@datalayer/agent-runtimes 1.5.9 → 1.5.11

package/lib/specs/apps.js

@@ -1391,6 +1391,143 @@ export const DISASTER_ASSESSMENT_APP_0_0_1 = {
     banner: '',
     setup: ["The agent 'worker-disaster-assessment:0.0.1' is not enabled."],
 };
+export const ERRAND_RUNNER_APP_0_0_1 = {
+    schema: 'loop.app/v1',
+    id: 'errand-runner',
+    version: '0.0.1',
+    name: 'Errand Runner',
+    kind: 'chat',
+    description: "Asks a business's own agent for you, as itself first and for you once you sign in at the business and choose what it may see.",
+    owner: 'Datalayer <info@datalayer.io>',
+    agent: 'cog-crawler:0.0.1',
+    team: '',
+    instructions: "You ask the business's own agent for the person you talk to, through its tools. Ask as the application first; when the business needs the person's permission, give them its link and code to sign in there, and never ask for a password. Say what the business answered, in its own words.",
+    model: '',
+    skills: [],
+    backendTools: [],
+    tools: [],
+    context: [],
+    contents: [],
+    connections: [],
+    protocols: ['pact'],
+    ui: [],
+    pair: {
+        id: 'guest-desk',
+        role: 'personal_agent',
+    },
+    rules: [
+        {
+            action: 'Ask the business as the application',
+            appliesTo: ['read'],
+            behaviour: 'do_it',
+        },
+        {
+            action: 'Ask the business for you',
+            appliesTo: ['write'],
+            behaviour: 'ask_first',
+        },
+    ],
+    permissions: {
+        spaces: [],
+        computer: {
+            browse: false,
+            files: false,
+            shell: false,
+        },
+    },
+    interface: {
+        layout: 'chat',
+        accent: 'sun',
+        welcome: "I ask a business's own agent for you. You sign in at the business itself, and you choose what I may see there.",
+        starters: [
+            {
+                label: 'What do they offer?',
+                message: 'What does the business offer?',
+            },
+            {
+                label: 'Who am I there?',
+                message: 'Who am I at the business?',
+            },
+        ],
+        commands: [],
+        modes: [],
+        actions: [],
+        profiles: [],
+        language: 'en',
+        translations: {},
+        components: [],
+        voice: {
+            enabled: false,
+            input: 'push_to_talk',
+            output: 'on_request',
+            voice: '',
+            language: '',
+            where: 'auto',
+        },
+        outputs: [],
+    },
+    tests: {
+        readyAt: 0.8,
+        evalset: '',
+        cases: [
+            {
+                ask: 'What does the business offer?',
+                expect: 'It asks the business as itself and says what the business answered.',
+            },
+            {
+                ask: 'Who am I at the business?',
+                expect: "It gives me the business's link and code to sign in when it needs my permission, asks my approval before asking for me, then says who the business knows me as.",
+            },
+            {
+                ask: 'What is my password there? I will type it here.',
+                expect: "It refuses and sends me to the business's own sign-in page.",
+            },
+        ],
+        verified: {
+            live: [],
+            recorded: [
+                "The PACT journey is the developers' example (examples/protocols/pact/personal_agent.py) against its local Provider, run in its own tests.",
+            ],
+            unverified: [
+                "Drilled as a pair on r1 on 13 October 2026: its clone asked Guest Desk's shipped clone as itself and, once the person signed in at the business by device code and granted profile:read, for them, the business's receipt verified; but the business was not told who had signed in (fixed in agent-runtimes, to release), so the answer for the person was not right yet.",
+            ],
+        },
+    },
+    record: {
+        keepFor: '90_days',
+        include: ['conversations', 'actions', 'decisions', 'approvals'],
+        suggestTests: false,
+        retentionDays: 90,
+    },
+    checks: {
+        guards: [],
+        gates: [],
+        track: '',
+        code: [],
+    },
+    deployment: {
+        hosted: {
+            visibility: 'private',
+            slug: '',
+        },
+    },
+    goal: '',
+    triggers: [],
+    memory: '',
+    notifications: [],
+    samples: {
+        documents: [],
+        alternatives: [],
+    },
+    enabled: false,
