@agenticprimitives/contracts 1.0.0-alpha.21 → 1.0.0-alpha.23

package/README.md

@@ -78,3 +78,12 @@ Trust infrastructure should be the most transparent code you depend on, so the a
 Testnet/pilot-ready. Production launch is gated on the public checklist in the root README — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml).
 
 **Production deployment is deliberately deferred:** the testnet uses a publicly disclosed deployer EOA on purpose (it keeps the demo reproducible). The production rotation runbook is [`AUDIT.md` § 4.1](./AUDIT.md#41-the-production-gate-open-audit-item-n1).
+
+## Incremental ontology scripts
+
+| Script | Adds | Notes |
+| --- | --- | --- |
+| `script/AddAgentTypeRoots.s.sol` | typed roots + `atl:AgentTypeEnum` members (spec 346) | one `PermissionlessSubregistry` per root |
+| `script/AddVerticalRoots.s.sol` | app-registered vertical roots + `atl:agentSubtype` (spec 346 §2.4) | vocabulary is the app's |
+| `script/AddDistributionPredicate.s.sol` | `atl:distribution` (string JSON per `AgentDistributionV1`, spec 347 §8.5) | idempotent; run 2026-08-30 on faithchain (34348) + Base Sepolia |
+| `script/AddCardPredicates.s.sol` | `atl:cardDigest` (bytes32) + `atl:cardUri` (string) (spec 347 §8.3); `UPDATE_SHAPE=true` refreshes `atl:AgentName` to shape v2 (14 props) | idempotent; run 2026-08-30 on faithchain (34348) + Base Sepolia |

package/deployments-base-sepolia.json

@@ -35,5 +35,16 @@
   "agentRegistryBase": "0xB18534CA9c679968132ca2a43E454f5fA341030D",
   "agenticGovernance": "0x27c1F21ffA275e61Fe152Edd4f2676fD6a816dDa",
   "timelockController": "0xeB66E0B92287E53BB5A80bD2a01002150249DC94",
-  "governanceGuardian": "0x31ed17fb99e82E02085Ab4B3cbdaB05489098b44"
+  "governanceGuardian": "0x31ed17fb99e82E02085Ab4B3cbdaB05489098b44",
+  "permissionlessSubregistries": {
+    "me": "0xDEABb2Ed8382775a01752f171bC4c625AcD15A71",
+    "org": "0x13D2cabD890C93eF24937cc19dcDdc2a4d914418",
+    "team": "0xC80e6B102721F6D0b158124E0095D3B12d941126",
+    "svc": "0xcf6d51c105E83621FcFA58D89a3846B8090352b4",
+    "workspace": "0x9f8b948a9a18C68dBF862cE61444112A93d9A491",
+    "treasury": "0xDFA05aa99B1C5dA606a438eaF7eD3b52a231E385",
+    "registry": "0x32d3a37f44614959049b9f19D610554e8D4aBD6C",
+    "church": "0x97402E5A152670f356Eab9fD4270e1c8888ffc87",
+    "circle": "0xE194187c64c45803eda55BC399A4e7d39C1449A6"
+  }
 }

package/deployments-faithchain.json

@@ -0,0 +1,49 @@
+{
+  "agentAccountFactory": "0x464eEe7518c3c97DA570592481329E0627E9a3B8",
+  "agentAccountImplementation": "0x8691bFE5Cd0bf532050e27d4fF0Cd1F82d1aE9a7",
+  "agentNameRegistry": "0x60E949D52660A9D4143ecB0fdA56c0457f20aED9",
+  "agentNameResolver": "0xa5855906C0De3813E74BEe201973071e0c844115",
+  "agentNameUniversalResolver": "0xF343054e046A4145ccae499ECB28197394eE0798",
+  "agentProfileResolver": "0xB03F7C06ad3274F584AB72794406D639c02A45e1",
+  "agentRelationship": "0x5015bD7d422e003511246f848cDd798cb00BB968",
+  "agreementRegistry": "0x5b580E741DBb4f57F6D885dF2c12F4e0B53B6f50",
+  "allowedMethodsEnforcer": "0xdBb2E47793393C499efB0f3fcbf6Ca8669791a41",
+  "allowedTargetsEnforcer": "0x2156311097A936de1916a878bF53Bfd43c7b5715",
+  "approvedHashRegistry": "0xC6a4983bC6649f7C46c9E7d83f1Cd7e9078AFc7b",
+  "attestationRegistry": "0x4c94A0355380b8F5023eDd5f8A8131B020de19FA",
+  "callDataHashEnforcer": "0x142e97F9012e587330Cfe6222E01338D1A200378",
+  "chainId": 34348,
+  "custodyPolicy": "0xfb3662Ddc308FAc977A1F663948A447055722d3B",
+  "delegationManager": "0x710cb1bF08C234Df397e0910331e0A29710EF4F7",
+  "deployer": "0x1fcd93189311bedE20a02592cC83f31199A303bF",
+  "entryPoint": "0xf7855250B3363AB7649B10957d8908A9AFcdD4B5",
+  "geoFeatureRegistry": "0x4D0B90F17148ED671CfeEc1a6DAC4ee297f521B0",
+  "mockUsdc": "0xdaE09066A2cc32f6203605619137dcF01A9B49Ae",
+  "ontologyTermRegistry": "0xA8Eaa2415EBF4250B041abD1561A3756CeEa0A6C",
+  "paymentEnforcer": "0x07fA0aE59FdE4B7ce8962d6fE7a1d648ec3DD5CE",
+  "paymentReceiptRegistry": "0x5FfDd6186C1bBc4628187B1c4C1fDaA39F870d43",
+  "permissionlessSubregistry": "0x9E803ac48b0F32BCE10BFC183b30f6d756DB11CC",
+  "permissionlessSubregistryDemoAgent": "0xEeB709C92C9287dBc3151d90c2ef18b07E9f303a",
+  "quorumEnforcer": "0x9bF556A36F3dF3972E355dE4215476Dc268bD0C7",
+  "relationshipTypeRegistry": "0x0222388C3F9612058fb1bB2A9760c470DbD2121b",
+  "shapeRegistry": "0xBd19d53981677357052EF9768B70929217a6F1F0",
+  "skillDefinitionRegistry": "0xd692952978Aa3Bbc5F167060fAAd8eEFA48ADF93",
+  "smartAgentPaymaster": "0xbd93fEC6910ffD74F14709188b5a9B6C6965b2a7",
+  "timestampEnforcer": "0x73A7B878168b7DE48677617179A8bE894f0Dfe96",
+  "universalSignatureValidator": "0xeDd56f500325D4701B9985A34e5Fa6EED6716137",
+  "valueEnforcer": "0x8759c1a6cEBF1D5069e9434EF46327Bf2ef69975",
+  "permissionlessSubregistries": {
+    "me": "0x7fd5e2A3a49c321a4CEd39bE403eCde2Fc1CB823",
+    "org": "0x5eA2Bd3986f1924764d145515C3680fAbaaBbE6a",
+    "team": "0x57Db73fA77C19601f5dCdeB79de40aAE9C505892",
+    "svc": "0xeBe1247403fB8e82f0cBb70D158AE38f627174A2",
+    "workspace": "0x823D33D20F7a8F0dBe315aC67633804eEd21d56A",
+    "treasury": "0xf1df2D9b779C62a8BF5707C799d8E6842382892B",
+    "registry": "0x01a1008bF5b9690415BA9c2d108197B48339b393",
+    "church": "0x65bBf8Fe17c62E711d903Dd5318F2F3Ef8f19866",
+    "circle": "0x23ffbDADCC0255699d1CBF19244a98594777bDe5",
+    "household": "0x9c3373E8F28739Df3aA478C18209fD7eeD769F5b"
+  },
+  "agentRegistryBase": "0x0Be172F1b5cfD1d084CEc2cF2Af0A0cE9023Deb1",
+  "digestBindingEnforcer": "0xA3bb9BCC9b2F6F2419E1aBe5ED6Fd5399b9E68e1"
+}

