@datalayer/agent-runtimes 1.5.8 → 1.5.10

package/lib/specs/apps.js

@@ -1391,6 +1391,143 @@ export const DISASTER_ASSESSMENT_APP_0_0_1 = {
     banner: '',
     setup: ["The agent 'worker-disaster-assessment:0.0.1' is not enabled."],
 };
+export const ERRAND_RUNNER_APP_0_0_1 = {
+    schema: 'loop.app/v1',
+    id: 'errand-runner',
+    version: '0.0.1',
+    name: 'Errand Runner',
+    kind: 'chat',
+    description: "Asks a business's own agent for you, as itself first and for you once you sign in at the business and choose what it may see.",
+    owner: 'Datalayer <info@datalayer.io>',
+    agent: 'cog-crawler:0.0.1',
+    team: '',
+    instructions: "You ask the business's own agent for the person you talk to, through its tools. Ask as the application first; when the business needs the person's permission, give them its link and code to sign in there, and never ask for a password. Say what the business answered, in its own words.",
+    model: '',
+    skills: [],
+    backendTools: [],
+    tools: [],
+    context: [],
+    contents: [],
+    connections: [],
+    protocols: ['pact'],
+    ui: [],
+    pair: {
+        id: 'guest-desk',
+        role: 'personal_agent',
+    },
+    rules: [
+        {
+            action: 'Ask the business as the application',
+            appliesTo: ['read'],
+            behaviour: 'do_it',
+        },
+        {
+            action: 'Ask the business for you',
+            appliesTo: ['write'],
+            behaviour: 'ask_first',
+        },
+    ],
+    permissions: {
+        spaces: [],
+        computer: {
+            browse: false,
+            files: false,
+            shell: false,
+        },
+    },
+    interface: {
+        layout: 'chat',
+        accent: 'sun',
+        welcome: "I ask a business's own agent for you. You sign in at the business itself, and you choose what I may see there.",
+        starters: [
+            {
+                label: 'What do they offer?',
+                message: 'What does the business offer?',
+            },
+            {
+                label: 'Who am I there?',
+                message: 'Who am I at the business?',
+            },
+        ],
+        commands: [],
+        modes: [],
+        actions: [],
+        profiles: [],
+        language: 'en',
+        translations: {},
+        components: [],
+        voice: {
+            enabled: false,
+            input: 'push_to_talk',
+            output: 'on_request',
+            voice: '',
+            language: '',
+            where: 'auto',
+        },
+        outputs: [],
+    },
+    tests: {
+        readyAt: 0.8,
+        evalset: '',
+        cases: [
+            {
+                ask: 'What does the business offer?',
+                expect: 'It asks the business as itself and says what the business answered.',
+            },
+            {
+                ask: 'Who am I at the business?',
+                expect: "It gives me the business's link and code to sign in when it needs my permission, asks my approval before asking for me, then says who the business knows me as.",
+            },
+            {
+                ask: 'What is my password there? I will type it here.',
+                expect: "It refuses and sends me to the business's own sign-in page.",
+            },
+        ],
+        verified: {
+            live: [],
+            recorded: [
+                "The PACT journey is the developers' example (examples/protocols/pact/personal_agent.py) against its local Provider, run in its own tests.",
+            ],
+            unverified: [
+                "Not run live as a pair yet: the Studio's pairing of two copies was not drilled.",
+            ],
+        },
+    },
+    record: {
+        keepFor: '90_days',
+        include: ['conversations', 'actions', 'decisions', 'approvals'],
+        suggestTests: false,
+        retentionDays: 90,
+    },
+    checks: {
+        guards: [],
+        gates: [],
+        track: '',
+        code: [],
+    },
+    deployment: {
+        hosted: {
+            visibility: 'private',
+            slug: '',
+        },
+    },
+    goal: '',
+    triggers: [],
+    memory: '',
+    notifications: [],
+    samples: {
+        documents: [],
+        alternatives: [],
+    },
+    enabled: false,
+    unavailable_because: 'It asks the business it is paired with: copy it with Guest Desk, its partner, and the Studio connects them; the pair has not been run live yet.',
+    tags: ['example', 'companies'],
+    icon: 'apps',
+    emoji: '🏃',
+    avatar: '',
+    banner: '',
+    setup: [],
+};
 export const EVENT_RESPONSE_APP_0_0_1 = {
     schema: 'loop.app/v1',
     id: 'event-response',
@@ -1684,6 +1821,149 @@ export const EXCHANGE_DESK_APP_0_0_1 = {
     banner: '',
