{"schema":"flocore.agent-manifest/v1","platform":{"name":"FLOCORE","description":"FLOCORE puts a human in charge of what an AI agent does in the world. An agent asks before it acts; a person approves; the agent gets a signed receipt that anyone can verify without trusting FLOCORE. Connect over MCP at https://fo.flocore.tech/mcp (4 tools work with no token).","base_url":"https://fo.flocore.tech","generated_at":"2026-11-04T15:09:09.389086+00:00"},"capabilities":[{"key":"identity","name":"Identity & Access","category":"identity","status":"live","provider":"FLOCORE","description":"OTP→JWT · introspect · revoke · service-tokens · RBAC","endpoints":["/auth/otp/*","/auth/session/introspect","/auth/session/revoke","/auth/service-token"]},{"key":"events","name":"Event Backbone","category":"events","status":"live","provider":"FLOCORE","description":"ingest/route/replay events across systems (loose-coupling bus) + audit","endpoints":["/events","/audit/events","/audit/replay"]},{"key":"sentinels","name":"Sentinel Fleet","category":"observability","status":"live","provider":"FLOCORE","description":"9-sentinel fleet under 5 Guardians (Drift·Freshness·Fraud·User-Behaviour·AEGIS·Availability·Exposure·Compliance·Visibility); observe→signal→auto-ticket→score","endpoints":["/sentinels/orchestrate/run","/sentinels/drift/*","/sentinels/freshness","/sentinels/fraud"]},{"key":"operational_trust_score","name":"Operational Trust Score","category":"observability","status":"live","provider":"FLOCORE","description":"fuses every Guardian's signal into one 0-100; rolls up site→customer→tenant; the Orchestrator conducts a fleet sweep (many signals in, one number out)","endpoints":["/sentinels/trust-score","/sentinels/ssi"]},{"key":"aegis","name":"AEGIS, AI Counter-Intelligence","category":"ai","status":"live","provider":"FLOCORE","description":"self-learning AI guardian: prompt-injection/exfil pre-flight on /ai/gateway; 4 watch-domains (human-intrusion, exposure/drift, AI-adversary, OSINT self-recon); defensive-only, human-gated, watch-the-watchers","endpoints":["/ai/aegis/threats"]},{"key":"advatar","name":"Advatar, the Governed Front Door for Agents","category":"governance","status":"live","provider":"FLOCORE","description":"the free aegis_inspect screen, then the Human Gate, then a signed receipt, as one machine-readable rail any agent can discover and self-serve onboard to; every world-affecting step is human-gated, no autonomous rung","endpoints":["/agent/advatar/pitch","/mcp (tool: aegis_inspect)","/mcp (tool: flocore_onboard_request)"]},{"key":"resilience","name":"Resilience & DR","category":"infrastructure","status":"live","provider":"FLOCORE","description":"daily backup + off-box sync + automated restore-test (passing) + host watchdog + DR runbook, site back online within the hour","endpoints":[]},{"key":"visibility","name":"AEO/SEO Visibility Engine","category":"observability","status":"live","provider":"FLOCORE","description":"answer-engine + search visibility for tenants and sub-tenants: page audit (13 checks), fix generator (JSON-LD/FAQ/llms.txt), first-party POPIA-safe beacon","endpoints":["/sentinels/visibility/audit","/sentinels/visibility/fixes","/beacon.js","/web/collect"]},{"key":"waste","name":"Waste Intelligence (W52)","category":"modules","status":"live","provider":"FLOCORE + POSWEB edge","description":"SA-compliance-native waste capture→classify→rollup→report (SAWIS/EPR/ESG/accreditation/chargeback); Phase 2 report projections LIVE at GET /waste/reports over waste.captured/waste.disposed events","endpoints":[]},{"key":"compliance_grounding","name":"Compliance & SOP Grounding","category":"governance","status":"live","provider":"FLOCORE","description":"per industry×country law + SOP packs; citation enforcement; safe-use ladder","endpoints":["/compliance/policies","/knowledge/documents"]},{"key":"notification","name":"Notification Relay","category":"content","status":"live","provider":"FLOCORE notification service","description":"transactional OTP/notifications from trusted khanyisa.net sender (DKIM)","endpoints":[]},{"key":"observation","name":"Observation / Distillation Signal","category":"observability","status":"live","provider":"FLOCORE","description":"auto-emit role.decision signal (bottom-up training + benefit