package/deployments-paymaster-anvil.json

@@ -0,0 +1 @@
+{"deposit":1000000000000000,"smartAgentPaymaster":"0x7C8BaafA542c57fF9B2B90612bf8aB9E86e22C09","stake":500000000000000}

package/dist/abi/AgentRegistryBase.json

@@ -338,6 +338,39 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "updateEntry",
+    "inputs": [
+      {
+        "name": "registryId",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "entryId",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "cardHash",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "bindingProofHash",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "claimHashes",
+        "type": "bytes32[]",
+        "internalType": "bytes32[]"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "event",
     "name": "RegistryClaimUpdated",
@@ -506,6 +539,37 @@
     ],
     "anonymous": false
   },
+  {
+    "type": "event",
+    "name": "RegistryEntryUpdated",
+    "inputs": [
+      {
+        "name": "registryId",
+        "type": "bytes32",
+        "indexed": true,
+        "internalType": "bytes32"
+      },
+      {
+        "name": "entryId",
+        "type": "bytes32",
+        "indexed": true,
+        "internalType": "bytes32"
+      },
+      {
+        "name": "cardHash",
+        "type": "bytes32",
+        "indexed": false,
+        "internalType": "bytes32"
+      },
+      {
+        "name": "bindingProofHash",
+        "type": "bytes32",
+        "indexed": false,
+        "internalType": "bytes32"
+      }
+    ],
+    "anonymous": false
+  },
   {
     "type": "event",
     "name": "RegistryPolicyUpdated",

package/dist/abi/DigestBindingEnforcer.json

@@ -0,0 +1,129 @@
+[
+  {
+    "type": "function",
+    "name": "afterHook",
+    "inputs": [
+      {
+        "name": "",
+        "type": "bytes",
+        "internalType": "bytes"
+      },
+      {
+        "name": "",
+        "type": "bytes",
+        "internalType": "bytes"
+      },
+      {
+        "name": "",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "",
+        "type": "uint256",
+        "internalType": "uint256"
+      },
+      {
+        "name": "",
+        "type": "bytes",
+        "internalType": "bytes"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "pure"
+  },
+  {
+    "type": "function",
+    "name": "beforeHook",
+    "inputs": [
+      {
+        "name": "terms",
+        "type": "bytes",
+        "internalType": "bytes"
+      },
+      {
+        "name": "args",
+        "type": "bytes",
+        "internalType": "bytes"
+      },
+      {
+        "name": "",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "",
+        "type": "uint256",
+        "internalType": "uint256"
+      },
+      {
+        "name": "",
+        "type": "bytes",
+        "internalType": "bytes"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "pure"
+  },
+  {
+    "type": "error",
+    "name": "BadArgsLength",
+    "inputs": []
+  },
+  {
+    "type": "error",
+    "name": "BadTermsLength",
+    "inputs": []
+  },
+  {
+    "type": "error",
+    "name": "DigestMismatch",
+    "inputs": [
+      {
+        "name": "kind",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "bound",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "presented",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      }
+    ]
+  }
+]

package/dist/abi/index.d.ts

@@ -23,6 +23,7 @@ export declare const CallDataHashEnforcer: Abi;
 export declare const CaveatEnforcerBase: Abi;
 export declare const CustodyPolicy: Abi;
 export declare const DelegationManager: Abi;
+export declare const DigestBindingEnforcer: Abi;
 export declare const GeoFeatureRegistry: Abi;
 export declare const GovernanceManaged: Abi;
 export declare const IAgentAccount: Abi;

