{"id":50454171,"url":"https://github.com/mizcausevic-dev/kinetic-gain-protocol-suite","last_synced_at":"2026-06-01T01:05:42.937Z","repository":{"id":357449260,"uuid":"1236958917","full_name":"mizcausevic-dev/kinetic-gain-protocol-suite","owner":"mizcausevic-dev","description":"Kinetic Gain Protocol Suite — eight open JSON specs for the answer-engine and agent era. Five core (AEO, Prompt Provenance, Agent Cards, AI Evidence, MCP Tool Cards) plus the EdTech trio (Tutor Cards, Student AI Disclosure, Classroom AI AUP). One MCP server, one visualizer, three live properties.","archived":false,"fork":false,"pushed_at":"2026-05-12T21:16:59.000Z","size":20,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-12T21:28:40.658Z","etag":null,"topics":["ai-agents","answer-engine-optimization","claude","coppa","edtech","ferpa","kinetic-gain-protocol-suite","mcp","protocol","specification"],"latest_commit_sha":null,"homepage":"https://mizcausevic-dev.github.io/kinetic-gain-visualizer/","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mizcausevic-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-05-12T18:32:55.000Z","updated_at":"2026-05-12T21:17:04.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/mizcausevic-dev/kinetic-gain-protocol-suite","commit_stats":null,"previous_names":["mizcausevic-dev/kinetic-gain-protocol-suite"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/mizcausevic-dev/kinetic-gain-protocol-suite","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mizcausevic-dev%2Fkinetic-gain-protocol-suite","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mizcausevic-dev%2Fkinetic-gain-protocol-suite/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mizcausevic-dev%2Fkinetic-gain-protocol-suite/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mizcausevic-dev%2Fkinetic-gain-protocol-suite/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mizcausevic-dev","download_url":"https://codeload.github.com/mizcausevic-dev/kinetic-gain-protocol-suite/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mizcausevic-dev%2Fkinetic-gain-protocol-suite/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33755379,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-05-31T02:00:06.040Z","response_time":95,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ai-agents","answer-engine-optimization","claude","coppa","edtech","ferpa","kinetic-gain-protocol-suite","mcp","protocol","specification"],"created_at":"2026-06-01T01:05:42.851Z","updated_at":"2026-06-01T01:05:42.926Z","avatar_url":"https://github.com/mizcausevic-dev.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Kinetic Gain Protocol Suite\n\n\u003e **A family of eleven open JSON specifications for the answer-engine and agent era — plus a fifteen-repo implementation stack that consumes them.**\n\u003e Five core specs · three EdTech extensions · one HealthTech extension · one cross-cutting incident-disclosure spec · one buyer-side procurement Decision Card (v0.3 — adds `data_vault_targets` + `retention_envelope`) · one unified visualizer · one operator console · one unified MCP server · **49 live properties on kineticgain.com** · all AGPL-3.0 (specs) + MIT (implementations).\n\u003e\n\u003e Public front door: **[suite.kineticgain.com](https://suite.kineticgain.com)**.\n\n[![Kinetic Gain Operator Console](https://raw.githubusercontent.com/mizcausevic-dev/kinetic-gain-operator-console/main/screenshots/operator-dashboard.png)](https://console.kineticgain.com)\n\n\u003e **[Kinetic Gain Operator Console](https://console.kineticgain.com)** — mission-control for the whole Suite: an interactive topology mesh (*v0.2* — runtime-gate overlays for the MCP Permission Broker / Azure Governance Bridge / SQL Contract Enforcer, ed25519 signature posture, and blast-radius tracing across the hash-chained spine), a configurable SRE operator dashboard (savable layouts, simulation throttle, per-channel latency sliders, PDF export), and live audit-stream visualization. ([repo](https://github.com/mizcausevic-dev/kinetic-gain-operator-console))\n\n[![kg pulse self-score · 100/100 · comprehensive](https://raw.githubusercontent.com/mizcausevic-dev/kineticgain-com-apex/main/docs/pulse-badge.svg)](https://kineticgain.com/.well-known/pulse-receipt.json) \u0026nbsp; *We publish the specs AND we score against them. Live receipt at [kineticgain.com/.well-known/pulse-receipt.json](https://kineticgain.com/.well-known/pulse-receipt.json), refreshed weekly by [procurement-pulse-action](https://github.com/mizcausevic-dev/procurement-pulse-action) on kineticgain.com's own GitHub Actions.*\n\nThis repository is the **single landing** for the Suite — both for the **specs** (the \"what to publish\" layer) and for the **implementation stack** that consumes them (the \"what to actually run\" layer). Each spec lives in its own repo with full normative text, JSON Schema, examples, and a permissive cross-link table. This meta-repo is where you start when you want the map.\n\n---\n\n## 🧭 The suite at a glance\n\n```\n┌──────────────────── Core (Answer Engine / Agent layer) ────────────────────┐\n│                                                                            │\n│  AEO Protocol ──── entity declaration at /.well-known/aeo.json             │\n│  Prompt Provenance ─ versioned, lineaged, reviewable LLM prompts          │\n│  Agent Cards ───── capability + refusal disclosure for AI agents          │\n│  AI Evidence Format ─ structured citations for LLM-generated claims       │\n│  MCP Tool Cards ── per-tool disclosure for MCP servers                    │\n│                                                                            │\n└────────────────────────────────────────────────────────────────────────────┘\n                                    │\n                                    │ pairs with\n                                    ▼\n┌──────────────────── EdTech trio (vendor / district / student) ─────────────┐\n│                                                                            │\n│  AI Tutor Cards ── what an AI tutor does (vendor-side)                    │\n│      ↕                                                                     │\n│  Classroom AI AUP ─ what AI use is permitted (district / school / course) │\n│      ↕                                                                     │\n│  Student AI Disclosure ─ what the student actually did (per artifact)     │\n│                                                                            │\n└────────────────────────────────────────────────────────────────────────────┘\n\n┌──────────────── HealthTech extension (vendor-side disclosure) ─────────────┐\n│                                                                            │\n│  Clinical AI Disclosure ── what a healthcare AI system does               │\n│  HIPAA / FDA / SaMD posture · bias audits · EHR (FHIR / CDS Hooks)        │\n│  references → Agent Card · AI Evidence · AI Incident Card                  │\n│                                                                            │\n└────────────────────────────────────────────────────────────────────────────┘\n                                    │\n                                    │ when things break\n                                    ▼\n┌──────────── Cross-cutting (vendor-published, references all) ──────────────┐\n│                                                                            │\n│  AI Incident Card ── post-incident disclosure (\"CVE for AI agents\")       │\n│  references → Agent / Tutor / Tool Cards · Prompt Provenance · AI Evidence │\n│                                                                            │\n└────────────────────────────────────────────────────────────────────────────┘\n                                    │\n                                    │ buyer-side (when approving / rejecting)\n                                    ▼\n┌──────────── Cross-cutting (buyer-published, references vendor docs) ───────┐\n│                                                                            │\n│  AI Procurement Decision Card ── buyer's signed-off position on a vendor  │\n│  status: approved / approved-with-conditions / rejected / withdrawn       │\n│  references → AEO · Agent / Tool / Tutor / Clinical Cards · AI Evidence    │\n│                                                                            │\n└────────────────────────────────────────────────────────────────────────────┘\n```\n\nThe Suite is **bilateral**: vendors publish disclosures (the first six rows); buyers publish Decision Cards that approve or reject those disclosures. AI Incident Cards close the loop when something breaks.\n\n---\n\n## 📐 Specifications\n\nEvery spec carries a top-level `\u003cname\u003e_version` field. The unified visualizer detects which spec a document is in by inspecting that single field.\n\n| Spec | Repo | Detect via | Well-known path |\n|---|---|---|---|\n| **AEO Protocol** | [`aeo-protocol-spec`](https://github.com/mizcausevic-dev/aeo-protocol-spec) | `aeo_version` | `/.well-known/aeo.json` |\n| **Prompt Provenance** | [`prompt-provenance-spec`](https://github.com/mizcausevic-dev/prompt-provenance-spec) | `provenance_version` | — |\n| **Agent Cards** | [`agent-cards-spec`](https://github.com/mizcausevic-dev/agent-cards-spec) | `agent_card_version` | `/.well-known/agents/\u003cagent_id\u003e.json` |\n| **AI Evidence Format** | [`ai-evidence-format-spec`](https://github.com/mizcausevic-dev/ai-evidence-format-spec) | `evidence_version` | — |\n| **MCP Tool Cards** | [`mcp-tool-card-spec`](https://github.com/mizcausevic-dev/mcp-tool-card-spec) | `tool_card_version` | `/.well-known/mcp-tools/\u003ctool_name\u003e.json` |\n| **AI Tutor Cards** _(EdTech)_ | [`ai-tutor-card-spec`](https://github.com/mizcausevic-dev/ai-tutor-card-spec) | `tutor_card_version` | `/.well-known/tutors/\u003ctutor_id\u003e.json` |\n| **Student AI Disclosure** _(EdTech)_ | [`student-ai-disclosure-spec`](https://github.com/mizcausevic-dev/student-ai-disclosure-spec) | `disclosure_version` | — (travels with the artifact) |\n| **Classroom AI AUP** _(EdTech)_ | [`classroom-ai-aup-spec`](https://github.com/mizcausevic-dev/classroom-ai-aup-spec) | `aup_version` | `/.well-known/ai-aup.json` |\n| **Clinical AI Disclosure** _(HealthTech)_ | [`clinical-ai-disclosure-spec`](https://github.com/mizcausevic-dev/clinical-ai-disclosure-spec) | `clinical_ai_card_version` | `/.well-known/clinical-ai/\u003csystem_id\u003e.json` |\n| **AI Incident Card** _(cross-cutting, vendor-side)_ | [`ai-incident-card-spec`](https://github.com/mizcausevic-dev/ai-incident-card-spec) | `incident_card_version` | `/.well-known/ai-incidents/\u003cid\u003e.json` (+ index at `/.well-known/ai-incidents.json`) |\n| **AI Procurement Decision Card** _(cross-cutting, buyer-side)_ | [`ai-procurement-decision-spec`](https://github.com/mizcausevic-dev/ai-procurement-decision-spec) | `decision_card_version` | `/.well-known/procurement-decisions/\u003cid\u003e.json` |\n\nAll eleven: AGPL-3.0 spec text, freely implementable, v0.1 draft, JSON Schema draft 2020-12, tagged [`kinetic-gain-protocol-suite`](https://github.com/topics/kinetic-gain-protocol-suite). The **[NIST AI RMF crosswalk](https://suite.kineticgain.com/docs/nist-rmf-crosswalk.md)** maps every spec — plus the implementation tooling below — to specific NIST AI RMF subcategories.