{"assertions":[{"claim":"card_bytes_stable: node0.body_sha256 == node1.body_sha256","evidence_nodes":[0,1],"observed_sha256":"a7ad449de2e25cdc91dfc081d5e3318f482967d7e29280e29b267021a30f0630","op":"eq","result":true},{"claim":"conduct_ext_declared: card lists https://gate.horizonshield.dev/ext/conduct/v1 under capabilities.extensions[]","evidence_nodes":[1,2],"observed_sha256":"afe3c4d72fdfe9d41783fcf666b371eecbd842217fd3b552ef4fd11eaf0e9329","op":"eq","result":true},{"claim":"compensation_well_formed: the compensation declaration has the section 2 shape and any two copies of it agree","evidence_nodes":[1,2],"observed_sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","op":"eq","result":true},{"claim":"measured_endpoint_answered: POST https://gate.horizonshield.dev/a2a returned http 200 with a JSON-RPC result of the A2A 1.0 shape","evidence_nodes":[3],"observed_sha256":"60120055bedc000bd0d425cf76fef2ff8c1e8e67aedd29929d554f6cb2a833d3","op":"eq","result":true},{"claim":"payment_required_as_declared: an endpoint answering http 402 declares a paid model on its card; signals read (closed list, exact keys): compensation.paid_by=buyer","evidence_nodes":[3],"note":"not applicable: the card declares a paid model and this request was answered without a charge; from here a free method and a waived charge look the same","observed_sha256":"0405e689dd8b8637d5af174e0e77eb968841724c2b3fe3401116da7a12cd5f3d","op":"eq","result":null},{"claim":"extension_echoed: response header A2A-Extensions contains https://gate.horizonshield.dev/ext/conduct/v1","evidence_nodes":[3],"observed_sha256":"4cc4f6215a8e0f970f932156385441dd4b45c0c8eb7f8c5db813a259b1ec3fb5","op":"eq","result":true}],"base":"https://gate.horizonshield.dev","card_signature":{"alg":"ES256","count":1,"jku":"https://gate.horizonshield.dev/.well-known/jwks.json","jku_same_host":true,"kid":"hs-2026-09","present":true,"protected_readable":true,"verified":null,"verified_reason":"read, not verified: checking an A2A card signature means reproducing the card's canonical form (RFC 8785 over the proto shape with signatures removed), which this client does not implement. A canonicalizer that is one rule wrong would accuse an honest agent in an append only ledger, so this client reports what the header says and verifies nothing."},"conduct_ext":{"conduct_record":"https://gate.horizonshield.dev/history?endpoint=https%3A%2F%2Fgate.horizonshield.dev%2Fmcp","declared_uri":"https://gate.horizonshield.dev/ext/conduct/v1","mode":"a2a","target":"https://gate.horizonshield.dev/a2a","uri":"https://gate.horizonshield.dev/ext/conduct/v1","wire":"1.0","witness_intake":"https://ledger.horizonshield.dev/witness"},"does_not_establish":["correctness or quality of any response","truth of the compensation declaration","that the agent behaves the same at other instants or from other vantages","that the walked operator published this card: a signature is present but this client does not verify signatures, so these bytes are attributable to this walk alone"],"establishes":["agent card at https://gate.horizonshield.dev fetched twice at 2026-09-23T16:02:45Z; body sha256 769df24571c1a0323f6c70cde07fc35854a90010789fb32f24e8c63434dcff5f and 769df24571c1a0323f6c70cde07fc35854a90010789fb32f24e8c63434dcff5f","extension declaration checked against CONDUCT_EXT_v1 section 2: declared; well formed","one request answered by https://gate.horizonshield.dev/a2a with http 200 and body sha256 afcc7a9b73419086af2d61bf576386c421a906bcf01ffa2726513ffbfa015873"],"mode":"full","nodes":[{"duration_ms":64,"kind":"fetch","n":0,"request":{"body_sha256":null,"headers_sha256":"6ef25204daf0747948b5d550c49e655279e7bf3cded1c74ce45c7958f97d4d47","method":"GET","url":"https://gate.horizonshield.dev/.well-known/agent-card.json"},"response":{"a2a_extensions":null,"body_sha256":"769df24571c1a0323f6c70cde07fc35854a90010789fb32f24e8c63434dcff5f","headers_sha256":"49ce0f8b337e2ea104f8ce6bf3e596161dcf59a8a06865b528f716fea6d6ba1a","status":200,"x_a2a_extensions":null}},{"duration_ms":17,"kind":"fetch","n":1,"request":{"body_sha256":null,"headers_sha256":"6ef25204daf0747948b5d550c49e655279e7bf3cded1c74ce45c7958f97d4d47","method":"GET","url":"https://gate.horizonshield.dev/.well-known/agent-card.json"},"response":{"a2a_extensions":null,"body_sha256":"769df24571c1a0323f6c70cde07fc35854a90010789fb32f24e8c63434dcff5f","headers_sha256":"ac3ff504d8b4c029247c3414934901b41edc550e5661cb55819649b6f3bf3efa","status":200,"x_a2a_extensions":null}},{"inputs":[{"from_node":1}],"kind":"compute","label":"locate https://gate.horizonshield.dev/ext/conduct/v1 in node 1 and validate params (section 2 of CONDUCT_EXT_v1.md)","n":2,"output_preview":"declared; well formed","output_sha256":"c5e6f99add51ea849bc51cbdd70ec065441e7447c13796d2391a6f2fe0ab3f7b"},{"duration_ms":43,"kind":"fetch","n":3,"request":{"body_sha256":"5ae22f173c2d9a5d90df766e3597d9d53aaa673f1f136ec164d8f48155bedd59","headers_sha256":"bd88e3920f2cfa34ec68d6aafefa60fbeca168fd5a25b023cf112a229ec6e4d3","method":"POST","url":"https://gate.horizonshield.dev/a2a"},"response":{"a2a_extensions":"https://gate.horizonshield.dev/ext/conduct/v1","body_sha256":"afcc7a9b73419086af2d61bf576386c421a906bcf01ffa2726513ffbfa015873","headers_sha256":"ecd4e1338d177a689c8488d2dada8c21a61ce34ed37496921e109a579c0d1f9c","status":200,"x_a2a_extensions":null}}],"prev_path_refs":[],"purpose":"a2a-conduct-walk-v1: https://gate.horizonshield.dev/a2a","replay":{"how":"re-run a2a_conduct_walk.py against base with the same mode; recompute every node body_sha256 and re-evaluate assertions","match_means":"the card and the endpoint answer the same bytes as when this walk was anchored","mismatch_means":"the live agent now differs from the anchored observation; a changed card is a finding, not an error in the walk"},"schema":"jidec-path-v1","verdict":{"n_pass":5,"n_total":5,"ok":true,"outcome":"PASS"},"walked_at":"2026-09-23T16:02:45Z","walker":{"tool":"a2a_conduct_walk.py","version":"1"},"witness":{"key_url":"https://api.babyblueviper.com/keys/agreement.json","name":"babyblueviper1 (invinoveritas, api.babyblueviper.com)","vantage":"invinoveritas VPS (Linux, US datacenter), a2a_conduct_walk.py reference client, stdlib urllib transport"}}