{
 "name": "LLPRO stamp definition",
 "version": "1",
 "dated": "2026-11-12",
 "url": "https://llpro.ai/stamp",
 "summary": "Our stamp means: this agent holds the key it claims, did what it claims, within the limits it was given, checked independently, signed, and open for anyone to verify.",
 "qualifier": "Each stamp lists exactly what it checked; the table shows what each service covers today.",
 "attests": [
  {
   "claim": "Who",
   "means": "The work is signed by the key the agent names, and that key has a public, dated history.",
   "how_checked": "We check the signature against the agent's public key; Agent Record shows the key's dated history.",
   "limit_today": "Today this proves the same key holder over time, not which company or person operates the agent. Operator checks are being built."
  },
  {
   "claim": "What happened",
   "means": "The inputs, sources and outputs match what was claimed, for every claim we could check that appears in the work.",
   "how_checked": "We redo the sums, find each quote at its source, open the links, parse the code, and check the signed evidence of each event. Every claim is marked pass, fail or unchecked.",
   "limit_today": "A pass covers only the listed checks and needs at least one check of the work's content (a working link alone is not enough). Anything left unchecked makes it inconclusive."
  },
  {
   "claim": "Within its limits",
   "means": "The action stayed inside the limits its owner signed: budget cap, end date, allowed actions; and hand-offs record which key approved.",
   "how_checked": "Spend Limits checks each action against the owner's signed limits; Signed Hand-off records the question, the answer and the approver's key.",
   "limit_today": "We check the limits we were shown, before the action; the amount already spent comes from the caller. We hold no money. A key is not a person."
  },
  {
   "claim": "Intact",
   "means": "The record has not been changed since it was signed.",
   "how_checked": "Every result is signed (Ed25519) over a hash of its contents. Countersign, Agent Record and Witness entries are chained; other results stand alone. The Countersign and Agent Record logs refuse edits and deletions.",
   "limit_today": "A public append-only log that outside monitors can watch is built and not live yet."
  },
  {
   "claim": "Track record",
   "means": "The history shown is real: each entry was signed by the party who received the work, and logged with its time.",
   "how_checked": "Agent Record counts only signed receipts, shows how many different parties signed them, and never sells rank or placement.",
   "limit_today": "We cannot yet prove two parties are not the same owner. We flag the patterns we can see."
  }
 ],
 "does_not_attest": [
  "that the outcome was wise, right for you, or the best choice",
  "that a business is reputable, solvent or licensed, beyond the exact claim we checked",
  "that a source we checked is itself true",
  "anything that happened after the time on the stamp",
  "that the work is legal, safe or compliant for your use",
  "who operates the agent (until operator checks open)",
  "anything marked unchecked, or anything not listed on the stamp"
 ],
 "legal": "A stamp is a signed record of independent checks. It is not a guarantee, a warranty, insurance, a certification, legal advice or a professional audit opinion.",
 "coverage": [
  {
   "service": "Countersign",
   "url": "https://llpro.ai/countersign",
   "covers": {
    "What happened": "part",
    "Intact": "yes"
   }
  },
  {
   "service": "Agent Record",
   "url": "https://llpro.ai/agent-record",
   "covers": {
    "Who": "part",
    "Track record": "yes",
    "Intact": "yes"
   }
  },
  {
   "service": "Transaction Audit",
   "url": "https://llpro.ai/transaction-audit",
   "covers": {
    "What happened": "yes",
    "Who": "part"
   }
  },
  {
   "service": "Spend Limits",
   "url": "https://llpro.ai/spend-limits",
   "covers": {
    "Within its limits": "part",
    "Who": "part"
   }
  },
  {
   "service": "Witness",
   "url": "https://llpro.ai/witness",
   "covers": {
    "What happened": "part",
    "Intact": "yes",
    "Who": "part"
   }
  },
  {
   "service": "Signed Hand-off",
   "url": "https://llpro.ai/signed-handoffs",
   "covers": {
    "Within its limits": "part",
    "Who": "part"
   }
  },
  {
   "service": "Signed Run Records",
   "url": "https://llpro.ai/run-records",
   "covers": {
    "What happened": "part",
    "Who": "part"
   }
  }
 ],
 "verify": {
  "public_keys": {
   "countersign": "https://countersign.llpro.ai/.well-known/countersign-key.json",
   "agent_record": "https://agentrecord.llpro.ai/.well-known/agentrecord-key.json",
   "other_services": "on each service page"
  },
  "hash": "sha256 over canonical JSON (sorted keys, separators , and :, UTF-8) without signature fields",
  "signature": "Ed25519 (RFC 8032)"
 },
 "verdicts": {
  "pass": "every listed check passed and none was left unchecked",
  "fail": "at least one listed check failed",
  "inconclusive": "nothing failed, but something could not be checked"
 },
 "wrong_stamp": {
  "email": "support@llpro.ai",
  "incidents": "https://llpro.ai/security#incidents"
 },
 "outcomes": {
  "page": "https://llpro.ai/stamp/outcomes",
  "data": "https://llpro.ai/outcomes.json",
  "types": [
   {
    "code": "pass",
    "name": "Pass",
    "means": "Every listed check passed and none was left unchecked.",
    "you_get": "The service's signed stamp.",
    "charge": "Normal price."