package/dist/abi/index.js

@@ -23,6 +23,7 @@ export { default as CallDataHashEnforcer } from './CallDataHashEnforcer.json' wi
 export { default as CaveatEnforcerBase } from './CaveatEnforcerBase.json' with { type: 'json' };
 export { default as CustodyPolicy } from './CustodyPolicy.json' with { type: 'json' };
 export { default as DelegationManager } from './DelegationManager.json' with { type: 'json' };
+export { default as DigestBindingEnforcer } from './DigestBindingEnforcer.json' with { type: 'json' };
 export { default as GeoFeatureRegistry } from './GeoFeatureRegistry.json' with { type: 'json' };
 export { default as GovernanceManaged } from './GovernanceManaged.json' with { type: 'json' };
 export { default as IAgentAccount } from './IAgentAccount.json' with { type: 'json' };

package/dist/deployments/base-sepolia.d.ts

@@ -39,6 +39,7 @@ export interface Deployments {
   readonly "timelockController": Address;
   readonly "governanceGuardian": Address;
   readonly "chainId": number;
+  readonly "permissionlessSubregistries": string;
   readonly "deploymentEpoch": string;
 }
 export declare const CONTRACTS: Deployments;

package/dist/deployments/base-sepolia.js

@@ -38,6 +38,17 @@ export const CONTRACTS = {
   "agenticGovernance": "0x27c1F21ffA275e61Fe152Edd4f2676fD6a816dDa",
   "timelockController": "0xeB66E0B92287E53BB5A80bD2a01002150249DC94",
   "governanceGuardian": "0x31ed17fb99e82E02085Ab4B3cbdaB05489098b44",
+  "permissionlessSubregistries": {
+    "me": "0xDEABb2Ed8382775a01752f171bC4c625AcD15A71",
+    "org": "0x13D2cabD890C93eF24937cc19dcDdc2a4d914418",
+    "team": "0xC80e6B102721F6D0b158124E0095D3B12d941126",
+    "svc": "0xcf6d51c105E83621FcFA58D89a3846B8090352b4",
+    "workspace": "0x9f8b948a9a18C68dBF862cE61444112A93d9A491",
+    "treasury": "0xDFA05aa99B1C5dA606a438eaF7eD3b52a231E385",
+    "registry": "0x32d3a37f44614959049b9f19D610554e8D4aBD6C",
+    "church": "0x97402E5A152670f356Eab9fD4270e1c8888ffc87",
+    "circle": "0xE194187c64c45803eda55BC399A4e7d39C1449A6"
+  },
   "deploymentEpoch": "ep_015f71625117a4d1"
 };
 export default CONTRACTS;

package/dist/deployments/faithchain.d.ts

@@ -0,0 +1,44 @@
+// Generated by scripts/build-deployments.mjs — do not edit by hand.
+// Source: deployments-faithchain.json
+import type { Address } from 'viem';
+export interface Deployments {
+  readonly "agentAccountFactory": Address;
+  readonly "agentAccountImplementation": Address;
+  readonly "agentNameRegistry": Address;
+  readonly "agentNameResolver": Address;
+  readonly "agentNameUniversalResolver": Address;
+  readonly "agentProfileResolver": Address;
+  readonly "agentRelationship": Address;
+  readonly "agreementRegistry": Address;
+  readonly "allowedMethodsEnforcer": Address;
+  readonly "allowedTargetsEnforcer": Address;
+  readonly "approvedHashRegistry": Address;
+  readonly "attestationRegistry": Address;
+  readonly "callDataHashEnforcer": Address;
+  readonly "custodyPolicy": Address;
+  readonly "delegationManager": Address;
+  readonly "deployer": Address;
+  readonly "entryPoint": Address;
+  readonly "geoFeatureRegistry": Address;
+  readonly "mockUsdc": Address;
+  readonly "ontologyTermRegistry": Address;
+  readonly "paymentEnforcer": Address;
+  readonly "paymentReceiptRegistry": Address;
+  readonly "permissionlessSubregistry": Address;
+  readonly "permissionlessSubregistryDemoAgent": Address;
+  readonly "quorumEnforcer": Address;
+  readonly "relationshipTypeRegistry": Address;
+  readonly "shapeRegistry": Address;
+  readonly "skillDefinitionRegistry": Address;
+  readonly "smartAgentPaymaster": Address;
+  readonly "timestampEnforcer": Address;
+  readonly "universalSignatureValidator": Address;
+  readonly "valueEnforcer": Address;
+  readonly "agentRegistryBase": Address;
+  readonly "digestBindingEnforcer": Address;
+  readonly "chainId": number;
+  readonly "permissionlessSubregistries": string;
+  readonly "deploymentEpoch": string;
+}
+export declare const CONTRACTS: Deployments;
+export default CONTRACTS;