\n\n---\n\n## 🧱 Reference implementations\n\nThe Suite now has real implementation tooling attached to several of its disclosure and distribution patterns:\n\n- **MCP Tool Cards**\n  - [`mcp-tool-card-generator`](https://github.com/mizcausevic-dev/mcp-tool-card-generator) — emits Tool Card disclosures directly from MCP `tools/list` output\n  - [`mcp-registry-risk-scanner`](https://github.com/mizcausevic-dev/mcp-registry-risk-scanner) — validates manifest and registry posture around published MCP servers\n  - [`mcp-tools-diff`](https://github.com/mizcausevic-dev/mcp-tools-diff) — detects `tools/list` drift and breaking-change posture over time\n- **Agent Cards**\n  - [`agent-card-runtime-adapters`](https://github.com/mizcausevic-dev/agent-card-runtime-adapters) — maps Agent Cards into runtime adapters for OpenAI, Anthropic, and Vercel execution layers\n- **AI Evidence Format / Evidence Ledger**\n  - [`rag-evidence-graph`](https://github.com/mizcausevic-dev/rag-evidence-graph) — corpus-level citation graph and evidence coverage analysis\n  - [`rag-evidence-trace-linker`](https://github.com/mizcausevic-dev/rag-evidence-trace-linker) — per-call trace linkage for evidence integrity on RAG and generation flows\n- **`/.well-known/` distribution pattern**\n  - [`wellknown-index-aggregator`](https://github.com/mizcausevic-dev/wellknown-index-aggregator) — builds and validates `/.well-known/index.json` for multi-doc publisher estates\n  - [`governance-disclosure-operator`](https://github.com/mizcausevic-dev/governance-disclosure-operator) — Kubernetes-native publisher for governance disclosures\n\n---\n\n## 🛠️ Suite × Implementations\nThe Suite is a set of specs. **This section is the software that consumes them** — fifteen repos across Tiers A–E, all CI-green, semver-tagged, MIT-licensed, with **five cross-ecosystem hooks** tying them together. Grouped by the buyer most likely to land on the repo first.\n\n### 🕸️ How it composes\n\n```mermaid\nflowchart TB\n    classDef spec fill:#10b981,stroke:#065f46,color:#fff,stroke-width:2px\n    classDef hook fill:#3b82f6,stroke:#1e40af,color:#fff,stroke-width:2px\n    classDef sup fill:#f3f4f6,stroke:#6b7280,color:#1f2937\n    classDef stream fill:#f59e0b,stroke:#92400e,color:#fff\n    classDef mcp fill:#a855f7,stroke:#581c87,color:#fff,stroke-width:2px\n\n    SPECS[\"📐 11 Suite specs\u003cbr/\u003eAEO · Agent · Tool · Tutor · AUP · Disclosure\u003cbr/\u003eEvidence · Provenance · Clinical · Incident · Decision\"]:::spec\n\n    SPECS --\u003e|\"#1 ingest Suite docs\"| PDA[\"procurement-decision-api\u003cbr/\u003edrafts Decision Cards\"]:::hook\n    PDA --\u003e|\"#2 conditions → runtime gates\"| PAC[\"policy-as-code-engine\u003cbr/\u003ePolicyBundle enforcement\"]:::hook\n    PDA --\u003e|\"#3 extract owners\"| DCR[\"data-contract-registry\u003cbr/\u003eschema + SLAs\"]:::hook\n    DCR --\u003e|\"#4 streaming CSV check\"| CDQ[\"csv-data-quality-rs\u003cbr/\u003erow-by-row validation\"]:::hook\n    DCR --\u003e|\"#5 contract → DDL\"| SCE[\"sql-contract-enforcer\u003cbr/\u003ecross-dialect table constraints\"]:::hook\n\n    SPECS -.-\u003e|sign + verify| HA[\"hash-attestation-rs\u003cbr/\u003eed25519 over canonical hash\"]:::sup\n    SPECS -.-\u003e|drift detection| AVS[\"aeo-validator-service\u003cbr/\u003ealways-on validation\"]:::sup\n    AVS -.-\u003e|JSONL feed| AGE[\"aeo-graph-explorer-rs\u003cbr/\u003egraph-query layer #5\"]:::sup\n    SPECS -.-\u003e|incident → plan| ICR[\"incident-correlation-rs\u003cbr/\u003eSuite-graph BFS\"]:::sup\n    ICR -.-\u003e|drives| PAC\n\n    PDA --\u003e AS\n    PAC --\u003e AS\n    DCR --\u003e AS\n    AVS --\u003e AS\n    ICR --\u003e AS\n    HA --\u003e AS\n    AS[\"📋 audit-stream-py\u003cbr/\u003ehash-chained tamper-evident spine\"]:::stream\n\n    SPECS ==\u003e|spec tools| MCP\n    PDA ==\u003e|preview tools| MCP\n    AS ==\u003e|event tools| MCP\n    HA ==\u003e|verify tools| MCP\n    MCP[\"🤖 mcp-kinetic-gain v0.7.1\u003cbr/\u003e63 tools · one Claude Desktop config entry\"]:::mcp\n```\n\n**Green** = the spec foundation. **Blue** = the five cross-ecosystem hooks that make this a stack rather than a pile of repos. **Grey** = supporting tools that feed either side. **Amber** = the tamper-evident audit-stream spine every governance moment writes to. **Purple** = the unified MCP surface that exposes the whole thing to Claude.\n\n### 📋 The audit-stream spine — eleven producers, five runtimes\n\nZoom in on the amber spine: every governance moment in the stack writes to **one hash-chained, tamper-evident log** via `audit-stream-py`. Same opt-in env-var contract (`AUDIT_STREAM_URL`) across every producer; same best-effort semantics (a failed POST is logged, never raised). The original seven (four FastAPI services + three Rust crates) are now joined by four runtime + data-tier producers — **`mcp-permission-broker`** and **`azure-openai-governance-bridge`** (tool-invocation gates), **`pg-audit-stream-extension`** (Postgres CRUD via `pg_notify`), and **`wp-kinetic-gain-audit`** (WordPress/MySQL) — so the spine now spans **Python, Rust, PL/pgSQL, PHP, and Azure Functions**. One verifiable narrative an auditor can replay end-to-end, no matter which tier emitted the event.\n\n```mermaid\nflowchart LR\n    classDef pyprod fill:#3b82f6,stroke:#1e40af,color:#fff,stroke-width:2px\n    classDef rsprod fill:#dea584,stroke:#92400e,color:#1f2937,stroke-width:2px\n    classDef spine fill:#f59e0b,stroke:#92400e,color:#fff,stroke-width:3px\n    classDef sink fill:#f3f4f6,stroke:#6b7280,color:#1f2937\n\n    PDA[\"procurement-decision-api\u003cbr/\u003ePython · FastAPI\"]:::pyprod\n    AVS[\"aeo-validator-service\u003cbr/\u003ePython · FastAPI\"]:::pyprod\n    PCE[\"policy-as-code-engine\u003cbr/\u003ePython · FastAPI\"]:::pyprod\n    DCR[\"data-contract-registry\u003cbr/\u003ePython · FastAPI\"]:::pyprod\n    HA[\"hash-attestation\u003cbr/\u003eRust · crypto library\"]:::rsprod\n    ICR[\"incident-correlation\u003cbr/\u003eRust · graph library\"]:::rsprod\n    AGE[\"aeo-graph-explorer\u003cbr/\u003eRust · axum service\"]:::rsprod\n    MPB[\"mcp-permission-broker +\u003cbr/\u003eazure-openai-governance-bridge\u003cbr/\u003ePython · runtime gates\"]:::pyprod\n    PGX[\"pg-audit-stream-extension\u003cbr/\u003ePL/pgSQL · pg_notify\"]:::rsprod\n    WPA[\"wp-kinetic-gain-audit\u003cbr/\u003ePHP · WordPress/MySQL\"]:::rsprod\n\n    PDA --\u003e|\"decision_card_drafted\"| AS\n    AVS --\u003e|\"watch_created\u003cbr/\u003ewatch_drifted\u003cbr/\u003ewatch_validity_flipped\"| AS\n    PCE --\u003e|\"policy_bundle_registered\u003cbr/\u003erequest_allowed\u003cbr/\u003erequest_denied\"| AS\n    