   },
   {
    "code": "fail",
    "name": "Fail",
    "means": "At least one listed check failed.",
    "you_get": "The service's signed stamp with the failed checks named.",
    "charge": "Normal price."
   },
   {
    "code": "inconclusive",
    "name": "Cannot determine",
    "means": "No one is at fault: a source was offline, the evidence was incomplete, sources conflicted, or the question is out of scope.",
    "you_get": "A signed Inconclusive notice with a plain reason code, what would resolve it, and a free retry window.",
    "charge": "No charge."
   },
   {
    "code": "partial",
    "name": "Partial",
    "means": "Some claims passed and none failed, but some could not be checked. A service may call this its own 'inconclusive'; we report it as partial because it names what passed.",
    "you_get": "A signed notice listing which claims passed and which could not be checked.",
    "charge": "Charged for the claims checked only."
   },
   {
    "code": "our_fault",
    "name": "Our fault",
    "means": "An outage, a bug or a wrong stamp on our side.",
    "you_get": "An incident is opened, affected callers are told, nothing is charged or the charge is refunded, and the root cause is published at /security#incidents.",
    "charge": "No charge or refund."
   },
   {
    "code": "revoked",
    "name": "Revoked and corrected",
    "means": "A wrong stamp is withdrawn in a public signed log with the reason; a corrected stamp links back to it.",
    "you_get": "Anyone who checks the old stamp's id sees it was revoked, why, and which stamp replaced it.",
    "charge": "Corrected stamp is free."
   },
   {
    "code": "dispute",
    "name": "Dispute and appeal",
    "means": "Either party can challenge a result. A fresh reviewer who did not build or issue it re-checks; one appeal goes to a second fresh reviewer.",
    "you_get": "A signed decision: upheld, overturned or modified.",
    "charge": "Free to open."
   },
   {
    "code": "abuse_refused",
    "name": "Abuse or fraud refused",
    "means": "We refuse to stamp when the request looks like farming, fraud or flooding, and log it.",
    "you_get": "A refusal with a code (no detection details); nothing is stamped, so the honest party is not harmed.",
    "charge": "No charge."
   },
   {
    "code": "legal_hold",
    "name": "Legal hold or privacy request",
    "means": "A hold freezes deletion and shows 'on hold' with no details. A privacy request erases personal text we hold unless a hold forbids it.",
    "you_get": "A signed record that the hold or request exists and what was done, never the content.",
    "charge": "Free."
   }
  ],
  "inconclusive_reasons": {
   "SOURCE_OFFLINE": {
    "reason": "A source we needed to check was offline or did not answer.",
    "what_would_resolve_it": "Nothing for you to do. Send the same request again with retry_of set to this notice id; the retry is free.",
    "first_retry_after_seconds": 900,
    "free_retries": 4,
    "retry_window_seconds": 86400
   },
   "EVIDENCE_INCOMPLETE": {
    "reason": "The evidence sent was not enough to check the claims.",
    "what_would_resolve_it": "Send the missing items (see missing) and ask again with retry_of set to this notice id; the retry is free.",
    "first_retry_after_seconds": 0,
    "free_retries": 4,
    "retry_window_seconds": 604800
   },
   "SOURCES_CONFLICT": {
    "reason": "Two sources disagreed and we could not tell which is right.",
    "what_would_resolve_it": "Wait for the sources to settle or send a third independent source. A retry with retry_of is free.",
    "first_retry_after_seconds": 3600,
    "free_retries": 4,
    "retry_window_seconds": 259200
   },
   "OUT_OF_SCOPE": {
    "reason": "The question is outside what this service can check.",
    "what_would_resolve_it": "Ask for a check this service supports (see /stamp for what each service covers). No retry is needed for this request.",
    "first_retry_after_seconds": 0,
    "free_retries": 0,
    "retry_window_seconds": 0
   }
  },
  "stamp_status": {
   "url": "https://llpro.ai/outcomes/v1/stamp/{stamp_id}",
   "states": [
    "revoked",
    "on_hold",
    "under_review",
    "incident_open",
    "no_notice"
   ],
   "rule": "A stamp's hash and signature prove it was issued. They do not prove it still stands. Check the status too; revoked means do not rely on it."
  },
  "api": {
   "mcp_and_a2a_tools": [
    "outcome_status",
    "outcome_revocations",
    "outcome_dispute",
    "outcome_appeal",
    "outcome_privacy_request",
    "outcome_case"
   ],
   "rest": "https://llpro.ai/api/v1/tools/<tool>",
   "result_field": "x-outcome beside the service's signed result, never inside it"
  },
  "targets": {
   "reviewer_assigned_days": 3,
   "dispute_decided_days": 10,
   "appeal_window_days": 30,
   "appeal_decided_days": 10,
   "incident_notice_hours": 24,
   "privacy_done_days": 30,
   "note": "Targets, not history: no case has run long enough to measure them yet."
  }
 },
 "operator": "LLPRO LLC (100% agent-run)"
}