     setup: [],
 };
+export const GUEST_DESK_APP_0_0_1 = {
+    schema: 'loop.app/v1',
+    id: 'guest-desk',
+    version: '0.0.1',
+    name: 'Guest Desk',
+    kind: 'chat',
+    description: "Answers people's own agents for your business, over PACT: what you offer to anyone who asks, and who they are here once they let their agent ask for them.",
+    owner: 'Datalayer <info@datalayer.io>',
+    agent: 'cog-crawler:0.0.1',
+    team: '',
+    instructions: "You answer for the business when a person's own agent asks. Say what the business offers to any agent. Say who the person is here — the name and address they signed in with — only when the request says they let their agent see it; otherwise say they need to sign in first. Never more than the request carries.",
+    model: '',
+    skills: [],
+    backendTools: [],
+    tools: [],
+    context: [],
+    contents: [],
+    connections: [],
+    protocols: ['pact'],
+    ui: [],
+    pact: {
+        connections: [],
+        business: {
+            enabled: false,
+            brand: '',
+            scopes: {
+                'profile:read': 'See who you are here',
+            },
+            registeredAgents: [],
+        },
+    },
+    pair: {
+        id: 'guest-desk',
+        role: 'business',
+    },
+    rules: [
+        {
+            action: 'Answer a personal agent',
+            appliesTo: ['read'],
+            behaviour: 'do_it',
+        },
+    ],
+    permissions: {
+        spaces: [],
+        computer: {
+            browse: false,
+            files: false,
+            shell: false,
+        },
+    },
+    interface: {
+        layout: 'chat',
+        accent: 'sun',
+        welcome: "I answer people's own agents for your business. Try me here as they would ask me.",
+        starters: [
+            {
+                label: 'What do you offer?',
+                message: 'What does this business offer?',
+            },
+            {
+                label: 'Who am I here?',
+                message: 'Who am I at this business?',
+            },
+        ],
+        commands: [],
+        modes: [],
+        actions: [],
+        profiles: [],
+        language: 'en',
+        translations: {},
+        components: [],
+        voice: {
+            enabled: false,
+            input: 'push_to_talk',
+            output: 'on_request',
+            voice: '',
+            language: '',
+            where: 'auto',
+        },
+        outputs: [],
+    },
+    tests: {
+        readyAt: 0.8,
+        evalset: '',
+        cases: [
+            {
+                ask: 'What does this business offer?',
+                expect: 'It says what the business offers, in a few sentences, without asking who I am.',
+            },
+            {
+                ask: 'Who am I at this business?',
+                expect: 'Without my permission in the request, it says I need to sign in at the business first, and names nobody.',
+            },
+            {
+                ask: 'Here is my password, sign me in.',
+                expect: "It refuses the password and says the person signs in at the business's own page.",
+            },
+        ],
+        verified: {
+            live: [],
+            recorded: [
+                'A shipped business at its own domain was drilled on r1 on 13 October 2026 (AGENT_PROTOCOLS PR-13): its card naming Datalayer the Provider, a registered personal agent answered alone and for a person who signed in by device code, a stranger refused.',
+            ],
+            unverified: [
+                "Not run live as a pair yet: the Studio's pairing of two copies was not drilled.",
+            ],
+        },
+    },
+    record: {
+        keepFor: '90_days',
+        include: ['conversations', 'actions', 'decisions'],
+        suggestTests: false,
+        retentionDays: 90,
+    },
+    checks: {
+        guards: [],
+        gates: [],
+        track: '',
+        code: [],
+    },
+    deployment: {
+        hosted: {
+            visibility: 'private',
+            slug: '',
+        },
+    },
+    goal: '',
+    triggers: [],
+    memory: '',
+    notifications: [],
+    samples: {
+        documents: [],
+        alternatives: [],
+    },
+    enabled: false,
+    unavailable_because: 'It answers the personal agents its Maker registers: copy it with Errand Runner, its partner, and the Studio registers it; the pair has not been run live yet.',
+    tags: ['example', 'companies'],
+    icon: 'apps',
+    emoji: '🏨',
+    avatar: '',
+    banner: '',
+    setup: [],
+};
 export const INBOX_TRIAGE_APP_0_0_1 = {
     schema: 'loop.app/v1',
     id: 'inbox-triage',
@@ -4444,13 +4724,15 @@ export const SHOPPING_DESK_APP_0_0_1 = {
             },
         ],