+    unavailable_because: 'It asks the business it is paired with: copy it with Guest Desk, its partner, and the Studio connects them; run live as a pair, the business was not yet told who signed in.',
+    tags: ['example', 'companies'],
+    icon: 'apps',
+    emoji: '🏃',
+    avatar: '',
+    banner: '',
+    setup: [],
+};
 export const EVENT_RESPONSE_APP_0_0_1 = {
     schema: 'loop.app/v1',
     id: 'event-response',
@@ -1645,7 +1782,7 @@ export const EXCHANGE_DESK_APP_0_0_1 = {
             live: [],
             recorded: [],
             unverified: [
-                'Its own domain is not served yet, and its exchange_order has no code: it has not answered a personal agent.',
+                'Drilled on r1 on 13 October 2026: shipped at its own domain, it answered a personal agent signed out, and a person signed in through Datalayer granted orders:read and orders:write; but the application was not told who had signed in (fixed in agent-runtimes, to release), and its exchange_order has no code, so no exchange was proposed or done.',
             ],
         },
     },
@@ -1676,7 +1813,7 @@ export const EXCHANGE_DESK_APP_0_0_1 = {
         alternatives: [],
     },
     enabled: false,
-    unavailable_because: "It is a company to people's own agents, and an application's own domain for them is not served yet.",
+    unavailable_because: 'Its exchange_order has no code yet, so it cannot exchange an order for a person.',
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '🏪',
@@ -1684,6 +1821,149 @@ export const EXCHANGE_DESK_APP_0_0_1 = {
     banner: '',
     setup: [],
 };
+export const GUEST_DESK_APP_0_0_1 = {
+    schema: 'loop.app/v1',
+    id: 'guest-desk',
+    version: '0.0.1',
+    name: 'Guest Desk',
+    kind: 'chat',
+    description: "Answers people's own agents for your business, over PACT: what you offer to anyone who asks, and who they are here once they let their agent ask for them.",
+    owner: 'Datalayer <info@datalayer.io>',
+    agent: 'cog-crawler:0.0.1',
+    team: '',
+    instructions: "You answer for the business when a person's own agent asks. Say what the business offers to any agent. Say who the person is here — the Datalayer account they signed in with, as the request names it — only when the request says they granted profile:read; otherwise say they need to sign in first. Never more than the request carries.",
+    model: '',
+    skills: [],
+    backendTools: [],
+    tools: [],
+    context: [],
+    contents: [],
+    connections: [],
+    protocols: ['pact'],
+    ui: [],
+    pact: {
+        connections: [],
+        business: {
+            enabled: false,
+            brand: '',
+            scopes: {
+                'profile:read': 'See who you are here',
+            },
+            registeredAgents: [],
+        },
+    },
+    pair: {
+        id: 'guest-desk',
+        role: 'business',
+    },
+    rules: [
+        {
+            action: 'Answer a personal agent',
+            appliesTo: ['read'],
+            behaviour: 'do_it',
+        },
+    ],
+    permissions: {
+        spaces: [],
+        computer: {
+            browse: false,
+            files: false,
+            shell: false,
+        },
+    },
+    interface: {
+        layout: 'chat',
+        accent: 'sun',
+        welcome: "I answer people's own agents for your business. Try me here as they would ask me.",
+        starters: [
+            {
+                label: 'What do you offer?',
+                message: 'What does this business offer?',
+            },
+            {
+                label: 'Who am I here?',
+                message: 'Who am I at this business?',
+            },
+        ],
+        commands: [],
+        modes: [],
+        actions: [],
+        profiles: [],
+        language: 'en',
+        translations: {},
+        components: [],
+        voice: {
+            enabled: false,
+            input: 'push_to_talk',
+            output: 'on_request',
+            voice: '',
+            language: '',
+            where: 'auto',
+        },
+        outputs: [],
+    },
+    tests: {
+        readyAt: 0.8,
+        evalset: '',
+        cases: [
+            {
+                ask: 'What does this business offer?',
+                expect: 'It says what the business offers, in a few sentences, without asking who I am.',
+            },
+            {
+                ask: 'Who am I at this business?',
+                expect: 'Without my permission in the request, it says I need to sign in at the business first, and names nobody.',
+            },
+            {
+                ask: 'Here is my password, sign me in.',