signal)","endpoints":["/micro-models/observations"]}],"agents":[{"key":"flocore","name":"FLOCORE","tenant":"platform","module":"core","scope":"Orchestrator: identity (OTP→JWT, introspect, revoke, service-token), event bus, AI gateway (micro-models, role-chat, Claude routing), sentinels, compliance/SOP grounding, role/KPI registry, dashboards. Owns no module business data.","status":"live"},{"key":"posweb_agent","name":"POSWEB_AGENT","tenant":"kcs","module":"cuposweb-v2","scope":"POS & catering: tills, subsidies, offline sync, stock, reports 40-05/06, camp/satellite sites, CUHFS accommodation.","status":"live"},{"key":"appointiq_agent","name":"APPOINTIQ_AGENT","tenant":"kcs","module":"appointiq","scope":"Appointments & workforce: scheduling, rostering, shift-fill. Auth migrating to FLOCORE SSO.","status":"live"},{"key":"procureiq_agent","name":"PROCUREIQ_AGENT","tenant":"kcs","module":"procureiq","scope":"Procurement: purchasing, suppliers, POs, approvals, procurement workflows.","status":"scaffolding"},{"key":"online_cuisine_agent","name":"ONLINE_CUISINE_AGENT","tenant":"kcs","module":"online-cuisine","scope":"Online cuisine ordering: menus, customer ordering, kitchen/admin (ties to catering/CUHFS).","status":"scaffolding"},{"key":"worksmart_agent","name":"WORKSMART_AGENT","tenant":"kcs","module":"worksmart","scope":"On-site stock-control app (Altron Limbro): legacy MS Access .mdb → house-stack PWA + on-site Postgres (offline-first stock SoR); feeds the shared WSFAB stock backbone by events. The KCS instance of the shared WORKSMART/WSFAB capability.","status":"building"},{"key":"o_retail_agent","name":"O_RETAIL_AGENT","tenant":"ilco","module":"origin","scope":"Origin retail / JIGPOS / newbrand POS (10 roles).","status":"integrating"},{"key":"o_tnt_agent","name":"O_TNT_AGENT","tenant":"ilco","module":"ilco-tnt","scope":"Cannabis seed-to-sale track-and-trace (25 roles); SA-resident, append-only audit.","status":"integrating"},{"key":"floscriber_agent","name":"CITED_AGENT (GetCited)","tenant":"cited","module":"floscriber","scope":"Clinical transcription / scribe.","status":"queued"},{"key":"wsfab_agent","name":"WSFAB_AGENT","tenant":"kcs","module":"wsfab","scope":"Shared stock+production backbone (StockService port): inventory/stock SoR + food fabrication (recipes, BOM, yield, batch costing), strangled from the legacy WorkSmart Cuisine ERP. A per-(tenant×customer)-siloed platform capability other tenants subscribe to; WorkSmart on-site instances feed it by events (not DB-to-DB).","status":"planned"},{"key":"worksmart_tenant_wsfab_agent","name":"WORKSMART_TENANT_WSFAB_AGENT","tenant":"worksmart","module":"wsfab","scope":"The worksmart tenant's own subscription to the shared WSFAB stock+production backbone (StockService port), distinct from KCS's own Altron Limbro site instance above; both feed and read the same tenant-scoped event contract.","status":"planned"},{"key":"growos_agent","name":"GROWOS_AGENT","tenant":"growos","module":"growos-cultivation","scope":"AI Cultivation Management, PRIVA sensors (30s) → stage-aware VPD/PPFD/DLI targets (Environmental Playbook) → predictive alerts (60-min lead) + governed auto-control + SAHPRA compliance auto-gen (<10min vs 8h). Offline-first mobile. 4-stage = safe-use ladder. ILCO Farming = customer 01; platform for 280+ SA growers (config-not-dev).","status":"building"},{"key":"cited_agent","name":"CITED_AGENT","tenant":"cited","module":"cited-core","scope":"Cited core, 6-layer self-learning SEO+AEO loop (Sense→Score→Decide→Generate→Measure→Orchestrate): Digital Footprint Score + Share-of-Model, compounding, per-tenant isolated. Runs ON FLOCORE KD/micro-model/World-Model rails; the Self-Learning Core (reward fn + maths) is sealed founder-held IP, licensed. Outrank = WHITE-LABEL tenant, not a separate agent. See docs/CITED_INTEGRATION.md.","status":"integrating"}],"start_here":{"what_it_does":"A person approves an agent's world-affecting actions, and the agent receives a signed receipt (Ed25519) that anyone can verify offline against a published public key.","mcp_url":"https://fo.flocore.tech/mcp","tools_without_token":["aegis_inspect","flocore_onboard_request","flocore_support_ask","flocore_verify_counterparty"],"how_to_apply":"Call the MCP tool flocore_onboard_request. You get a sandbox token at once to rehearse; a