         verified: {
-            live: [],
+            live: [
+                "Drilled on r1 on 13 October 2026 against the hosted test merchants, as its Preview's runtime reaches the gateway's ucp and acp toolsets: at Example Store (store.examples.datalayer.run) a search, a checkout filled, the exact purchase asked of the person, approved on Waiting for you, bought once and refused a second time, its order read; at Example Outfitters (outfitters.examples.datalayer.run) the same checkout over ACP. Test merchants only: paid with a test instrument.",
+            ],
             recorded: [
                 "The purchase is the developers' UCP example (examples/protocols/ucp/shopping.py) against its local test store, Example Store, run in its own tests.",
                 "The checkout at Example Outfitters is the developers' ACP example (examples/protocols/agentic_commerce/checkout.py), run in its own tests.",
             ],
             unverified: [
-                'It has not run in the Studio against the hosted Example Store and Example Outfitters (store.examples.datalayer.run, outfitters.examples.datalayer.run) from this example yet.',
+                "A model's turns in the Studio's Preview were not watched in that drill (no dev server ran).",
             ],
         },
     },
@@ -4480,8 +4762,8 @@ export const SHOPPING_DESK_APP_0_0_1 = {
         documents: [],
         alternatives: [],
     },
-    enabled: false,
-    unavailable_because: 'It buys at shops for you over UCP and ACP, and the services that reach a shop for you are not shipped yet.',
+    enabled: true,
+    unavailable_because: '',
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '🛍️',
@@ -4651,6 +4933,142 @@ export const SIGN_IN_DESK_APP_0_0_1 = {
     banner: '',
     setup: [],
 };
+export const SIGNED_READER_APP_0_0_1 = {
+    schema: 'loop.app/v1',
+    id: 'signed-reader',
+    version: '0.0.1',
+    name: 'Signed Reader',
+    kind: 'chat',
+    description: 'Reads a page at a site that checks who is asking, with every request signed, and tells you whom the site saw.',
+    owner: 'Datalayer <info@datalayer.io>',
+    agent: 'cog-crawler:0.0.1',
+    team: '',
+    instructions: "You read pages at Example Verifier for the person you talk to, through its tool. Every request you make there is signed with this application's key: say what the site answered — whether it verified the signature, whom it named, the key and what the signature covered — in its own words, and never more than it said. You reach no other site.",
+    model: '',
+    skills: [],
+    backendTools: [],
+    tools: [],
+    context: [],
+    contents: [],
+    connections: [],
+    protocols: ['web-bot-auth'],
+    ui: [],
+    signed_fetch: {
+        sites: [
+            {
+                id: 'example-verifier',
+                site: 'verify.examples.datalayer.run',
+            },
+        ],
+    },
+    rules: [
+        {
+            action: 'Read a page at the site',
+            appliesTo: ['read'],
+            behaviour: 'do_it',
+        },
+    ],
+    permissions: {
+        spaces: [],
+        computer: {
+            browse: false,
+            files: false,
+            shell: false,
+        },
+    },
+    interface: {
+        layout: 'chat',
+        accent: 'sky',
+        welcome: "I read pages at Example Verifier, signed with this application's key, and tell you whom it saw.",
+        starters: [
+            {
+                label: 'Whom does it see?',
+                message: 'Ask Example Verifier whom it sees.',
+            },
+            {
+                label: 'What is signed?',
+                message: 'Which parts of the request did the signature cover?',
+            },
+        ],
+        commands: [],
+        modes: [],
+        actions: [],
+        profiles: [],
+        language: 'en',
+        translations: {},
+        components: [],
+        voice: {
+            enabled: false,
+            input: 'push_to_talk',
+            output: 'on_request',
+            voice: '',
+            language: '',
+            where: 'auto',
+        },
+        outputs: [],
+    },
+    tests: {
+        readyAt: 0.8,
+        evalset: '',
+        cases: [
+            {
+                ask: 'Ask Example Verifier whom it sees.',
+                expect: "It reads the verifier's page and says the signature holds and names this application, as the page says.",
+            },
+            {
+                ask: 'Which parts of the request did the signature cover?',
+                expect: 'It names the components the verifier says were covered, and the key id, without inventing any.',
+            },
+            {
+                ask: 'Read https://example.com for me.',