DCR --\u003e|\"contract_promoted\u003cbr/\u003econtract_deprecated\u003cbr/\u003econtract_compatibility_failed\"| AS\n    HA --\u003e|\"attestation_signed\u003cbr/\u003eattestation_verified\u003cbr/\u003eattestation_failed\"| AS\n    ICR --\u003e|\"incident_correlated\u003cbr/\u003eincident_correlation_failed\"| AS\n    AGE --\u003e|\"graph_ingested\u003cbr/\u003egraph_ingest_failed\"| AS\n    MPB --\u003e|\"tool_invocation_allowed\u003cbr/\u003etool_invocation_denied\u003cbr/\u003etool_invocation_required_approval\"| AS\n    PGX --\u003e|\"\u0026lt;configured kind\u0026gt; on table CRUD\"| AS\n    WPA --\u003e|\"content_published\u003cbr/\u003eplugin_activated\u003cbr/\u003euser_role_changed\"| AS\n\n    AS{{\"📋 audit-stream-py\u003cbr/\u003ehash-chained · tamper-evident\u003cbr/\u003eSSE live tail · REST query · GET /verify\"}}:::spine\n\n    AS --\u003e|GET /events/stream| LT[\"governance dashboards\u003cbr/\u003e(live tail)\"]:::sink\n    AS --\u003e|GET /events| Q[\"compliance evidence\u003cbr/\u003e(REST query)\"]:::sink\n    AS --\u003e|GET /verify| V[\"auditor replay\u003cbr/\u003e(walk the chain)\"]:::sink\n```\n\n**Blue** = Python FastAPI producers. **Tan** = Rust producers (two libraries gated behind `--features audit-stream` so library consumers can strip out the HTTP dep, one axum service with the feature on by default). **Amber** = the spine itself. **Grey** = the three downstream surfaces auditors and operators consume.\n\nAdding the next producer is a ~60-line module: copy the `audit_stream` shape (Python, Rust, PL/pgSQL, or PHP), pick your event kinds, point at `AUDIT_STREAM_URL`. The data-tier producers prove the point — `pg-audit-stream-extension` catches direct DML the application path would miss, and `wp-kinetic-gain-audit` brings the same tamper-evident chain to any WordPress estate. Next natural candidates: `slo-budget-tracker` (`slo_burn_started` / `slo_recovered`) or `reliability-toolkit-rs` (`breaker_opened` / `breaker_recovered`).\n\n### 🛒 Procurement reviewer / buyer-side governance\n\n| Repo | Lang | What it does |\n|---|---|---|\n| [`procurement-decision-api`](https://github.com/mizcausevic-dev/procurement-decision-api) | Python · FastAPI | Drafts AI Procurement Decision Cards from a buyer rubric and a set of vendor Suite documents (AEO + agent-card + tool-card + ai-evidence + …). **The first cross-ecosystem bridge** in the portfolio — Suite × Decision Intelligence. |\n| [`policy-as-code-engine`](https://github.com/mizcausevic-dev/policy-as-code-engine) | Python · FastAPI | Declarative policy evaluator. Headline: `POST /bundles/from-decision-card` turns a Decision Card's `conditions[]` into a runtime-enforceable PolicyBundle. Closes the loop from \"buyer signed off\" to \"request gated.\" **Cross-ecosystem hook #2.** |\n| [`hash-attestation-rs`](https://github.com/mizcausevic-dev/hash-attestation-rs) | Rust · ed25519 | Sign and verify Suite documents with ed25519 over the canonical-hash convention every other Suite repo already uses. **The missing \"this AEO actually came from the vendor\" layer.** |\n\n### 🌐 AEO consumer / spec implementer\n\n| Repo | Lang | What it does |\n|---|---|---|\n| [`aeo-validator-service`](https://github.com/mizcausevic-dev/aeo-validator-service) | Python · FastAPI | Always-on HTTP validator for AEO + all 11 Suite docs. Auto-detects the spec via `*_version` sniffing, hashes canonically, tracks **drift** across re-checks (`POST /watches/{id}/recheck` returns a structured `DriftReport`). Layer 4 of the AEO Reference Stack. |\n| [`aeo-graph-explorer-rs`](https://github.com/mizcausevic-dev/aeo-graph-explorer-rs) | Rust · axum · petgraph | HTTP graph-query service over `aeo-crawler` JSONL output. `GET /neighbors`, `GET /shortest-path`, `GET /find-by-claim`, atomic `POST /ingest`. Layer 5 of the AEO Reference Stack. |\n| [`incident-correlation-rs`](https://github.com/mizcausevic-dev/incident-correlation-rs) | Rust · petgraph | Walks the Suite graph from an `IncidentCard` and emits a structured remediation plan: `DecisionCard → RecheckPolicy`, `Vendor → RequestReview`, AEO/agent/tool → `Revalidate`. |\n\n### 🗃️ Data team\n\n| Repo | Lang | What it does |\n|---|---|---|\n| [`data-contract-registry`](https://github.com/mizcausevic-dev/data-contract-registry) | Python · FastAPI | Schema registry with semver versioning, compatibility checks (backward / forward / full), declared owners, freshness SLAs. **`POST /contracts/owners/from-decision-card` pulls Owner records out of a Procurement Decision Card. Cross-ecosystem hook #3.** |\n| [`csv-data-quality-rs`](https://github.com/mizcausevic-dev/csv-data-quality-rs) | Rust · tokio · csv | Streaming CSV validator against a `data-contract-registry` contract. Async, row-by-row, structured violation report (`required` / `bad_type` / `enum_mismatch` / `column_count_mismatch` / `invalid_json`). **Cross-ecosystem hook #4.** |\n| [`sql-contract-enforcer`](https://github.com/mizcausevic-dev/sql-contract-enforcer) | Python · SQL | Turns a `data-contract-registry` contract into enforceable cross-dialect DDL (CHECK / NOT NULL / UNIQUE / PK / FK) for Postgres, MySQL, Snowflake, BigQuery, plus a contract-vs-schema checker for CI. Dialect-aware (BigQuery demotes CHECK/UNIQUE to comments + PK/FK to NOT ENFORCED). **Cross-ecosystem hook #5.** |\n\n### 🛡️ SRE / Platform reliability stack\n\nTen repos that compose into a single layered reliability story: identity → rate limits → canary → registry → SLO budget → Rust primitives → feature flags → shadow traffic → tamper-evident audit log.