v1.4.0

What's new in v1.4

OATR trust registration consolidation: The identity block gains an optional oatr_issuer_id field. Services can now declare their Open Agent Trust Registry issuer ID directly in agent.json, replacing the need for a separate /.well-known/agent-trust.json file.

Behavioral commitments: New optional top-level commitments block for declaring service invariants (latency bounds, data residency, uptime SLAs, regulatory compliance). Entries can be inline or reference external documents via ref. Optional Ed25519 signature over JCS-canonicalized (RFC 8785) entries for tamper detection.

Unknown field warnings: The validator now warns on unrecognized fields inside identity, commitments, and commitment entries. Extension fields (x- prefix) are exempt.

Backwards compatible. All v1.0-1.3 manifests remain valid. 118 tests, 0 failures.

Proposed and unanimously supported by the Agent Identity Working Group (qntm, APS, AgentID, Agora).