{ "schema": "delegation", "protocol_version": "1.2.0-draft.3", "policy_document": { "protocol_version": "1.2.0-draft.1", "policy_id": "https://publisher.example/policies/main", "revision": 1, "origin": "https://publisher.example", "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "default": "no_grant", "resources": [ { "id": "article", "selectors": [ { "type": "exact", "path": "/about", "query": "absent" } ] } ], "rules": [ { "id": "read", "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "effect": "require_agreement", "obligations": [ { "type": "attribution", "name": "Example originator", "url": "https://publisher.example/about" } ] } ] }, "cases": [ { "name": "external_zero_price_authority", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": true }, { "name": "same_origin_no_delegate", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://publisher.example/tenant-a/api/", "issuer": "https://publisher.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://publisher.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [] }, "structural_valid": true, "semantic_valid": true }, { "name": "external_offer_operation", "definition": "operation", "value": { "operation_id": "12345678-1234-4234-8234-123456789abc", "payment_request_digest": null, "kind": "offer", "origin": "https://publisher.example", "service_id": "https://publisher.example/services/one", "issuer": "https://provider.example/operator", "endpoint": "https://provider.example/tenant-a/api/offers", "delegation_id": "https://publisher.example/delegations/one", "key_id": "https://provider.example/keys/one", "key_use": "odexa-receipt+jws", "request": { "url": "https://publisher.example/about", "actions": [ "retrieve" ], "purposes": [ "public_retrieval" ], "supported_obligations": [ "attribution" ] }, "offer_seconds": 60, "access_seconds": 300, "use_seconds": 600, "payment_mode": "none", "asset_id": null, "version_id": null }, "structural_valid": true, "semantic_valid": true }, { "name": "current_https_observation", "definition": "observation", "value": { "source": "https", "origin": "https://publisher.example", "authority_url": "https://publisher.example/odexa-service.json", "policy_url": "https://publisher.example/odexa.json", "authority_digest": "sha256:36e6bc577519648224852bee8e72b3b4a8e7be073b3bf0d0ce30860a96b0d9c5", "policy_digest": "sha256:f48a1d69be5c6a0c210cec86800c882e765e43bdcbcbce1942f5b11ee3118719", "checked_at": "2026-09-17T00:00:00Z", "available": true, "tls_verified": true, "redirected": false, "revalidated": true }, "structural_valid": true }, { "name": "missing_scope", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": false, "semantic_valid": false }, { "name": "unknown_top_member", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ], "admin": true }, "structural_valid": false, "semantic_valid": false }, { "name": "subdelegation_forbidden", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": true } ] }, "structural_valid": false, "semantic_valid": false }, { "name": "unknown_capability", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect", "edit_policy" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": false, "semantic_valid": false }, { "name": "duplicate_capability", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect", "issue_tokens" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": false, "semantic_valid": false }, { "name": "private_jwk_member", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU", "d": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": false, "semantic_valid": false }, { "name": "wrong_origin_semantic", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://other.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": false }, { "name": "unlisted_resource_semantic", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article", "unlisted" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": false }, { "name": "narrower_service_scope_semantic", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": false }, { "name": "issuer_query_semantic", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator?x=1", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": false }, { "name": "decimal_integer_semantic", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1.0, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": false }, { "name": "invalid_curve_point_semantic", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": false }, { "name": "retired_without_time_semantic", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-receipt+jws", "odexa-status+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "retired", "retired_at": null, "revoked_at": null } ], "limits": { "max_offer_seconds": 600, "max_access_seconds": 3600, "max_use_seconds": 7200, "payment_mode": "none" }, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "issue_agreements", "issue_tokens", "introspect" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 300, "max_use_seconds": 600, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": false }, { "name": "wrong_operation_key_use_semantic", "definition": "operation", "value": { "operation_id": "12345678-1234-4234-8234-123456789abc", "payment_request_digest": null, "kind": "offer", "origin": "https://publisher.example", "service_id": "https://publisher.example/services/one", "issuer": "https://provider.example/operator", "endpoint": "https://provider.example/tenant-a/api/offers", "delegation_id": "https://publisher.example/delegations/one", "key_id": "https://provider.example/keys/one", "key_use": "odexa-status+jws", "request": { "url": "https://publisher.example/about", "actions": [ "retrieve" ], "purposes": [ "public_retrieval" ], "supported_obligations": [ "attribution" ] }, "offer_seconds": 60, "access_seconds": 300, "use_seconds": 600, "payment_mode": "none", "asset_id": null, "version_id": null }, "structural_valid": true, "semantic_valid": false }, { "name": "unknown_operation_field", "definition": "operation", "value": { "operation_id": "12345678-1234-4234-8234-123456789abc", "payment_request_digest": null, "kind": "offer", "origin": "https://publisher.example", "service_id": "https://publisher.example/services/one", "issuer": "https://provider.example/operator", "endpoint": "https://provider.example/tenant-a/api/offers", "delegation_id": "https://publisher.example/delegations/one", "key_id": "https://provider.example/keys/one", "key_use": "odexa-receipt+jws", "request": { "url": "https://publisher.example/about", "actions": [ "retrieve" ], "purposes": [ "public_retrieval" ], "supported_obligations": [ "attribution" ] }, "offer_seconds": 60, "access_seconds": 300, "use_seconds": 600, "payment_mode": "none", "asset_id": null, "version_id": null, "trust_me": true }, "structural_valid": false, "semantic_valid": false }, { "name": "wrong_uuid_version", "definition": "operation", "value": { "operation_id": "12345678-1234-1234-8234-123456789abc", "payment_request_digest": null, "kind": "offer", "origin": "https://publisher.example", "service_id": "https://publisher.example/services/one", "issuer": "https://provider.example/operator", "endpoint": "https://provider.example/tenant-a/api/offers", "delegation_id": "https://publisher.example/delegations/one", "key_id": "https://provider.example/keys/one", "key_use": "odexa-receipt+jws", "request": { "url": "https://publisher.example/about", "actions": [ "retrieve" ], "purposes": [ "public_retrieval" ], "supported_obligations": [ "attribution" ] }, "offer_seconds": 60, "access_seconds": 300, "use_seconds": 600, "payment_mode": "none", "asset_id": null, "version_id": null }, "structural_valid": false, "semantic_valid": false }, { "name": "unsafe_encoded_path_semantic", "definition": "operation", "value": { "operation_id": "12345678-1234-4234-8234-123456789abc", "payment_request_digest": null, "kind": "offer", "origin": "https://publisher.example", "service_id": "https://publisher.example/services/one", "issuer": "https://provider.example/operator", "endpoint": "https://provider.example/tenant-a/api/offers", "delegation_id": "https://publisher.example/delegations/one", "key_id": "https://provider.example/keys/one", "key_use": "odexa-receipt+jws", "request": { "url": "https://publisher.example/about%2Fsecret", "actions": [ "retrieve" ], "purposes": [ "public_retrieval" ], "supported_obligations": [ "attribution" ] }, "offer_seconds": 60, "access_seconds": 300, "use_seconds": 600, "payment_mode": "none", "asset_id": null, "version_id": null }, "structural_valid": true, "semantic_valid": false }, { "name": "nonbool_observation", "definition": "observation", "value": { "source": "https", "origin": "https://publisher.example", "authority_url": "https://publisher.example/odexa-service.json", "policy_url": "https://publisher.example/odexa.json", "authority_digest": "sha256:36e6bc577519648224852bee8e72b3b4a8e7be073b3bf0d0ce30860a96b0d9c5", "policy_digest": "sha256:f48a1d69be5c6a0c210cec86800c882e765e43bdcbcbce1942f5b11ee3118719", "checked_at": "2026-09-17T00:00:00Z", "available": true, "tls_verified": "true", "redirected": false, "revalidated": true }, "structural_valid": false }, { "name": "missing_observation_digest", "definition": "observation", "value": { "source": "https", "origin": "https://publisher.example", "authority_url": "https://publisher.example/odexa-service.json", "policy_url": "https://publisher.example/odexa.json", "policy_digest": "sha256:f48a1d69be5c6a0c210cec86800c882e765e43bdcbcbce1942f5b11ee3118719", "checked_at": "2026-09-17T00:00:00Z", "available": true, "tls_verified": true, "redirected": false, "revalidated": true }, "structural_valid": false }, { "name": "report_only_authority", "definition": "authority", "value": { "protocol_version": "1.2.0-draft.3", "policy_protocol_version": "1.2.0-draft.1", "origin": "https://publisher.example", "policy_id": "https://publisher.example/policies/main", "revision": 1, "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "services": [ { "id": "https://publisher.example/services/one", "base_url": "https://provider.example/tenant-a/api/", "issuer": "https://provider.example/operator", "capabilities": [ "receive_events" ], "signing_keys": [ { "kid": "https://provider.example/keys/one", "public_jwk": { "kty": "EC", "crv": "P-256", "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY", "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU" }, "uses": [ "odexa-event-record+jws" ], "not_before": "2026-09-16T00:00:00Z", "not_after": "2026-09-18T00:00:00Z", "state": "active", "retired_at": null, "revoked_at": null } ], "limits": null, "scope": { "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [] } } ], "delegations": [ { "id": "https://publisher.example/delegations/one", "origin": "https://publisher.example", "delegate_service_id": "https://publisher.example/services/one", "capabilities": [ "receive_events" ], "resource_ids": [ "article" ], "actions": [ "retrieve", "store" ], "purposes": [ "public_retrieval", "internal_knowledge" ], "asset_id_prefixes": [], "version_id_prefixes": [], "issued_at": "2026-09-16T00:00:00Z", "expires_at": "2026-09-18T00:00:00Z", "max_access_seconds": 0, "max_use_seconds": 0, "payment_mode": "none", "allow_subdelegation": false } ] }, "structural_valid": true, "semantic_valid": true } ] }