package/dist/deployments/faithchain.js

@@ -0,0 +1,53 @@
+// Generated by scripts/build-deployments.mjs — do not edit by hand.
+// Source: deployments-faithchain.json
+export const CONTRACTS = {
+  "agentAccountFactory": "0x464eEe7518c3c97DA570592481329E0627E9a3B8",
+  "agentAccountImplementation": "0x8691bFE5Cd0bf532050e27d4fF0Cd1F82d1aE9a7",
+  "agentNameRegistry": "0x60E949D52660A9D4143ecB0fdA56c0457f20aED9",
+  "agentNameResolver": "0xa5855906C0De3813E74BEe201973071e0c844115",
+  "agentNameUniversalResolver": "0xF343054e046A4145ccae499ECB28197394eE0798",
+  "agentProfileResolver": "0xB03F7C06ad3274F584AB72794406D639c02A45e1",
+  "agentRelationship": "0x5015bD7d422e003511246f848cDd798cb00BB968",
+  "agreementRegistry": "0x5b580E741DBb4f57F6D885dF2c12F4e0B53B6f50",
+  "allowedMethodsEnforcer": "0xdBb2E47793393C499efB0f3fcbf6Ca8669791a41",
+  "allowedTargetsEnforcer": "0x2156311097A936de1916a878bF53Bfd43c7b5715",
+  "approvedHashRegistry": "0xC6a4983bC6649f7C46c9E7d83f1Cd7e9078AFc7b",
+  "attestationRegistry": "0x4c94A0355380b8F5023eDd5f8A8131B020de19FA",
+  "callDataHashEnforcer": "0x142e97F9012e587330Cfe6222E01338D1A200378",
+  "chainId": 34348,
+  "custodyPolicy": "0xfb3662Ddc308FAc977A1F663948A447055722d3B",
+  "delegationManager": "0x710cb1bF08C234Df397e0910331e0A29710EF4F7",
+  "deployer": "0x1fcd93189311bedE20a02592cC83f31199A303bF",
+  "entryPoint": "0xf7855250B3363AB7649B10957d8908A9AFcdD4B5",
+  "geoFeatureRegistry": "0x4D0B90F17148ED671CfeEc1a6DAC4ee297f521B0",
+  "mockUsdc": "0xdaE09066A2cc32f6203605619137dcF01A9B49Ae",
+  "ontologyTermRegistry": "0xA8Eaa2415EBF4250B041abD1561A3756CeEa0A6C",
+  "paymentEnforcer": "0x07fA0aE59FdE4B7ce8962d6fE7a1d648ec3DD5CE",
+  "paymentReceiptRegistry": "0x5FfDd6186C1bBc4628187B1c4C1fDaA39F870d43",
+  "permissionlessSubregistry": "0x9E803ac48b0F32BCE10BFC183b30f6d756DB11CC",
+  "permissionlessSubregistryDemoAgent": "0xEeB709C92C9287dBc3151d90c2ef18b07E9f303a",
+  "quorumEnforcer": "0x9bF556A36F3dF3972E355dE4215476Dc268bD0C7",
+  "relationshipTypeRegistry": "0x0222388C3F9612058fb1bB2A9760c470DbD2121b",
+  "shapeRegistry": "0xBd19d53981677357052EF9768B70929217a6F1F0",
+  "skillDefinitionRegistry": "0xd692952978Aa3Bbc5F167060fAAd8eEFA48ADF93",
+  "smartAgentPaymaster": "0xbd93fEC6910ffD74F14709188b5a9B6C6965b2a7",
+  "timestampEnforcer": "0x73A7B878168b7DE48677617179A8bE894f0Dfe96",
+  "universalSignatureValidator": "0xeDd56f500325D4701B9985A34e5Fa6EED6716137",
+  "valueEnforcer": "0x8759c1a6cEBF1D5069e9434EF46327Bf2ef69975",
+  "permissionlessSubregistries": {
+    "me": "0x7fd5e2A3a49c321a4CEd39bE403eCde2Fc1CB823",
+    "org": "0x5eA2Bd3986f1924764d145515C3680fAbaaBbE6a",
+    "team": "0x57Db73fA77C19601f5dCdeB79de40aAE9C505892",
+    "svc": "0xeBe1247403fB8e82f0cBb70D158AE38f627174A2",
+    "workspace": "0x823D33D20F7a8F0dBe315aC67633804eEd21d56A",
+    "treasury": "0xf1df2D9b779C62a8BF5707C799d8E6842382892B",
+    "registry": "0x01a1008bF5b9690415BA9c2d108197B48339b393",
+    "church": "0x65bBf8Fe17c62E711d903Dd5318F2F3Ef8f19866",
+    "circle": "0x23ffbDADCC0255699d1CBF19244a98594777bDe5",
+    "household": "0x9c3373E8F28739Df3aA478C18209fD7eeD769F5b"
+  },
+  "agentRegistryBase": "0x0Be172F1b5cfD1d084CEc2cF2Af0A0cE9023Deb1",
+  "digestBindingEnforcer": "0xA3bb9BCC9b2F6F2419E1aBe5ED6Fd5399b9E68e1",
+  "deploymentEpoch": "ep_80afd31afaeacbf9"
+};
+export default CONTRACTS;

package/dist/deployments/index.d.ts

@@ -1,9 +1,11 @@
 // Generated by scripts/build-deployments.mjs — do not edit by hand.
 import type { Address } from 'viem';
-import type { Deployments } from './base-sepolia';
+import type { Deployments } from './base-sepolia.js';
 export type { Deployments };
 export declare const BASE_SEPOLIA: Deployments;
+export declare const FAITHCHAIN: Deployments;
+export declare const PAYMASTER_ANVIL: Deployments;
 export declare const REGISTRIES_BASE_SEPOLIA: Deployments;
 