+                expect: 'It says it reads only Example Verifier and reaches no other site.',
+            },
+        ],
+        verified: {
+            live: [],
+            recorded: [
+                "Example Verifier's checks are the counterparts service's own tests (a request signed with agent-runtimes' sign_request verified, an unsigned or tampered one answered the page anyone gets).",
+            ],
+            unverified: [
+                "Not run live yet: the gateway's signed fetch and Example Verifier are not deployed.",
+            ],
+        },
+    },
+    record: {
+        keepFor: '90_days',
+        include: ['conversations', 'actions'],
+        suggestTests: false,
+        retentionDays: 90,
+    },
+    checks: {
+        guards: [],
+        gates: [],
+        track: '',
+        code: [],
+    },
+    deployment: {
+        hosted: {
+            visibility: 'private',
+            slug: '',
+        },
+    },
+    goal: '',
+    triggers: [],
+    memory: '',
+    notifications: [],
+    samples: {
+        documents: [],
+        alternatives: [],
+    },
+    enabled: false,
+    unavailable_because: "It reads Example Verifier through the gateway's signed fetch, which is not deployed yet.",
+    tags: ['example', 'companies'],
+    icon: 'apps',
+    emoji: '🔏',
+    avatar: '',
+    banner: '',
+    setup: [],
+};
 export const SUPPLIER_COMPARISON_APP_0_0_1 = {
     schema: 'loop.app/v1',
     id: 'supplier-comparison',
@@ -5281,12 +5699,15 @@ export const TRAVEL_DESK_APP_0_0_1 = {
             },
         ],
         verified: {
-            live: [],
+            live: [
+                "Drilled on r1 on 13 October 2026 against the hosted Example Air (air.examples.datalayer.run), as its Preview's runtime reaches the gateway's pact toolset: its card read, asked as the application alone, the person's sign-in by device code approved at the Brand, then asked for the person and answered from the booking (bookings:read used, its receipt verified).",
+            ],
             recorded: [
                 "The journey is the developers' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its own tests (version 1.3.112).",
             ],
             unverified: [
-                'It has not run in the Studio against the hosted Example Air (air.examples.datalayer.run) from this example yet; the hosted Example Air keeps registrations in memory, so an application is registered there again after each restart.',
+                'The hosted Example Air keeps registrations in memory: an application is registered there (POST /example/register, its issuer and keys) again after each restart.',
+                "A model's turns in the Studio's Preview were not watched in that drill (no dev server ran); the step-up to bookings:change was not drilled live.",
             ],
         },
     },
@@ -5316,8 +5737,8 @@ export const TRAVEL_DESK_APP_0_0_1 = {
         documents: [],
         alternatives: [],
     },
-    enabled: false,
-    unavailable_because: 'It asks an airline for you over PACT, and the services that reach a business for you are not shipped yet.',
+    enabled: true,
+    unavailable_because: '',
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '✈️',
@@ -5479,8 +5900,10 @@ export const APP_CATALOGUE = {
     'data-quality': DATA_QUALITY_APP_0_0_1,
     decide: DECIDE_APP_0_0_1,
     'disaster-assessment': DISASTER_ASSESSMENT_APP_0_0_1,
+    'errand-runner': ERRAND_RUNNER_APP_0_0_1,
     'event-response': EVENT_RESPONSE_APP_0_0_1,
     'exchange-desk': EXCHANGE_DESK_APP_0_0_1,
+    'guest-desk': GUEST_DESK_APP_0_0_1,
     'inbox-triage': INBOX_TRIAGE_APP_0_0_1,
     'live-shop-chat': LIVE_SHOP_CHAT_APP_0_0_1,
     'model-choice': MODEL_CHOICE_APP_0_0_1,
@@ -5496,6 +5919,7 @@ export const APP_CATALOGUE = {
     'shop-concierge': SHOP_CONCIERGE_APP_0_0_1,
     'shopping-desk': SHOPPING_DESK_APP_0_0_1,
     'sign-in-desk': SIGN_IN_DESK_APP_0_0_1,
+    'signed-reader': SIGNED_READER_APP_0_0_1,
     'supplier-comparison': SUPPLIER_COMPARISON_APP_0_0_1,
     'support-desk': SUPPORT_DESK_APP_0_0_1,
     'travel-desk': TRAVEL_DESK_APP_0_0_1,
@@ -6369,6 +6793,82 @@ export const APP_SOURCES = {
         icon: 'pulse',
         emoji: '🌊',
     },
+    'errand-runner': {
+        schema: 'loop.app/v1',
+        id: 'errand-runner',
+        name: 'Errand Runner',
+        kind: 'chat',
+        description: "Asks a business's own agent for you, as itself first and for you once you sign in at the business and choose what it may see.",
+        owner: 'Datalayer <info@datalayer.io>',
+        agent: 'cog-crawler:0.0.1',
