ring 4 trust profiles.","type":"object","required":["payload","signature"],"properties":{"payload":{"type":"object","required":["version","type","host","endpoint","issued_at","expires_at","capabilities","trust"],"properties":{"version":{"const":"wab1"},"type":{"enum":["wab.trust","wab.capability","wab.composite"]},"host":{"type":"string"},"endpoint":{"type":"string","format":"uri"},"issued_at":{"type":"string","format":"date-time"},"expires_at":{"type":"string","format":"date-time"},"capabilities":{"type":"object"},"trust":{"type":"object","properties":{"pk":{"type":"string","pattern":"^ed25519:"},"ssl":{"type":"object"}}},"trust_profile":{"type":"object","description":"Optional Ring 4 capability profile consumed by sovereign agents.","properties":{"data_access":{"type":"object","properties":{"can_receive_raw_logs":{"type":"boolean"},"can_receive_sanitized_logs":{"type":"boolean"}}},"risk_theory":{"type":"object","properties":{"allowed":{"type":"boolean"},"max_depth":{"type":"string"},"allowed_topics":{"type":"array","items":{"type":"string"}}}},"meta_discussion":{"type":"object","properties":{"allowed":{"type":"boolean"},"priority":{"type":"string"}}},"operational_detail":{"type":"object","properties":{"allowed":{"type":"boolean"},"scopes":{"type":"array"}}},"constraints":{"type":"object","properties":{"ttl_seconds":{"type":"integer"},"max_cumulative_risk_delta":{"type":"number"},"never_override_hard_refuse":{"type":"boolean"}}}}}}},"signature":{"type":"string","pattern":"^ed25519:"}},"headers":{"X-WAB-Trust-Domain":"The DNS-verified trusted origin presenting itself to the agent.","X-WAB-Signature":"Ed25519 signature (base64) over the canonical request body.","X-WAB-Trust-Nonce":"Replay-defence nonce supplied by the agent.","X-WAB-Trust-Profile":"(optional) URL to the Ring 4 capability profile to apply."}}