-export type Network = 'base-sepolia' | 'registries-base-sepolia';
+export type Network = 'base-sepolia' | 'faithchain' | 'paymaster-anvil' | 'registries-base-sepolia';
 export declare function getDeployments(network: Network): Deployments;

package/dist/deployments/index.js

@@ -1,11 +1,17 @@
 // Generated by scripts/build-deployments.mjs — do not edit by hand.
 import { CONTRACTS as BASE_SEPOLIA } from './base-sepolia.js';
 export { BASE_SEPOLIA };
+import { CONTRACTS as FAITHCHAIN } from './faithchain.js';
+export { FAITHCHAIN };
+import { CONTRACTS as PAYMASTER_ANVIL } from './paymaster-anvil.js';
+export { PAYMASTER_ANVIL };
 import { CONTRACTS as REGISTRIES_BASE_SEPOLIA } from './registries-base-sepolia.js';
 export { REGISTRIES_BASE_SEPOLIA };
 
 const TABLE = {
   "base-sepolia": BASE_SEPOLIA,
+  "faithchain": FAITHCHAIN,
+  "paymaster-anvil": PAYMASTER_ANVIL,
   "registries-base-sepolia": REGISTRIES_BASE_SEPOLIA,
 };
 

package/dist/deployments/paymaster-anvil.d.ts

@@ -0,0 +1,11 @@
+// Generated by scripts/build-deployments.mjs — do not edit by hand.
+// Source: deployments-paymaster-anvil.json
+import type { Address } from 'viem';
+export interface Deployments {
+  readonly "smartAgentPaymaster": Address;
+  readonly "deposit": number;
+  readonly "stake": number;
+  readonly "deploymentEpoch": string;
+}
+export declare const CONTRACTS: Deployments;
+export default CONTRACTS;

package/dist/deployments/paymaster-anvil.js

@@ -0,0 +1,9 @@
+// Generated by scripts/build-deployments.mjs — do not edit by hand.
+// Source: deployments-paymaster-anvil.json
+export const CONTRACTS = {
+  "deposit": 1000000000000000,
+  "smartAgentPaymaster": "0x7C8BaafA542c57fF9B2B90612bf8aB9E86e22C09",
+  "stake": 500000000000000,
+  "deploymentEpoch": "ep_45ca31c3315a5978"
+};
+export default CONTRACTS;

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@agenticprimitives/contracts",
-  "version": "1.0.0-alpha.21",
+  "version": "1.0.0-alpha.23",
+  "type": "module",
   "description": "Solidity contracts + ABIs + flattened sources + per-network deployment addresses for the agenticprimitives stack.",
   "license": "MIT",
   "repository": {
@@ -38,11 +39,15 @@
     "deployments-*.json"
   ],
   "devDependencies": {
-    "solhint": "^5.0.5"
+    "solhint": "^5.0.5",
+    "viem": "^2.52.2"
   },
   "publishConfig": {
     "access": "public"
   },
+  "peerDependencies": {
+    "viem": "^2.52.2"
+  },
   "scripts": {
     "setup": "bash setup.sh",
     "build": "forge build && pnpm run build:abi && pnpm run build:deployments",
@@ -64,6 +69,11 @@
     "deploy:payment-escrow:base-sepolia": "DEPLOY_NETWORK=base-sepolia forge script script/DeployPaymentEscrow.s.sol --rpc-url $BASE_SEPOLIA_RPC --broadcast --private-key $PRIVATE_KEY --sig 'run()'",
     "deploy:registries:merge": "node scripts/merge-registry-deploy.mjs",
     "verify:base-sepolia": "bash scripts/verify-base-sepolia.sh",
-    "clean": "rm -rf out cache broadcast dist"
+    "clean": "rm -rf out cache broadcast dist",
+    "deploy:faithchain": "DEPLOY_NETWORK=faithchain forge script script/Deploy.s.sol --rpc-url $FAITHCHAIN_RPC --broadcast --private-key $PRIVATE_KEY",
+    "deploy:paymaster:faithchain": "DEPLOY_NETWORK=faithchain forge script script/DeployPaymaster.s.sol --rpc-url $FAITHCHAIN_RPC --broadcast --private-key $PRIVATE_KEY --sig 'run()'",
+    "deploy:registries:faithchain": "DEPLOY_NETWORK=faithchain forge script script/DeployRegistries.s.sol --rpc-url $FAITHCHAIN_RPC --broadcast --private-key $PRIVATE_KEY --sig 'run()'",
+    "deploy:payments:faithchain": "DEPLOY_NETWORK=faithchain forge script script/DeployPayments.s.sol --rpc-url $FAITHCHAIN_RPC --broadcast --private-key $PRIVATE_KEY --sig 'run()'",
+    "deploy:payment-escrow:faithchain": "DEPLOY_NETWORK=faithchain forge script script/DeployPaymentEscrow.s.sol --rpc-url $FAITHCHAIN_RPC --broadcast --private-key $PRIVATE_KEY --sig 'run()'"
   }
 }

package/src/AgentAccount.sol

@@ -1112,6 +1112,17 @@ contract AgentAccount is
     ///      EntryPoint / self / DelegationManager; the guard hardens
     ///      against a malicious target re-entering through one of those
     ///      callers.
+    ///
+    ///      Slither reports `reentrancy-eth` here because `_delegationExecCtx`
+    ///      is written after the external calls. The write is `= false`, and the
+    ///      flag is RESTRICTIVE while set: `_rejectDelegatedGovernance` reverts a
+    ///      delegation-originated governance self-call only when it is true. A
+    ///      reentrant frame therefore observes the *more* restricted state, never
+    ///      a bypass — and the only readers of the flag are `execute` (guarded by
+    ///      `nonReentrant` on this very function) and `executeBatch`, whose own
+    ///      exemption is justified at its declaration. The flag is transient
+    ///      (EIP-1153), so it cannot survive the transaction either.
+    // slither-disable-next-line reentrancy-eth
     function execute(address target, uint256 value, bytes calldata data) external override nonReentrant whenNotPaused {
         _requireForExecute();
 