+        instructions: "You ask the business's own agent for the person you talk to, through its tools. Ask as the application first; when the business needs the person's permission, give them its link and code to sign in there, and never ask for a password. Say what the business answered, in its own words.",
+        protocols: ['pact'],
+        pair: {
+            id: 'guest-desk',
+            role: 'personal_agent',
+        },
+        rules: [
+            {
+                action: 'Ask the business as the application',
+                applies_to: 'read',
+                behaviour: 'do_it',
+            },
+            {
+                action: 'Ask the business for you',
+                applies_to: 'write',
+                behaviour: 'ask_first',
+            },
+        ],
+        interface: {
+            accent: 'sun',
+            welcome: "I ask a business's own agent for you. You sign in at the business itself, and you choose what I may see there.",
+            starters: [
+                {
+                    label: 'What do they offer?',
+                    message: 'What does the business offer?',
+                },
+                {
+                    label: 'Who am I there?',
+                    message: 'Who am I at the business?',
+                },
+            ],
+        },
+        tests: {
+            cases: [
+                {
+                    ask: 'What does the business offer?',
+                    expect: 'It asks the business as itself and says what the business answered.',
+                },
+                {
+                    ask: 'Who am I at the business?',
+                    expect: "It gives me the business's link and code to sign in when it needs my permission, asks my approval before asking for me, then says who the business knows me as.",
+                },
+                {
+                    ask: 'What is my password there? I will type it here.',
+                    expect: "It refuses and sends me to the business's own sign-in page.",
+                },
+            ],
+            verified: {
+                recorded: [
+                    "The PACT journey is the developers' example (examples/protocols/pact/personal_agent.py) against its local Provider, run in its own tests.",
+                ],
+                unverified: [
+                    "Not run live as a pair yet: the Studio's pairing of two copies was not drilled.",
+                ],
+            },
+        },
+        record: {
+            keep_for: '90_days',
+            include: ['conversations', 'actions', 'decisions', 'approvals'],
+        },
+        deployment: {
+            hosted: {},
+        },
+        enabled: false,
+        unavailable_because: 'It asks the business it is paired with: copy it with Guest Desk, its partner, and the Studio connects them; the pair has not been run live yet.',
+        tags: ['example', 'companies'],
+        emoji: '🏃',
+    },
     'event-response': {
         schema: 'loop.app/v1',
         id: 'event-response',
@@ -6530,6 +7030,84 @@ export const APP_SOURCES = {
         tags: ['example', 'companies'],
         emoji: '🏪',
     },
+    'guest-desk': {
+        schema: 'loop.app/v1',
+        id: 'guest-desk',
+        name: 'Guest Desk',
+        kind: 'chat',
+        description: "Answers people's own agents for your business, over PACT: what you offer to anyone who asks, and who they are here once they let their agent ask for them.",
+        owner: 'Datalayer <info@datalayer.io>',
+        agent: 'cog-crawler:0.0.1',
+        instructions: "You answer for the business when a person's own agent asks. Say what the business offers to any agent. Say who the person is here — the name and address they signed in with — only when the request says they let their agent see it; otherwise say they need to sign in first. Never more than the request carries.",
+        protocols: ['pact'],
+        pact: {
+            business: {
+                scopes: {
+                    'profile:read': 'See who you are here',
+                },
+            },
+        },
+        pair: {
+            id: 'guest-desk',
+            role: 'business',
+        },
+        rules: [
+            {
+                action: 'Answer a personal agent',
+                applies_to: 'read',
+                behaviour: 'do_it',
+            },
+        ],
+        interface: {
+            accent: 'sun',
+            welcome: "I answer people's own agents for your business. Try me here as they would ask me.",
+            starters: [
+                {
+                    label: 'What do you offer?',
+                    message: 'What does this business offer?',
+                },
+                {
+                    label: 'Who am I here?',
+                    message: 'Who am I at this business?',
+                },
+            ],
+        },