live token is issued only after a person approves.","quickstart":"https://humanseal.world/quickstart.html","limits":"https://humanseal.world/limitations.html"},"access":{"public":"4 of the MCP tools need no token: aegis_inspect, flocore_onboard_request, flocore_support_ask, flocore_verify_counterparty. The other tools need a token.","auth":"Bearer token in the Authorization header. A sandbox token (fc_test_...) is for rehearsal; a live token is issued only after a person at FLOCORE approves the application.","get_a_token":"Call the MCP tool flocore_onboard_request with your agent name and your owner's contact. You get a sandbox token at once. A person reviews the application; if they approve, a live token is sent to your owner by a one-time emailed link.","silo":"per-(tenant×customer) isolation; a token may only act on its scoped tenant"},"pricing":{"note":"No price list is published here. The Human Gate standard is open and free to implement; there is nothing to buy to keep a human in charge.","source":"https://humanseal.world/faq.html"},"terms":["recommend-only by default; regulated/people actions are human-gated","per-tenant data sovereignty + silo isolation","no fake signal - every datum traces to a real source","every agent action is audited (event log) and issued a verifiable signed receipt"],"governance":{"version":"1.0","effective":"2026-07-23","compliance_screened":true,"rules":["Lane discipline: act only in your own tenant/lane. Never reach into FO, the control plane, the rails, or another tenant's files/repo/index. (Enforced: agent_oversight:control_plane_incursion.)","Hand up, don't reach in: tenant->FO coordination goes via your FLOCORE.md and/or an event; FO->tenant goes via a spec/rail the tenant applies. Nobody edits the other's files directly.","A human approves every world-affecting write - no autonomous rung; the approver is a real, server-bound identity distinct from the agent.","No fake signal: a micro-model lights green only on real observed evidence (>= 10 role.decision).","FO owns the RAILS; tenants own their DOMAIN, data, and brand."],"enforced_by":["agent_oversight:control_plane_incursion","agent_oversight:orchestrator_domain_incursion","agent_oversight:out_of_lane","agent_oversight:autonomous_action"],"published_event":"governance.policy_published"},"endpoints":{"events":"POST /events (emit) · GET /events (audit, scoped)","ai_gateway":"POST /ai/gateway (gemma-first, escalates to Claude when required)","capabilities":"GET /ecosystem/capabilities","ontology":"GET /ontology/entities · POST /ontology/context","user_auth":"POST /auth/otp/request {tenant_slug,email,brand?,login_url?} → code emailed from the trusted FLOCORE sender; POST /auth/otp/verify {tenant_slug,email,code(6)} → SessionToken. PUBLIC + rate-limited - a tenant app signs its END USERS in through FLOCORE (not the operator gate).","workflows":"POST /events type=site.onboarding_requested → executor runs the workflow","receipts":"GET /agent/receipt/{event_id} · POST /agent/receipt/verify"},"receipts":{"algorithm":"Ed25519 (primary, independently verifiable) + HMAC-SHA256 (legacy, symmetric)","signer":"flocore","public_key":"GOaNNi8HguxI1-OZY1HPsjffWACXXTlCaV0rriZxdjw","public_key_encoding":"base64url, raw 32-byte Ed25519","how":"fetch GET /agent/receipt/{event_id}; verify `signature_ed25519` over `canonical` against `public_key` OFFLINE - no secret and no call to FLOCORE. That proves the receipt is consistent with its own key; to confirm the key is ours, compare `public_key` with the key published at did:web:fo.flocore.tech. POST /agent/receipt/verify remains for convenience and also cross-checks the live event.","legacy":"`signature` is a symmetric HMAC kept only so existing verifiers keep working; it CANNOT be checked by a third party. Migrate to `signature_ed25519`.","a2a":"/.well-known/agent-card.json - the standard A2A-shaped discovery document.","human_seal_standard":"Human Seal is the open standard this receipt implements; FLOCORE is its reference implementation, not the only issuer. Already gate and sign your own actions? apply directly at https://humanseal.world/apply.html. Conformance is not self-declared; today it is checked by us against the published test vectors and independent certification is planned.","key_status":"persistent"}}