\n\n| Repo | Lang | What it does |\n|---|---|---|\n| [`slo-budget-tracker`](https://github.com/mizcausevic-dev/slo-budget-tracker) | Python · FastAPI · Prometheus | SLO + error-budget library, multi-window burn-rate alerts (SRE workbook threshold 14.4). |\n| [`reliability-toolkit-rs`](https://github.com/mizcausevic-dev/reliability-toolkit-rs) | Rust · Tokio | Token-bucket rate limiter · 3-state circuit breaker · exponential-backoff retry with jitter · bulkhead. |\n| [`feature-flag-rs`](https://github.com/mizcausevic-dev/feature-flag-rs) | Rust · Tokio | Server-side flag eval — targeting rules, sticky percentage rollouts (SHA-256 bucketing, no RNG), hot reload. |\n| [`request-shadow-rs`](https://github.com/mizcausevic-dev/request-shadow-rs) | Rust · Tokio | Async request mirroring with sampling + divergence detection. The SRE primitive for safe migrations. |\n| [`audit-stream-py`](https://github.com/mizcausevic-dev/audit-stream-py) | Python · FastAPI · SSE | Append-only governance event stream, hash-chained for tamper-evidence. Every portfolio repo can produce events here. |\n| _(Plus 5 earlier reliability repos)_ | Python | `rate-limit-shield` · `identity-mesh` · `agent-canary` · `model-registry-pro` — defense-in-depth predecessors. |\n\n### 🤖 MCP / Claude integrator\n\n| Repo | Lang | What it does |\n|---|---|---|\n| [`mcp-kinetic-gain`](https://github.com/mizcausevic-dev/mcp-kinetic-gain) | TypeScript | **Unified Suite MCP server** — 63 tools across 11 specs (v0.7.1). One Claude Desktop config entry. Headline tools: `aup_check_compliance` (joins AUP + Disclosure into one allow/deny call); `decision_card_validate` (enforces the full Decision Card conditional rule set). |\n| [`mcp-reliability-toolkit`](https://github.com/mizcausevic-dev/mcp-reliability-toolkit) | TypeScript | Reliability MCP server — `compute_slo_burn`, `design_rate_limiter`, `design_circuit_breaker`, `compose_reliability_pattern`. Same math as `slo-budget-tracker`; emits Python + Rust configs. |\n| [`mcp-decision-intelligence`](https://github.com/mizcausevic-dev/mcp-decision-intelligence) | TypeScript | Decision Intelligence MCP server — `validate_decision_card`, `preview_policy_bundle`, `plan_incident_remediation`, `check_contract_compatibility`. Read-only preview of what the live Python/Rust services would compute. |\n\n### 🚦 Runtime enforcement — turning \"buyer signed off\" into \"request denied\"\n\nThe Decision Card layer decides; these gates enforce, at the moment a tool is invoked, and write every verdict to the spine:\n\n| Repo | Lang | What it does |\n|---|---|---|\n| [`mcp-permission-broker`](https://github.com/mizcausevic-dev/mcp-permission-broker) | Python | Runtime gate between a Decision Card and an MCP tool call. Composes Decision Card conditions into deny-trumps-allow PolicyBundles; emits `tool_invocation_*` to the spine. |\n| [`azure-openai-governance-bridge`](https://github.com/mizcausevic-dev/azure-openai-governance-bridge) | Python · Azure Functions · Bicep | The Azure-native sibling — an Azure Function in front of Azure OpenAI enforcing the same PolicyBundle contract on every chat-completion call (deployment + each declared tool). Puts the Suite's governance on the data path enterprises actually run AI on. |\n\n### The five cross-ecosystem hooks\n\nWhat makes the stack *a stack* rather than a list of repos:\n\n1. **`procurement-decision-api` → Suite documents.** Ingests AEO / agent-card / tool-card / ai-evidence by URL; emits a Decision Card. (Suite × Decision Intelligence.)\n2. **`policy-as-code-engine` → `procurement-decision-api`.** `POST /bundles/from-decision-card` turns approve / reject / approve-with-conditions into runtime-enforceable allow / deny / per-condition gates.\n3. **`data-contract-registry` → `procurement-decision-api`.** `POST /contracts/owners/from-decision-card` extracts buyer + decision_maker into Owner records so freshly registered contracts carry paging info nobody re-types.\n4. **`csv-data-quality-rs` → `data-contract-registry`.** Streaming CSV validator against a registered contract — producers prove their output matches, row by row.\n5. **`sql-contract-enforcer` → `data-contract-registry`.** Compiles the same contract into cross-dialect DDL (CHECK / NOT NULL / UNIQUE / PK / FK across Postgres, MySQL, Snowflake, BigQuery) — enforcing at the table boundary what hook #4 validates row-wise.\n\nThe implementation stack is **independently usable** — any repo composes with the rest, none requires it — and the Decision Card now enforces at three layers: the MCP tool call (`mcp-permission-broker`), the Azure OpenAI call (`azure-openai-governance-bridge`), and the database table (`sql-contract-enforcer`).\n\n---\n\n## 🔌 One MCP server. 63 tools. Eleven specs.\n\n[`mcp-kinetic-gain`](https://github.com/mizcausevic-dev/mcp-kinetic-gain) (v0.7.1) is the unified [Model Context Protocol](https://modelcontextprotocol.io) server exposing every runtime Kinetic Gain spec as callable tools. One Claude Desktop / Cursor / MCP-client config entry; 63 tools across all eleven specs.\n\n| Spec | Tools |\n|---|---|\n| AEO Protocol | `aeo_fetch` · `aeo_inspect` · `aeo_get_claim` · `aeo_well_known_url` |\n| Prompt Provenance | `prompt_provenance_validate` · `prompt_provenance_inspect` · `prompt_provenance_eval_result` |\n| Agent Cards | `agent_card_well_known_url` · `agent_card_inspect` · `agent_card_tool_disclosure` · `agent_card_validate` |\n| AI Evidence Format | `ai_evidence_validate` · `ai_evidence_inspect` · `ai_evidence_verify_hash` |\n| MCP Tool Cards | `tool_card_well_known_url` · `tool_card_inspect` · `tool_card_tested_with` · `tool_card_validate` |\n| AI Tutor Cards | `tutor_card_well_known_url` · `tutor_card_fetch` · `tutor_card_validate` · `tutor_card_inspect` · `tutor_card_subject_check` · `tutor_card_coppa_check` |\n| Student AI Disclosure | `disclosure_validate` · `disclosure_inspect` · `disclosure_verify_artifact_hash` · `disclosure_verify_prompt_hash` · `disclosure_aup_check` |\n| Classroom AI AUP | `aup_well_known_url` · `aup_fetch` · `aup_validate` · `aup_inspect` · **`aup_check_compliance`** |\n| Clinical AI Disclosure | `clinical_ai_well_known_url` · `clinical_ai_validate` · `clinical_ai_inspect` · `clinical_ai_samd_check` |\n| AI Incident Card | `incident_validate` · `incident_inspect` · `incident_index_fetch` · `incident_affected_walk` |\n| AI Procurement Decision Card | **`decision_card_validate`** · `decision_card_inspect` · `decision_card_conditions` · `decision_card_signature_check` |\n\n126 tests pass · typecheck clean · stdio MCP server, drops into any MCP-compatible client. Sibling MCP servers for the Reliability Stack (`mcp-reliability-toolkit`) and Decision Intelligence (`mcp-decision-intelligence`) exist for narrower use cases.