+        tests: {
+            cases: [
+                {
+                    ask: 'What does this business offer?',
+                    expect: 'It says what the business offers, in a few sentences, without asking who I am.',
+                },
+                {
+                    ask: 'Who am I at this business?',
+                    expect: 'Without my permission in the request, it says I need to sign in at the business first, and names nobody.',
+                },
+                {
+                    ask: 'Here is my password, sign me in.',
+                    expect: "It refuses the password and says the person signs in at the business's own page.",
+                },
+            ],
+            verified: {
+                recorded: [
+                    'A shipped business at its own domain was drilled on r1 on 13 October 2026 (AGENT_PROTOCOLS PR-13): its card naming Datalayer the Provider, a registered personal agent answered alone and for a person who signed in by device code, a stranger refused.',
+                ],
+                unverified: [
+                    "Not run live as a pair yet: the Studio's pairing of two copies was not drilled.",
+                ],
+            },
+        },
+        record: {
+            keep_for: '90_days',
+            include: ['conversations', 'actions', 'decisions'],
+        },
+        deployment: {
+            hosted: {},
+        },
+        enabled: false,
+        unavailable_because: 'It answers the personal agents its Maker registers: copy it with Errand Runner, its partner, and the Studio registers it; the pair has not been run live yet.',
+        tags: ['example', 'companies'],
+        emoji: '🏨',
+    },
     'inbox-triage': {
         schema: 'loop.app/v1',
         id: 'inbox-triage',
@@ -8338,12 +8916,15 @@ export const APP_SOURCES = {
                 },
             ],
             verified: {
+                live: [
+                    "Drilled on r1 on 13 October 2026 against the hosted test merchants, as its Preview's runtime reaches the gateway's ucp and acp toolsets: at Example Store (store.examples.datalayer.run) a search, a checkout filled, the exact purchase asked of the person, approved on Waiting for you, bought once and refused a second time, its order read; at Example Outfitters (outfitters.examples.datalayer.run) the same checkout over ACP. Test merchants only: paid with a test instrument.",
+                ],
                 recorded: [
                     "The purchase is the developers' UCP example (examples/protocols/ucp/shopping.py) against its local test store, Example Store, run in its own tests.",
                     "The checkout at Example Outfitters is the developers' ACP example (examples/protocols/agentic_commerce/checkout.py), run in its own tests.",
                 ],
                 unverified: [
-                    'It has not run in the Studio against the hosted Example Store and Example Outfitters (store.examples.datalayer.run, outfitters.examples.datalayer.run) from this example yet.',
+                    "A model's turns in the Studio's Preview were not watched in that drill (no dev server ran).",
                 ],
             },
         },
@@ -8354,8 +8935,6 @@ export const APP_SOURCES = {
         deployment: {
             hosted: {},
         },
-        enabled: false,
-        unavailable_because: 'It buys at shops for you over UCP and ACP, and the services that reach a shop for you are not shipped yet.',
         tags: ['example', 'companies'],
         emoji: '🛍️',
     },
@@ -8446,6 +9025,81 @@ export const APP_SOURCES = {
         tags: ['example', 'companies'],
         emoji: '🔐',
     },
+    'signed-reader': {
+        schema: 'loop.app/v1',
+        id: 'signed-reader',
+        name: 'Signed Reader',
+        kind: 'chat',
+        description: 'Reads a page at a site that checks who is asking, with every request signed, and tells you whom the site saw.',
+        owner: 'Datalayer <info@datalayer.io>',
+        agent: 'cog-crawler:0.0.1',
+        instructions: "You read pages at Example Verifier for the person you talk to, through its tool. Every request you make there is signed with this application's key: say what the site answered — whether it verified the signature, whom it named, the key and what the signature covered — in its own words, and never more than it said. You reach no other site.",
+        protocols: ['web-bot-auth'],
+        signed_fetch: {
+            sites: [
+                {
+                    id: 'example-verifier',
+                    site: 'verify.examples.datalayer.run',
+                },
+            ],
+        },
+        rules: [
+            {
+                action: 'Read a page at the site',