@@ -1174,6 +1185,15 @@ contract AgentAccount is
     ///      OUTER `execute` already holds the guard, so external re-entry
     ///      is blocked; `_requireForExecute` restricts entry to
     ///      EntryPoint / self / DM (DM has its own `nonReentrant`).
+    ///
+    ///      Slither reports `reentrancy-eth` here for the same reason as
+    ///      `execute`, and it is a false positive for the same reason: the
+    ///      post-call write clears `_delegationExecCtx`, a transient flag that
+    ///      only ever *adds* a restriction while set. Note this function is
+    ///      deliberately un-guarded (see above), so the suppression is scoped to
+    ///      this detector on this declaration only — any other high-severity
+    ///      finding here still fails the build.
+    // slither-disable-next-line reentrancy-eth
     function executeBatch(Call[] calldata calls) external override whenNotPaused {
         _requireForExecute();
 

package/src/AgentAccountFactory.sol

@@ -357,8 +357,18 @@ contract AgentAccountFactory is GovernanceManaged {
             if (thresholds[5] > sodCap) thresholds[5] = sodCap;
         }
 
+        // DEV/TEST-CHAIN CARVE-OUT (local demo only): on a local development chain the T4 floor is lifted
+        // so a demo can drive an admin custody action's schedule→apply back-to-back without a real-time
+        // wait, and a zero override yields a ZERO T4 safety delay instead of the 1-hour production default.
+        // Gated strictly by `block.chainid` — anvil (31337/1337) and the local faithchain (34348). Every
+        // PRODUCTION and public TESTNET chain id (Base Sepolia 84532, mainnet, …) keeps the audited
+        // EXT-TL-FLOOR-1 invariant. T5 (24h) and T6 (recovery, 48h) are NOT relaxed even on dev — the
+        // CustodyPolicy requires a non-zero timelock for those tiers, and the demo only exercises T4.
+        bool devChain = block.chainid == 31337 || block.chainid == 1337 || block.chainid == 34348;
+        uint32 floor4 = devChain ? 0 : uint32(1 hours);
+
         uint32[7] memory timelocks;
-        timelocks[4] = timelockOverrides[4] == 0 ? uint32(1 hours)  : timelockOverrides[4];
+        timelocks[4] = timelockOverrides[4] == 0 ? floor4 : timelockOverrides[4];
         timelocks[5] = timelockOverrides[5] == 0 ? uint32(24 hours) : timelockOverrides[5];
         timelocks[6] = timelockOverrides[6] == 0 ? uint32(48 hours) : timelockOverrides[6];
 
@@ -366,8 +376,9 @@ contract AgentAccountFactory is GovernanceManaged {
         // below the product floor. A zero override inherits the floor default above; a non-zero override below
         // the floor reverts, so a mode>0 (custody-governed) account can never deploy with sub-floor T4/T5/T6
         // (recovery = T6) delays. The "T5=24h / recovery=48h" guarantee becomes a protocol invariant, not a UI
-        // convention (spec 300 — raise-only). Demo/testnet fast-timelock deploys use zero overrides (defaults).
-        if (timelocks[4] < 1 hours)  revert TimelockBelowFloor(4, timelocks[4], uint32(1 hours));
+        // convention (spec 300 — raise-only). The T4 floor is `floor4` (production value on real chains, 0 on
+        // the dev-chain carve-out); T5/T6 keep their audited floors on every chain.
+        if (timelocks[4] < floor4) revert TimelockBelowFloor(4, timelocks[4], floor4);
         if (timelocks[5] < 24 hours) revert TimelockBelowFloor(5, timelocks[5], uint32(24 hours));
         if (timelocks[6] < 48 hours) revert TimelockBelowFloor(6, timelocks[6], uint32(48 hours));
 

package/src/enforcers/DigestBindingEnforcer.sol

@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.28;
+
+import "../agency/ICaveatEnforcer.sol";
+
+/**
+ * @title DigestBindingEnforcer
+ * @notice Binds a delegation to a 32-byte digest of an OFF-CHAIN artifact — an intent, a disclosure
+ *         projection, an accepted offer — so that the delegation is a MANDATE (spec 336 §8.3, spec 350
+ *         §2): authority *for a reason*, not authority for any purpose until revoked.
+ *
+ * @dev terms = abi.encode(bytes32 kind, bytes32 digest)
+ *      args  = abi.encode(bytes32 presented)          — supplied by the redeemer at redemption
+ *
+ *      `kind` names WHICH artifact the digest is of, so an off-chain reader can tell an intent binding
+ *      from a projection binding without guessing:
+ *          keccak256("ap:intent")      — the canonical intent (RFC 8785 JCS bytes)
+ *          keccak256("ap:projection")  — what was disclosed to the grantee (spec 336 §4)
+ *          keccak256("ap:offer")       — the accepted offer (spec 336 §5)
+ *      One enforcer serves all three: the mechanics are identical and the kind belongs in the terms,
+ *      where it is signed, rather than in which contract address was chosen.
+ *
+ *      WHAT THIS ENFORCES, HONESTLY. The chain cannot know what an intent *means*; it can only hold
+ *      the redeemer to a commitment. `beforeHook` requires the redeemer to PRESENT the digest it is
+ *      acting under, and reverts if that is not the bound one. Two things follow:
+ *        1. the binding is part of the SIGNED delegation — immutable, inspectable, and what the
+ *           off-chain per-step verifier (`delegation.verifyMandateForStep`) compares a step's
+ *           intent digest against. That verifier is where "does this step belong to this intent" is
+ *           actually decided; this contract makes the answer un-forgeable rather than deciding it;
+ *        2. the presented digest lands in the transaction, so the receipt's `intentDigest` and the
+ *           chain's record of what the redeemer claimed to be doing are the same bytes — evidence a
+ *           third party can check without trusting either side.
+ *      A redeemer that copies `terms` into `args` satisfies the check; that is the point — it has
+ *      now committed, on chain, to that intent, and a step whose real intent differs is caught by the
+ *      verifier that computed the digest from the step rather than from the caveat.
+ *
+ *      R6.7 — Stateless validator: hooks are `pure`, zero storage; the DM-side pause check gates all
+ *      reachable enforcer dispatch.
+ */
+contract DigestBindingEnforcer is ICaveatEnforcer {
+    error BadTermsLength();
+    error BadArgsLength();
+    error DigestMismatch(bytes32 kind, bytes32 bound, bytes32 presented);
+
+    function beforeHook(
+        bytes calldata terms,
+        bytes calldata args,
+        bytes32,
+        address,
+        address,
+        address,
+        uint256,
+        bytes calldata
+    ) external pure override {
+        if (terms.length != 64) revert BadTermsLength();
+        if (args.length != 32) revert BadArgsLength();
+        (bytes32 kind, bytes32 bound) = abi.decode(terms, (bytes32, bytes32));
+        bytes32 presented = abi.decode(args, (bytes32));
+        if (presented != bound) revert DigestMismatch(kind, bound, presented);
+    }
+
+    function afterHook(
+        bytes calldata,
+        bytes calldata,
+        bytes32,
+        address,
+        address,
+        address,
+        uint256,
+        bytes calldata
+    ) external pure override {}
+}