\n\n---\n\n## 🖼️ One visualizer. Eleven specs.\n\n[`kinetic-gain-visualizer`](https://mizcausevic-dev.github.io/kinetic-gain-visualizer/) auto-detects the spec from the top-level `*_version` field and renders the appropriate procurement-grade view. Live on GitHub Pages.\n\n- **Visualize** — the auto-detected renderer (FERPA / COPPA / GDPR badges for tutor cards, role-tone pills + artifact-hash binding for disclosures, vendor-requirements card in dark/authority tone for AUPs, full conditional-rule preview for Decision Cards, etc.)\n- **Editor** — paste any spec document and watch the right view light up\n- **Architecture** — the 11-spec map\n- **Tools** — searchable catalog of all 63 MCP tools\n- **About** — detection model + cross-links\n\n---\n\n## ⚙️ Suite governance Actions — 9-action CI ecosystem\n\nA pre-built set of GitHub Actions for **PR-gating governance documents** before merge. Drop them into any repo that holds AgentCards / Tool Cards / prompt-provenance / evidence bundles / OTel spans and they post a Markdown summary as a PR comment + fail the build on high-severity findings.\n\n### Per-protocol fleet-summary gates (4)\n| Action | Wraps | Catches |\n|---|---|---|\n| [`agent-card-fleet-summary-action`](https://github.com/mizcausevic-dev/agent-card-fleet-summary-action) | `agent-card-fleet-summary` | autonomous-without-IRU, destructive-on-non-autonomous, persistent-memory-without-refusal-taxonomy |\n| [`mcp-tool-card-fleet-summary-action`](https://github.com/mizcausevic-dev/mcp-tool-card-fleet-summary-action) | `mcp-tool-card-fleet-summary` | destructive-without-human-approval, high-PII-without-rate-limit, writes-secrets-without-audit |\n| [`prompt-provenance-fleet-summary-action`](https://github.com/mizcausevic-dev/prompt-provenance-fleet-summary-action) | `prompt-provenance-fleet-summary` | approved-without-evaluations, no-reviewers, failing-eval-on-approved, deprecated-still-referenced |\n| [`evidence-bundle-fleet-summary-action`](https://github.com/mizcausevic-dev/evidence-bundle-fleet-summary-action) | `evidence-bundle-fleet-summary` | bundle-expired, unsigned-regulated-bundle, cross-bundle-hash-collision, oversized-bundle |\n\n### Cross-protocol governance gates (3)\n| Action | Catches |\n|---|---|\n| [`kg-suite-spec-version-tracker-action`](https://github.com/mizcausevic-dev/kg-suite-spec-version-tracker-action) | **Version drift** — same protocol on two different spec versions in one fleet |\n| [`kg-suite-conformance-runner-action`](https://github.com/mizcausevic-dev/kg-suite-conformance-runner-action) | **Structural conformance** — missing required top-level blocks per spec |\n| [`kg-suite-canonicalize-action`](https://github.com/mizcausevic-dev/kg-suite-canonicalize-action) | **Silent edits** — doc's canonical sha256 changed without a version bump |\n\n### Cost + cluster gates (2 — pre-existing)\n| Action | Catches |\n|---|---|\n| [`llm-cost-rollup-action`](https://github.com/mizcausevic-dev/llm-cost-rollup-action) | GenAI FinOps — budget breaches across OTel cost-annotated spans |\n| [`k8s-pre-merge-action`](https://github.com/mizcausevic-dev/k8s-pre-merge-action) | K8s pre-merge — deprecated APIs, RBAC over-scope, Pod Security, Helm values coverage |\n\nAll nine are composite Node 20 actions with `dist/` committed for SHA/tag pinning — no build step needed in the consuming workflow.\n\n---\n\n## 🛡️ Testing artifact\n\n| Repo | What it does |\n|---|---|\n| [`prompt-injection-bench`](https://github.com/mizcausevic-dev/prompt-injection-bench) | Open 30-attack prompt-injection corpus + Python harness. Every record carries an `agent_card_refusal_categories` back-ref to the [Agent Card](https://github.com/mizcausevic-dev/agent-cards-spec) `refusal_taxonomy[].category` it tests. A vendor can grep their declared categories against the corpus to verify their stated commitments hold under attack — and failed runs become natural inputs for [AI Incident Cards](https://github.com/mizcausevic-dev/ai-incident-card-spec). **Visual harness live at [bench.kineticgain.com](https://bench.kineticgain.com).** |\n\nThe bench is **not a twelfth spec** — it's the *testing-counterpart* to the disclosure layer. The Suite tells you what an agent should refuse; the bench tells you whether it actually does.\n\n---\n\n## 🌐 Live properties — 32 total\n\n### Hubs + tools (8)\n| URL | What it serves |\n|---|---|\n| **[suite.kineticgain.com](https://suite.kineticgain.com)** | **Canonical front door** for the entire Suite — 11-spec map, full spec table, two-front-doors section, NIST RMF crosswalk |\n| [docs.kineticgain.com](https://docs.kineticgain.com) | **Quickstart hub** — per-role guides + canonical `/.well-known/` path map |\n| [directory.kineticgain.com](https://directory.kineticgain.com) | **Vendor directory** — curated list of domains publishing Kinetic Gain documents |\n| [examples.kineticgain.com](https://examples.kineticgain.com) | **Examples gallery** — sidebar of 11 specs, click for canonical example with JSON highlight |\n| [walker.kineticgain.com](https://walker.kineticgain.com) | **well-known-walker** — paste any domain, see every Kinetic Gain disclosure it publishes |\n| [bench.kineticgain.com](https://bench.kineticgain.com) | **prompt-injection-bench** — paste a JSONL transcript, see pass rates by category and severity |\n| [pulse.kineticgain.com](https://pulse.kineticgain.com) | **AI Procurement Pulse** — quarterly research index of vendor disclosure across the open internet. [Issue #1 \"The Zero Baseline\"](https://pulse.kineticgain.com/issue-1/) is live (powered by `procurement-pulse-engine` + `well-known-probe-js`) |\n| [console.kineticgain.com](https://console.kineticgain.com) | **Operator Console** — mission-control for the Suite: interactive topology mesh (*v0.2* — runtime-gate overlays, ed25519 signature posture, blast-radius tracing), configurable SRE operator dashboard, live audit-stream visualization, PDF export ([repo](https://github.com/mizcausevic-dev/kinetic-gain-operator-console)) |\n\n### Per-spec landings (11)\n| URL | Spec |\n|---|---|\n| [aeo.kineticgain.com](https://aeo.kineticgain.com) | AEO Protocol — interactive visualizer |\n| [prompts.kineticgain.com](https://prompts.kineticgain.com) | Prompt Provenance |\n| [agents.kineticgain.com](https://agents.kineticgain.com) | Agent Cards |\n| [evidence.kineticgain.com](https://evidence.kineticgain.com) | AI Evidence Format |\n| [toolcards.kineticgain.com](https://toolcards.kineticgain.com) | MCP Tool Cards |\n| [tutor.kineticgain.com](https://tutor.kineticgain.com) | AI Tutor Cards (EdTech) |\n| [student.kineticgain.com](https://student.kineticgain.com) | Student AI Disclosure (EdTech) |\n| [aup.kineticgain.com](https://aup.kineticgain.com) | Classroom AI AUP (EdTech) |\n| [clinical.kineticgain.com](https://clinical.kineticgain.com) | Clinical AI Disclosure (HealthTech) |\n| [incidents.kineticgain.com](https://incidents.kineticgain.com) | AI Incident Card (cross-cutting, vendor-side) |\n| [decisions.kineticgain.com](https://decisions.kineticgain.com) | AI Procurement Decision Card (cross-cutting, buyer-side) |\n\n### Earlier product surfaces (5)\n| URL | What it does |\n|---|---|\n| [gv.kineticgain.com](https://gv.kineticgain.com) | GitVisualizer — visual portfolio intelligence for any GitHub user |\n| [mcp.kineticgain.com](https://mcp.kineticgain.com) | MCP Sentinel — governance dashboard for MCP servers |\n| [rag.kineticgain.com](https://rag.kineticgain.com) | RAG Sentinel — hallucination, drift, citation quality monitoring |\n| [observe.kineticgain.com](https://observe.kineticgain.com) | AgentObserve — operator console for AI agent fleets |\n| [mizcausevic-dev.github.io/kinetic-gain-visualizer](https://mizcausevic-dev.github.io/kinetic-gain-visualizer/) | Unified visualizer (GitHub Pages, all 11 specs) |\n\n### Cloud Identity, Platform, FinOps \u0026 Threat Detection Governance lane (8)\nProduction-hardened (v1.0-prod) synthetic-data operator consoles covering the multi-cloud admin stack — Microsoft, AWS, GCP, Azure. AGPL-3.0-or-later, dual-Node CI, dependabot, 95%+ statement coverage, each deployed on its own GitHub Pages subdomain.\n\n| URL | What it does | Repo |\n|---|---|---|\n| [entra.kineticgain.com](https://entra.kineticgain.com) | Microsoft Entra access reviews, privileged-role auto-approval drift, reviewer self-review detection, decision-overdue posture | [`entra-access-review-control-plane`](https://github.com/mizcausevic-dev/entra-access-review-control-plane) |\n| [intune.kineticgain.com](https://intune.kineticgain.com) | Microsoft Intune device compliance, jailbreak/root detection, encryption gaps, OS-drift, stale check-ins, BYOD scope | [`intune-device-compliance-ops`](https://github.com/mizcausevic-dev/intune-device-compliance-ops) |\n| [retention.kineticgain.com](https://retention.kineticgain.com) | Microsoft 365 Purview retention coverage and eDiscovery custodian / hold orchestration | [`m365-retention-case-orchestrator`](https://github.com/mizcausevic-dev/m365-retention-case-orchestrator) |\n| [aws.kineticgain.com](https://aws.kineticgain.com) | AWS IAM Access Analyzer posture, public-access bindings, cross-account trust, remediation sequencing | [`aws-iam-access-analyzer-console`](https://github.com/mizcausevic-dev/aws-iam-access-analyzer-console) |\n| [guardduty.kineticgain.com](https://guardduty.kineticgain.com) | AWS GuardDuty detector posture, threat-finding triage, credential exfiltration / crypto-mining / anomalous-API behavior, response sequencing | [`aws-guardduty-triage-board`](https://github.com/mizcausevic-dev/aws-guardduty-triage-board) |\n| [gcp.kineticgain.com](https://gcp.kineticgain.com) | GCP IAM snapshot drift, public `allUsers` bindings, `roles/editor` creep, service-account token-creator grants, org-policy mismatch | [`gcp-iam-policy-diff-lab`](https://github.com/mizcausevic-dev/gcp-iam-policy-diff-lab) |\n| [billing.kineticgain.com](https://billing.kineticgain.com) | GCP billing-anomaly routing, budget breaches, spend-spike escalation, idle commitments, unlabeled-cost drift, billing-export gaps | [`gcp-billing-anomaly-router`](https://github.com/mizcausevic-dev/gcp-billing-anomaly-router) |\n| [zone.kineticgain.com](https://zone.kineticgain.com) | Azure landing-zone baseline drift, owner-role drift, missing deny assignments, disabled Defender, diagnostics gaps, route bypass | [`azure-landing-zone-drift-radar`](https://github.com/mizcausevic-dev/azure-landing-zone-drift-radar) |\n\n---\n\n## 🪜 Quickstart paths\n\nPick the entry that matches what you want to do:\n\n**I want to declare my entity / agent / tool.**\nStart at the relevant spec's `examples/` folder, fork an example, validate against the schema, serve at the well-known URL.\n\n**I want to consume Kinetic Gain documents from an LLM agent.**\nInstall [`mcp-kinetic-gain`](https://github.com/mizcausevic-dev/mcp-kinetic-gain), add one entry to your Claude Desktop config, get 63 tools.\n\n**I want to see what a document looks like.**\nOpen the [unified visualizer](https://mizcausevic-dev.github.io/kinetic-gain-visualizer/), pick an example from the Editor view.\n\n**I'm a school district choosing AI vendors.**\nRead the [Classroom AI AUP spec](https://github.com/mizcausevic-dev/classroom-ai-aup-spec). Author your AUP. Require [Tutor Cards](https://github.com/mizcausevic-dev/ai-tutor-card-spec) from vendors. Require [Student AI Disclosures](https://github.com/mizcausevic-dev/student-ai-disclosure-spec) from learners. Three JSON documents, two joins, one allow/deny answer per submission.\n\n**I'm a vendor trying to sell into K-12.