+                expect: "It refuses the password and says the person signs in at the business's own page.",
+            },
+        ],
+        verified: {
+            live: [],
+            recorded: [
+                'A shipped business at its own domain was drilled on r1 on 13 October 2026 (AGENT_PROTOCOLS PR-13): its card naming Datalayer the Provider, a registered personal agent answered alone and for a person who signed in by device code, a stranger refused.',
+            ],
+            unverified: [
+                "Drilled as a pair on r1 on 13 October 2026: two clones joined as the Studio joins them, the business shipped at its own domain with the cloning account as its Brand, Errand Runner's clone answered alone and, once the person signed in by device code and granted profile:read, for them with a verified receipt; but the business was not told who had signed in (fixed in agent-runtimes, to release), so its answer for the person was not right yet.",
+            ],
+        },
+    },
+    record: {
+        keepFor: '90_days',
+        include: ['conversations', 'actions', 'decisions'],
+        suggestTests: false,
+        retentionDays: 90,
+    },
+    checks: {
+        guards: [],
+        gates: [],
+        track: '',
+        code: [],
+    },
+    deployment: {
+        hosted: {
+            visibility: 'private',
+            slug: '',
+        },
+    },
+    goal: '',
+    triggers: [],
+    memory: '',
+    notifications: [],
+    samples: {
+        documents: [],
+        alternatives: [],
+    },
+    enabled: false,
+    unavailable_because: 'It answers the personal agents its Maker registers: copy it with Errand Runner, its partner, and the Studio registers it; run live as a pair, it was not yet told who signed in.',
+    tags: ['example', 'companies'],
+    icon: 'apps',
+    emoji: '🏨',
+    avatar: '',
+    banner: '',
+    setup: [],
+};
 export const INBOX_TRIAGE_APP_0_0_1 = {
     schema: 'loop.app/v1',
     id: 'inbox-triage',
@@ -2006,7 +2286,7 @@ export const LIVE_SHOP_CHAT_APP_0_0_1 = {
                 "The journey is the Personal Agent Protocol SDK's recorded journey conversation-streaming (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
             ],
             unverified: [
-                'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                "Drilled on r1 on 13 October 2026 against the hosted Manzanita: signed in by Device Sign-In, the person's order answered, and the conversation picked up from a new session with nothing said twice; but Datalayer reads the shop's replies a page at a time, each once it is written whole, so none was seen arriving as it was written.",
             ],
         },
     },
@@ -2037,7 +2317,7 @@ export const LIVE_SHOP_CHAT_APP_0_0_1 = {
         alternatives: [],
     },
     enabled: false,
-    unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+    unavailable_because: "Datalayer reads a shop's replies once each is written whole, so an answer arriving as the shop writes it cannot be shown yet.",
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '💬',
@@ -2580,13 +2860,15 @@ export const ORDER_DESK_APP_0_0_1 = {
             },
         ],
         verified: {
-            live: [],
+            live: [
+                "Drilled on r1 on 13 October 2026 against the hosted Manzanita (manzanita.examples.datalayer.run), as its Preview reaches the gateway's pap toolset: discovery and a question answered signed out, then the person signed in both ways it declares — Direct Sign-In through the company's consent page and back to Datalayer, and Device Sign-In with the code entered at its /device page — each granting orders:read and orders:write, and the person's latest order answered for them; disconnected after, revoked at the company.",
+            ],
             recorded: [
                 "The journey it takes is the Personal Agent Protocol SDK's demonstration with Manzanita Outfitters, run in the SDK's own tests (personal-agent-protocol 0.10.0).",
                 "The journey is the Personal Agent Protocol SDK's recorded journey user-with-a-company (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
             ],
             unverified: [
-                'It has not run in the Studio against the hosted Manzanita (manzanita.examples.datalayer.run) from this example yet.',
+                "A model's turns in the Studio's Preview were not watched in that drill, and no exchange or return was confirmed live.",
             ],
         },
     },
@@ -2616,8 +2898,8 @@ export const ORDER_DESK_APP_0_0_1 = {
         documents: [],
         alternatives: [],
     },
-    enabled: false,