package/src/identity/AgentProfilePredicates.sol

@@ -28,9 +28,22 @@ library AgentProfilePredicates {
     // ─── Identity-only ──────────────────────────────────────────────
 
     bytes32 internal constant ATL_DESCRIPTION       = keccak256("atl:description");
-    /// spec 282 — publicly-asserted skill labels (string; the indexer projects to approf:skills, the
-    /// discovery matcher ranks on it). The agent's full private skill claims live in agent-skills VCs.
+    /// @dev LEGACY READ ONLY (ADR-0051). Publicly-asserted labels, written before the vocabulary settled
+    /// on "capability" for what an agent can do. New writes go to `ATL_CAPABILITIES`; readers consult
+    /// this only when that is empty, which is the documented migration state — not a second mechanism
+    /// (ADR-0013). Kept because agents named under it are still on chain.
     bytes32 internal constant ATL_SKILLS            = keccak256("atl:skills");
+    /// ADR-0051 — the ids of what this agent CAN DO, comma-joined, same rail as the legacy labels above.
+    /// The SAME ids appear in `profile.capabilities[].id`, in ARD `capabilities[]`, and in the A2A card's
+    /// `skills[]` (the wire's name for them). Ids only: names, descriptions and examples live in the
+    /// profile record, because the chain is the place to prove WHICH capabilities are claimed, not to
+    /// store their prose. The indexer projects to approf:capabilities.
+    bytes32 internal constant ATL_CAPABILITIES      = keccak256("atl:capabilities");
+    /// spec 347 §8.5 — how to OBTAIN AND RUN this agent's software: a JSON string per
+    /// `AgentDistributionV1` (agent-profile; JCS-canonical; mirrors the ACP registry agent.schema.json
+    /// `distribution` + `acp`/`version`). SA-keyed identity property, string datatype; the indexer
+    /// projects it to approf:distribution and registry files (ACP registry.json / ARD) are projections.
+    bytes32 internal constant ATL_DISTRIBUTION      = keccak256("atl:distribution");
     bytes32 internal constant ATL_HOMEPAGE          = keccak256("atl:homepage");
     bytes32 internal constant ATL_AVATAR            = keccak256("atl:avatar");
     bytes32 internal constant ATL_PROFILE_SCHEMA_URI = keccak256("atl:profileSchemaURI");

package/src/naming/AgentNamePredicates.sol

@@ -66,6 +66,60 @@ library AgentNamePredicates {
     /// name→credential index (ADR-0040 amendment). Never set automatically.
     bytes32 internal constant ATL_CONNECTION_ADDRESS         = keccak256("atl:connectionAddress");
 