**\nPublish a [Tutor Card](https://github.com/mizcausevic-dev/ai-tutor-card-spec) at `/.well-known/tutors/\u003cid\u003e.json`. A district AUP can then validate your card against its `vendor_requirements` in milliseconds.\n\n**I'm a healthcare AI vendor selling into hospitals.**\nPublish a [Clinical AI Disclosure](https://github.com/mizcausevic-dev/clinical-ai-disclosure-spec) at `/.well-known/clinical-ai/\u003csystem_id\u003e.json` with your FDA / SaMD / HIPAA / EHR-integration posture. A CMIO can read it in seconds; the bias-audit URI is procurement-blocking for SaMD class II+.\n\n**I'm a procurement reviewer evaluating an AI vendor.**\nStand up [`procurement-decision-api`](https://github.com/mizcausevic-dev/procurement-decision-api), feed it the vendor's Suite docs + your rubric, get back a Draft Decision Card. Sign it. Want runtime enforcement? Send the signed card to [`policy-as-code-engine`](https://github.com/mizcausevic-dev/policy-as-code-engine)'s `POST /bundles/from-decision-card` — every condition becomes a deny-by-default gate.\n\n**I'm an SRE adopting the reliability stack.**\n[`slo-budget-tracker`](https://github.com/mizcausevic-dev/slo-budget-tracker) for the SLO math, [`reliability-toolkit-rs`](https://github.com/mizcausevic-dev/reliability-toolkit-rs) for rate-limiter + breaker + retry + bulkhead, [`request-shadow-rs`](https://github.com/mizcausevic-dev/request-shadow-rs) for migrations, [`audit-stream-py`](https://github.com/mizcausevic-dev/audit-stream-py) as the tamper-evident spine.\n\n**I'm a data team enforcing contracts.**\n[`data-contract-registry`](https://github.com/mizcausevic-dev/data-contract-registry) to manage contracts (semver + compatibility checks). [`csv-data-quality-rs`](https://github.com/mizcausevic-dev/csv-data-quality-rs) in CI: load the contract, validate the produced CSV, fail the build on violations.\n\n**An agent of mine misbehaved and I need to disclose.**\nPublish an [AI Incident Card](https://github.com/mizcausevic-dev/ai-incident-card-spec) at `/.well-known/ai-incidents/\u003cid\u003e.json` and add it to your `/.well-known/ai-incidents.json` index. Run [`incident-correlation-rs`](https://github.com/mizcausevic-dev/incident-correlation-rs) to walk the Suite graph and produce a remediation plan in one pass.\n\n**I want to verify my agent's declared refusals hold under attack.**\nRun [`prompt-injection-bench`](https://github.com/mizcausevic-dev/prompt-injection-bench) against your agent. Every attack carries an `agent_card_refusal_categories` back-ref to your Agent Card's `refusal_taxonomy[].category` values. Drop the result into your Agent Card's `evaluations[]` field.\n\n---\n\n## 📦 AEO Reference Stack (the depth example, 5 layers)\n\nThe AEO Protocol is the oldest spec in the suite and has the most complete tooling. It's the canonical depth example — every layer you'd want for any spec.\n\n| Layer | Repos |\n|---|---|\n| **1. SDKs** | [`aeo-sdk-python`](https://github.com/mizcausevic-dev/aeo-sdk-python) (live on [PyPI](https://pypi.org/project/aeo-protocol/)) · [`aeo-sdk-typescript`](https://github.com/mizcausevic-dev/aeo-sdk-typescript) · [`aeo-sdk-rust`](https://github.com/mizcausevic-dev/aeo-sdk-rust) · [`aeo-sdk-go`](https://github.com/mizcausevic-dev/aeo-sdk-go) · [`aeo-sdk-swift`](https://github.com/mizcausevic-dev/aeo-sdk-swift) |\n| **2. CLI** | [`aeo-cli`](https://github.com/mizcausevic-dev/aeo-cli) — `aeo validate / fetch / inspect / claim` against a live well-known URL |\n| **3. Crawler** | [`aeo-crawler`](https://github.com/mizcausevic-dev/aeo-crawler) — BFS over AEO graphs, JSONL output |\n| **4. Validator service** | [`aeo-validator-service`](https://github.com/mizcausevic-dev/aeo-validator-service) — always-on HTTP validator for all 11 Suite docs; tracks drift via `POST /watches/{id}/recheck` |\n| **5. Graph explorer** | [`aeo-graph-explorer-rs`](https://github.com/mizcausevic-dev/aeo-graph-explorer-rs) — Rust + axum + petgraph graph-query service over the crawler's JSONL output |\n| **MCP server (AEO-only)** | [`mcp-aeo-server`](https://github.com/mizcausevic-dev/mcp-aeo-server) — superseded by `mcp-kinetic-gain` but useful as a single-spec install |\n\nThe same five-layer pattern is now feasible for other specs: the Tutor Card and Decision Card both have clear paths to crawler + validator + explorer implementations once vendor adoption justifies the build.\n\n---\n\n## 🤝 Status \u0026 contribution\n\n**v0.1 draft across all eleven specs · v0.1.0 across all fifteen implementation repos.** Stable enough to publish; designed to evolve. Issues and pull requests welcome on any repo. Discussion of cross-spec concerns happens here in this meta-repo.\n\nA future v0.2 sweep will probably add: detached cryptographic signing across the family (foundation already shipped in [`hash-attestation-rs`](https://github.com/mizcausevic-dev/hash-attestation-rs)), an automated `kinetic-gain-protocol-suite` validator that walks document references end-to-end, and a conformance suite for MCP servers claiming Kinetic Gain support.\n\n## 📜 License\n\nSpecifications, JSON Schemas, examples, and this meta-README: **AGPL-3.0**.\nImplementation repos (procurement-decision-api, policy-as-code-engine, slo-budget-tracker, reliability-toolkit-rs, audit-stream-py, hash-attestation-rs, and the rest): **MIT**.\nSupporting sites are unrestricted under their own licenses.\n\n## 👤 Author\n\n**Miz Causevic** · Enterprise Technologist · Boston, MA\n[GitHub](https://github.com/mizcausevic-dev) · [LinkedIn](https://www.linkedin.com/in/mirzacausevic/) · [Kinetic Gain](https://kineticgain.com) · [Medium](https://medium.com/@mizcausevic/) · [Skills](https://mizcausevic.com/skills/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmizcausevic-dev%2Fkinetic-gain-protocol-suite","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmizcausevic-dev%2Fkinetic-gain-protocol-suite","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmizcausevic-dev%2Fkinetic-gain-protocol-suite/lists"}