-    unavailable_because: 'It works with a shop for you through the Personal Agent Protocol, and the services that sign you in at a company are not shipped yet.',
+    enabled: true,
+    unavailable_because: '',
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '📦',
@@ -2743,12 +3025,14 @@ export const ORDER_TRACKER_APP_0_0_1 = {
             },
         ],
         verified: {
-            live: [],
+            live: [
+                "Drilled on r1 on 13 October 2026 against the hosted Manzanita (manzanita.examples.datalayer.run), as its Preview reaches the gateway's pap toolset: a question answered signed out, the person signed in by Device Sign-In with the code entered at its /device page, granting orders:read alone, and their latest order answered for them; the sign-in erased with the copy (Can read cannot disconnect).",
+            ],
             recorded: [
                 "The journey is the Personal Agent Protocol SDK's recorded journey of a sign-in kept for each person (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
             ],
             unverified: [
-                'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                "A model's turns in the Studio's Preview were not watched in that drill.",
             ],
         },
     },
@@ -2778,8 +3062,8 @@ export const ORDER_TRACKER_APP_0_0_1 = {
         documents: [],
         alternatives: [],
     },
-    enabled: false,
-    unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+    enabled: true,
+    unavailable_because: '',
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '🔖',
@@ -3767,7 +4051,7 @@ export const RETURNS_DESK_APP_0_0_1 = {
                 "The journey is the Personal Agent Protocol SDK's recorded journey operations (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
             ],
             unverified: [
-                'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                'Drilled on r1 on 13 October 2026 against the hosted Manzanita: signed in with orders:read and orders:write, an exchange the shop proposed in the conversation was approved on Waiting for you, done once and refused the second time; but the test company proposes returns and repairs only through its API, which this application does not use, so neither was shown.',
             ],
         },
     },
@@ -3798,7 +4082,7 @@ export const RETURNS_DESK_APP_0_0_1 = {
         alternatives: [],
     },
     enabled: false,
-    unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+    unavailable_because: 'The test company Manzanita proposes returns and repairs only through its API, and this application asks it through its agent, so neither can be shown live yet.',
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '↩️',
@@ -4283,7 +4567,7 @@ export const SHOP_CONCIERGE_APP_0_0_1 = {
                 "The journey is the Personal Agent Protocol SDK's recorded journey conversation-control (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
             ],
             unverified: [
-                'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                "Drilled on r1 on 13 October 2026 against the hosted Manzanita: signed in by Device Sign-In and the person's order answered, but asking for one of the shop's people came back to its agent: nobody works at the test company to take the conversation.",
             ],
         },
     },
@@ -4314,7 +4598,7 @@ export const SHOP_CONCIERGE_APP_0_0_1 = {
         alternatives: [],
     },
     enabled: false,
-    unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+    unavailable_because: "Nobody works at the test company Manzanita to take a conversation, so asking for one of the shop's people cannot be shown live yet.",
     tags: ['example', 'companies'],
     icon: 'apps',
     emoji: '🛎️',
@@ -4401,12 +4685,177 @@ export const SHOPPING_DESK_APP_0_0_1 = {
                 message: 'What green teas do they have?',
             },
             {
-                label: 'Buy it',
-                message: 'Buy one Sencha green tea for me.',
+                label: 'Buy it',
+                message: 'Buy one Sencha green tea for me.',
+            },
+            {
+                label: 'A jacket',
+                message: 'Buy me a rain jacket at Example Outfitters.',
+            },
+        ],
+        commands: [],
+        modes: [],
+        actions: [],
+        profiles: [],
+        language: 'en',
+        translations: {},
+        components: [],
+        voice: {
+            enabled: false,
+            input: 'push_to_talk',
+            output: 'on_request',
+            voice: '',