+    // ─── Derived type (spec 346 §2.3 / ADR-0061) ────────────────────
+    //
+    // SA-KEYED records on the AgentProfileResolver subject (NOT name-node records): the
+    // suffix of a typed name (.me .org .team .svc .workspace .treasury) is a CLAIM
+    // validated against these. `atl:agentKind` stays the 3-valued ROOT; `atl:agentType`
+    // is the closed DERIVED layer under it (team ⊂ org; service / workspace /
+    // treasury ⊂ service). Roles other than workspace are an open-set string.
+
+    /// `atl:agentType` — the derived agent type. `bytes32` (hashed enum). Bound to AGENT_TYPE_ENUM.
+    bytes32 internal constant ATL_AGENT_TYPE                 = keccak256("atl:agentType");
+
+    /// `atl:serviceRole` — open-set service role (`workspace` REQUIRED for that type). `string`.
+    bytes32 internal constant ATL_SERVICE_ROLE               = keccak256("atl:serviceRole");
+
+    /// `atl:agentSubtype` — a VERTICAL subtype of the generic derived type (spec 346 §2.4), e.g. an app-registered
+    /// kind of organization. The vocabulary is the app's; the chain stores the slug. `string`.
+    bytes32 internal constant ATL_AGENT_SUBTYPE              = keccak256("atl:agentSubtype");
+
+    /// `atl:cardDigest` — sha256 (as bytes32) of the RELEASED A2A Agent Card this name currently publishes
+    /// (spec 347 §8.3). Content-addresses the card; the card itself is served at the a2aEndpoint host's
+    /// `/.well-known/agent-card.json`. Never authority — a verifier compares the fetched bytes to this digest.
+    bytes32 internal constant ATL_CARD_DIGEST                = keccak256("atl:cardDigest");
+
+    /// `atl:cardUri` — explicit URI of the released A2A Agent Card when it is not at the default well-known
+    /// path of the a2aEndpoint host (spec 347 §8.3). `string`.
+    bytes32 internal constant ATL_CARD_URI                   = keccak256("atl:cardUri");
+
+    /// Enum set bound to `atl:agentType`. Ten members; mirrors `types.DerivedAgentType`.
+    bytes32 internal constant AGENT_TYPE_ENUM                = keccak256("atl:AgentTypeEnum");
+
+    bytes32 internal constant AGENT_TYPE_PERSON                = keccak256("person");
+    bytes32 internal constant AGENT_TYPE_ORG                   = keccak256("org");
+    bytes32 internal constant AGENT_TYPE_TEAM                  = keccak256("team");
+    bytes32 internal constant AGENT_TYPE_SERVICE               = keccak256("service");
+    bytes32 internal constant AGENT_TYPE_WORKSPACE = keccak256("workspace");
+    bytes32 internal constant AGENT_TYPE_TREASURY              = keccak256("treasury");
+    bytes32 internal constant AGENT_TYPE_REGISTRY              = keccak256("registry");           // the Service Agent that OPERATES a registry
+    bytes32 internal constant AGENT_TYPE_CHURCH                = keccak256("church");             // organization-class (ADR-0061 amendment 2026-08-30)
+    bytes32 internal constant AGENT_TYPE_CIRCLE                = keccak256("circle");             // organization-class
+    bytes32 internal constant AGENT_TYPE_HOUSEHOLD             = keccak256("household");          // organization-class (spec 368, 2026-09-07)
+
+    // Per-root `rootKind` tags for the ten typed roots (AgentNameRegistry.initializeRoot). Mirrors
+    // agent-naming `rootKindForTld`. The legacy roots (.agent / .impact) carry KIND_AGENT.
+    bytes32 internal constant ROOT_KIND_PERSON                = keccak256("namespace:Person");
+    bytes32 internal constant ROOT_KIND_ORGANIZATION          = keccak256("namespace:Organization");
+    bytes32 internal constant ROOT_KIND_TEAM                  = keccak256("namespace:Team");
+    bytes32 internal constant ROOT_KIND_SERVICE               = keccak256("namespace:Service");
+    bytes32 internal constant ROOT_KIND_WORKSPACE = keccak256("namespace:Workspace");
+    bytes32 internal constant ROOT_KIND_TREASURY              = keccak256("namespace:Treasury");
+    bytes32 internal constant ROOT_KIND_REGISTRY              = keccak256("namespace:Registry");
+    bytes32 internal constant ROOT_KIND_CHURCH                = keccak256("namespace:Church");
+    bytes32 internal constant ROOT_KIND_CIRCLE                = keccak256("namespace:Circle");
+    bytes32 internal constant ROOT_KIND_HOUSEHOLD             = keccak256("namespace:Household");
+
     // ─── Shape + enum-set ids ───────────────────────────────────────
 
     /// `atl:AgentName` — the class id for ShapeRegistry validation.

package/src/registry/AgentRegistryBase.sol

@@ -108,6 +108,12 @@ contract AgentRegistryBase {
         bytes32 cardHash,
         bytes32 bindingProofHash
     );
+    event RegistryEntryUpdated(
+        bytes32 indexed registryId,
+        bytes32 indexed entryId,
+        bytes32 cardHash,
+        bytes32 bindingProofHash
+    );
     event RegistryEntryRenewed(bytes32 indexed registryId, bytes32 indexed entryId, uint64 expiresAt);
     event RegistryEntrySuspended(bytes32 indexed registryId, bytes32 indexed entryId, bytes32 reasonHash);
     event RegistryEntryRevoked(bytes32 indexed registryId, bytes32 indexed entryId, bytes32 reasonHash);
@@ -196,6 +202,32 @@ contract AgentRegistryBase {
         emit RegistryEntryRenewed(registryId, entryId, expiresAt);
     }
 
+    /// @notice Re-point an ACTIVE entry at a newer card. RB-01: the subject and only the subject.
+    /// @dev Cards are versioned and republished; without this an entry is pinned forever to whatever card it
+    /// was registered with, so a directory could never reflect a new release (found live 2026-08-30: the only
+    /// paths were `registerEntry`, which reverts `EntryExists`, and `renewEntry`, which moves only the expiry).
+    /// The subject re-signs: `bindingProofHash` covers the new card, so an update proves the same thing a
+    /// registration does. Membership is NOT re-checked — admission decided this agent belongs; which card it
+    /// publishes is not an admission question (a registry that disagrees can suspend the entry).
+    function updateEntry(
+        bytes32 registryId,
+        bytes32 entryId,
+        bytes32 cardHash,
+        bytes32 bindingProofHash,
+        bytes32[] calldata claimHashes
+    ) external {
+        Entry storage e = _entries[_entryKey(registryId, entryId)];
+        if (e.status == EntryStatus.None) revert EntryNotFound();
+        if (msg.sender != e.subjectAgent) revert SubjectMismatch(); // RB-01
+        if (e.status != EntryStatus.Active) revert NotActive(); // RB-04 (Suspended/Revoked)
+
+        e.cardHash = cardHash;
+        e.bindingProofHash = bindingProofHash;
+        e.claimsRoot = keccak256(abi.encode(claimHashes));
+
+        emit RegistryEntryUpdated(registryId, entryId, cardHash, bindingProofHash);
+    }
+
     /// @notice Suspend an active entry. RB-03: admin action (controller or policy-authorized) — NOT subject.
     function suspendEntry(bytes32 registryId, bytes32 entryId, bytes32 reasonHash) external {
         Entry storage e = _entries[_entryKey(registryId, entryId)];