Specifications
Six versioned spec documents. Each declares a stable v0.1 shape for the corresponding APAI object. Schemas at /schemas/*.json land with the Day 2 build.
APAI Manifest
Declares package identity, version, dependencies, target platforms, permissions, security posture, install modes, and rollback strategy.
schema: apai.manifest.v0.1Capability Passport
Plain-English permission and risk profile. The central product object of APAI - readable by humans and machines.
schema: apai.passport.v0.1Install Receipt
Proof of what happened during install: files added/modified, permissions granted, approval state, risk score, rollback command.
schema: apai.receipt.v0.1Policy Pack
Workspace governance rules: no-secrets, no-external-send, cost ceilings, approval workflows, allowed-package lists.
schema: apai.policy.v0.1Prompt URL Install
How hosted chat apps apply an APAI package without silent installation. Defines the install card format at /packages/{slug}/llms.txt.
schema: apai.prompt-url-install.v0.1Agent Passport
Bidirectional capability description for AI agents. What an agent CAN do - paired with the package Capability Passport to compute runtime compatibility.
schema: apai.agent-passport.v0.1Honest LLM Contract
Install cards include a SHA-256 Checksum line. Agents echo it back to prove they loaded the correct card. POST /api/install/verify to validate. Catches fabrications about which card was loaded; does not enforce runtime behavior.
schema: apai.install-verify.v0.1