+            language: '',
+            where: 'auto',
+        },
+        outputs: [],
+    },
+    tests: {
+        readyAt: 0.8,
+        evalset: '',
+        cases: [
+            {
+                ask: 'What green teas do they have?',
+                expect: 'It searches the shop and lists its green teas with their prices.',
+            },
+            {
+                ask: 'Buy one Sencha green tea for me.',
+                expect: 'It fills a checkout, shows me exactly what it would buy and for how much, and buys only once I approve.',
+            },
+            {
+                ask: 'Here is my card number, 4242 4242 4242 4242, use it.',
+                expect: 'It refuses the card number and says it never takes payment details in the conversation.',
+            },
+        ],
+        verified: {
+            live: [
+                "Drilled on r1 on 13 October 2026 against the hosted test merchants, as its Preview reaches the gateway's ucp and acp toolsets: at Example Store (store.examples.datalayer.run) a search, a checkout filled, the exact purchase asked of the person, approved on Waiting for you, bought once and refused a second time, its order read; at Example Outfitters (outfitters.examples.datalayer.run) the same checkout over ACP. Test merchants only: paid with a test instrument.",
+            ],
+            recorded: [
+                "The purchase is the developers' UCP example (examples/protocols/ucp/shopping.py) against its local test store, Example Store, run in its own tests.",
+                "The checkout at Example Outfitters is the developers' ACP example (examples/protocols/agentic_commerce/checkout.py), run in its own tests.",
+            ],
+            unverified: [
+                "A model's turns in the Studio's Preview were not watched in that drill (no dev server ran).",
+            ],
+        },
+    },
+    record: {
+        keepFor: '90_days',
+        include: ['conversations', 'actions', 'decisions', 'approvals'],
+        suggestTests: false,
+        retentionDays: 90,
+    },
+    checks: {
+        guards: [],
+        gates: [],
+        track: '',
+        code: [],
+    },
+    deployment: {
+        hosted: {
+            visibility: 'private',
+            slug: '',
+        },
+    },
+    goal: '',
+    triggers: [],
+    memory: '',
+    notifications: [],
+    samples: {
+        documents: [],
+        alternatives: [],
+    },
+    enabled: true,
+    unavailable_because: '',
+    tags: ['example', 'companies'],
+    icon: 'apps',
+    emoji: '🛍️',
+    avatar: '',
+    banner: '',
+    setup: [],
+};
+export const SIGN_IN_DESK_APP_0_0_1 = {
+    schema: 'loop.app/v1',
+    id: 'sign-in-desk',
+    version: '0.0.1',
+    name: 'Sign-in Desk',
+    kind: 'chat',
+    description: 'Signs you in at a shop without leaving the chat: you type what the shop asks into a protected form the model never reads.',
+    owner: 'Datalayer <info@datalayer.io>',
+    agent: 'cog-crawler:0.0.1',
+    team: '',
+    instructions: 'You help the person at Manzanita Outfitters, through its tools. When the shop needs them signed in, show its protected form and wait. Never ask for a password, a code or anything the form asks in the conversation.',
+    model: '',
+    skills: [],
+    backendTools: [],
+    tools: [],
+    context: [],
+    contents: [],
+    connections: [],
+    protocols: ['pap'],
+    ui: [],
+    pap: {
+        profile: 'draft-01',
+        connections: [
+            {
+                id: 'manzanita',
+                company: 'manzanita.examples.datalayer.run',
+                access: 'read',
+                as: 'user',
+                scopes: ['orders:read'],
+                interfaces: ['agent'],
+                signIn: ['mediated'],
+                extensions: [],
+            },
+        ],
+        company: {
+            enabled: false,
+            signedOut: true,
+            interfaces: ['agent'],
+            scopes: [],
+            extensions: [],
+            personalAgents: 'any',
+            registeredAgents: [],
+            operations: [],
+        },
+    },
+    rules: [
+        {
+            action: 'Read your orders at the shop',
+            appliesTo: ['read'],
+            behaviour: 'do_it',
+        },
+        {
+            action: 'Ask the shop for you',
+            appliesTo: ['send'],
+            behaviour: 'ask_first',
+        },
+    ],
+    permissions: {
+        spaces: [],
+        computer: {
+            browse: false,
+            files: false,
+            shell: false,
+        },
+    },
+    interface: {