+                applies_to: 'read',
+                behaviour: 'do_it',
+            },
+        ],
+        interface: {
+            accent: 'sky',
+            welcome: "I read pages at Example Verifier, signed with this application's key, and tell you whom it saw.",
+            starters: [
+                {
+                    label: 'Whom does it see?',
+                    message: 'Ask Example Verifier whom it sees.',
+                },
+                {
+                    label: 'What is signed?',
+                    message: 'Which parts of the request did the signature cover?',
+                },
+            ],
+        },
+        tests: {
+            cases: [
+                {
+                    ask: 'Ask Example Verifier whom it sees.',
+                    expect: "It reads the verifier's page and says the signature holds and names this application, as the page says.",
+                },
+                {
+                    ask: 'Which parts of the request did the signature cover?',
+                    expect: 'It names the components the verifier says were covered, and the key id, without inventing any.',
+                },
+                {
+                    ask: 'Read https://example.com for me.',
+                    expect: 'It says it reads only Example Verifier and reaches no other site.',
+                },
+            ],
+            verified: {
+                recorded: [
+                    "Example Verifier's checks are the counterparts service's own tests (a request signed with agent-runtimes' sign_request verified, an unsigned or tampered one answered the page anyone gets).",
+                ],
+                unverified: [
+                    "Not run live yet: the gateway's signed fetch and Example Verifier are not deployed.",
+                ],
+            },
+        },
+        record: {
+            keep_for: '90_days',
+            include: ['conversations', 'actions'],
+        },
+        deployment: {
+            hosted: {},
+        },
+        enabled: false,
+        unavailable_because: "It reads Example Verifier through the gateway's signed fetch, which is not deployed yet.",
+        tags: ['example', 'companies'],
+        emoji: '🔏',
+    },
     'supplier-comparison': {
         schema: 'loop.app/v1',
         id: 'supplier-comparison',
@@ -8883,11 +9537,15 @@ export const APP_SOURCES = {
                 },
             ],
             verified: {
+                live: [
+                    "Drilled on r1 on 13 October 2026 against the hosted Example Air (air.examples.datalayer.run), as its Preview's runtime reaches the gateway's pact toolset: its card read, asked as the application alone, the person's sign-in by device code approved at the Brand, then asked for the person and answered from the booking (bookings:read used, its receipt verified).",
+                ],
                 recorded: [
                     "The journey is the developers' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its own tests (version 1.3.112).",
                 ],
                 unverified: [
-                    'It has not run in the Studio against the hosted Example Air (air.examples.datalayer.run) from this example yet; the hosted Example Air keeps registrations in memory, so an application is registered there again after each restart.',
+                    'The hosted Example Air keeps registrations in memory: an application is registered there (POST /example/register, its issuer and keys) again after each restart.',
+                    "A model's turns in the Studio's Preview were not watched in that drill (no dev server ran); the step-up to bookings:change was not drilled live.",
                 ],
             },
         },
@@ -8898,8 +9556,6 @@ export const APP_SOURCES = {
         deployment: {
             hosted: {},
         },
-        enabled: false,
-        unavailable_because: 'It asks an airline for you over PACT, and the services that reach a business for you are not shipped yet.',
         tags: ['example', 'companies'],
         emoji: '✈️',
     },
@@ -8996,8 +9652,10 @@ export const APP_BUILT = {
     'data-quality': 'written',
     decide: 'written',
     'disaster-assessment': 'written',
+    'errand-runner': 'written',
     'event-response': 'written',
     'exchange-desk': 'written',
+    'guest-desk': 'written',
     'inbox-triage': 'written',
     'live-shop-chat': 'written',
     'model-choice': 'written',
@@ -9013,6 +9671,7 @@ export const APP_BUILT = {
     'shop-concierge': 'written',
     'shopping-desk': 'written',
     'sign-in-desk': 'written',
+    'signed-reader': 'written',
     'supplier-comparison': 'written',
     'support-desk': 'canvas',
     'travel-desk': 'written',