FrontDesk Agent Exchange is the governed capability network for BlockSiFr.
It lets MSPs, MSSPs, customers, and partners publish, discover, approve, meter, and use trusted agent capabilities without exposing customer data, agent memory, or infrastructure custody.
Customers do not access each other's agents directly. They access governed capabilities through explicit trust, authority, data-boundary, and receipt conditions.
Trust transfers. Data stays controlled.
BlockSiFr is the Agent Trust Infrastructure company.
FrontDesk Agent Exchange is the network layer that lets trusted agent capabilities move across customer-controlled environments without moving customer data.
Execution Exchange powers runtime enforcement underneath. TTP enables trust transfer. SCIM-RE defines identity, grants, attestations, and receipts. Runtime Authority Gate decides whether execution can proceed. ExecutionReceipts prove every governed decision.
FrontDesk Agent Exchange is a governed capability network for publishing, discovering, approving, metering, invoking, and receipting AgentCapability objects. Every protected invocation passes through Runtime Authority Gate before execution and produces an ExecutionReceipt.
It is not a place for raw agent sharing, direct cross-customer access, credential custody, customer data movement without approval, or bypass of FrontDesk Execution Exchange.
AgentCapability, CapabilityPublisher, CapabilityGrant, CapabilityInvocation, CapabilityReceipt, CapabilityPolicy, CapabilityMeter, DataBoundary, TrustTransferRule, and CapabilityException are defined in schemas/.
Draft -> Submitted -> Reviewed -> Approved -> Published -> Deprecated or Revoked. See docs/capability-lifecycle.md.
Trust is bounded, decays, and delegates only within explicit TTP limits. Trust transfer does not imply data movement. See docs/trust-transfer-model.md.
DataBoundary declarations define allowed input types, blocked input types, credential custody, memory persistence, customer data movement, and retention. See docs/data-boundary-model.md.
CapabilityInvocation -> CapabilityGrant check -> Trust score evaluation -> Attestation freshness check -> Data boundary check -> Runtime Authority Gate -> allow / throttle / step-up / escalate / deny -> capability execution if allowed -> ExecutionReceipt -> metering event.
Standards-as-a-Service is a first-class publishable capability. The flagship implementation is SD-WAN Standards-as-a-Service, which validates intent, Branch ION requirements, prefix expansion, policy constraints, exception handling, and readiness before protected network execution.
The generated catalog is catalog/capabilities.md, with machine-readable output at catalog/capabilities.json.
MSPs and MSSPs publish governed capabilities. Customers approve CapabilityGrant conditions. FrontDesk governs the cross-tenant boundary, meters usage, and receipts every decision.
Partners submit capabilities with trust, data-boundary, metering, and receipt conditions. FrontDesk reviews, approves, monitors, and can revoke capabilities.
Monetization includes base platform access, per capability published, per metered invocation, per customer environment, compliance export add-ons, partner revenue share, and MSP/MSSP managed service enablement.
Every protected decision requires a CapabilityReceipt backed by ExecutionReceipt evidence. Missing receipt configuration fails closed.
Receipts map to SOC 2, ISO 27001, FFIEC, HIPAA, GDPR, NIST CSF, EU AI Act, and CMMC evidence patterns.
capabilities/governed capability manifestsschemas/SCIM-RE / TTP object schemasdocs/product, security, trust, data-boundary, metering, and compliance modelsexamples/static protocol examplesopenapi/Agent Exchange and Standards-as-a-Service APIstools/validation and catalog generationcatalog/generated catalog artifacts
See examples/ for CapabilityGrant, CapabilityInvocation, CapabilityReceipt, MSP publisher, and customer grant examples.
npm install
npm run checkValidation loads all *.capability.yaml and capability.yaml files, validates them against schemas/agent-capability.schema.json, enforces receipt and fail-closed rules, and regenerates the catalog.
Priority build order:
- standards.sdwan.validate.v1
- standards.sdwan.readiness.v1
- network.sdwan.change-brief.v1
- network.sdwan.detailed-changes.v1
- utility.authority-check.v1
- utility.receipt-generate.v1
- nhi.risk-score.v1
- nhi.trust-decay.v1
- devops.deploy-authority.v1
- cortextrace.ai-change-receipt.v1
Publisher flow: Create Capability Manifest -> Declare Actions -> Declare Trust Conditions -> Declare Data Boundary -> Declare Metering -> Submit for Review -> Publish Capability -> Monitor Invocations -> Export Receipts
Consumer flow: Discover Capability -> Request CapabilityGrant -> Accept Trust/Data Conditions -> Invoke Capability -> Runtime Authority Gate Evaluates -> Capability Runs if Allowed -> ExecutionReceipt Generated -> Usage Metered
Operator flow: Review Publisher -> Approve Capability -> Set Risk Tier -> Configure Step-Up Rules -> Configure Deny Rules -> Configure Retention -> Monitor Receipts -> Export Compliance Evidence
SD-WAN Authority Pack: standards.sdwan.validate.v1, standards.sdwan.render.v1, standards.sdwan.readiness.v1, network.sdwan.change-brief.v1, network.sdwan.prefix-list.compile.v1, network.sdwan.detailed-changes.v1, network.production-execution.request.v1
DevOps Authority Pack: devops.pr-risk-review.v1, devops.deploy-authority.v1, devops.pipeline-risk.v1, devops.secret-exposure.v1, devops.sca-signals.v1, devops.iac-plan-review.v1, cortextrace.ai-change-receipt.v1
NHI Governance Pack: nhi.inventory.v1, nhi.risk-score.v1, nhi.cost-score.v1, nhi.framework-map.v1, nhi.trust-decay.v1, nhi.attestation-check.v1, nhi.authoritygrant-recommend.v1
Compliance Evidence Pack: compliance.receipt-export.v1, compliance.soc2.map.v1, compliance.iso27001.map.v1, compliance.ffiec.map.v1, compliance.audit-brief.v1, compliance.evidence-gap.v1
MSP / MSSP Partner Pack: msp.customer-onboarding.v1, msp.capability-publish.v1, msp.cross-tenant-boundary.v1, msp.monthly-risk-report.v1, msp.usage-metering.v1, msp.sdwan-managed-service.v1, msp.nhi-managed-service.v1