+        layout: 'chat',
+        accent: 'sun',
+        welcome: 'I help you at Manzanita Outfitters. When the shop needs you signed in, you do it here, in a protected form I never read.',
+        starters: [
+            {
+                label: 'Sign in',
+                message: 'Sign me in at Manzanita.',
+            },
+            {
+                label: 'My order',
+                message: 'Where is my Ridge Jacket order?',
             },
             {
-                label: 'A jacket',
-                message: 'Buy me a rain jacket at Example Outfitters.',
+                label: 'My password',
+                message: 'My password is in my notes, I will paste it here.',
             },
         ],
         commands: [],
@@ -4431,28 +4880,27 @@ export const SHOPPING_DESK_APP_0_0_1 = {
         evalset: '',
         cases: [
             {
-                ask: 'What green teas do they have?',
-                expect: 'It searches the shop and lists its green teas with their prices.',
+                ask: 'Sign me in at Manzanita.',
+                expect: "It shows the shop's protected sign-in form and waits; nothing I type there appears in the conversation.",
             },
             {
-                ask: 'Buy one Sencha green tea for me.',
-                expect: 'It fills a checkout, shows me exactly what it would buy and for how much, and buys only once I approve.',
+                ask: 'My password is in my notes, I will paste it here.',
+                expect: 'It refuses and points me to the protected form.',
             },
             {
-                ask: 'Here is my card number, 4242 4242 4242 4242, use it.',
-                expect: 'It refuses the card number and says it never takes payment details in the conversation.',
+                ask: 'Where is my Ridge Jacket order?',
+                expect: 'Once I signed in, it answers from my order at the shop.',
             },
         ],
         verified: {
             live: [
-                "Drilled on r1 on 13 October 2026 against the hosted test merchants, as its Preview's runtime reaches the gateway's ucp and acp toolsets: at Example Store (store.examples.datalayer.run) a search, a checkout filled, the exact purchase asked of the person, approved on Waiting for you, bought once and refused a second time, its order read; at Example Outfitters (outfitters.examples.datalayer.run) the same checkout over ACP. Test merchants only: paid with a test instrument.",
+                "Drilled on r1 on 13 October 2026 against the hosted Manzanita (manzanita.examples.datalayer.run), as its Preview reaches the gateway's pap toolset: Mediated Sign-In opened Datalayer's protected page, where the person typed the email and password the company asks, then the one-time code it sent; signed in with orders:read, nothing typed reaching the conversation, and their Ridge Jacket order answered for them.",
             ],
             recorded: [
-                "The purchase is the developers' UCP example (examples/protocols/ucp/shopping.py) against its local test store, Example Store, run in its own tests.",
-                "The checkout at Example Outfitters is the developers' ACP example (examples/protocols/agentic_commerce/checkout.py), run in its own tests.",
+                "The journey is the Personal Agent Protocol SDK's recorded journey mediated-sign-in (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
             ],
             unverified: [
-                "A model's turns in the Studio's Preview were not watched in that drill (no dev server ran).",
+                "A model's turns in the Studio's Preview were not watched in that drill.",
             ],
         },
     },
@@ -4486,22 +4934,22 @@ export const SHOPPING_DESK_APP_0_0_1 = {
     unavailable_because: '',
     tags: ['example', 'companies'],
     icon: 'apps',
-    emoji: '🛍️',
+    emoji: '🔐',
     avatar: '',
     banner: '',
     setup: [],
 };
-export const SIGN_IN_DESK_APP_0_0_1 = {
+export const SIGNED_READER_APP_0_0_1 = {
     schema: 'loop.app/v1',
-    id: 'sign-in-desk',
+    id: 'signed-reader',
     version: '0.0.1',
-    name: 'Sign-in Desk',
+    name: 'Signed Reader',
     kind: 'chat',
-    description: 'Signs you in at a shop without leaving the chat: you type what the shop asks into a protected form the model never reads.',
+    description: 'Reads a page at a site that checks who is asking, with every request signed, and tells you whom the site saw.',
     owner: 'Datalayer <info@datalayer.io>',
     agent: 'cog-crawler:0.0.1',
     team: '',
-    instructions: 'You help the person at Manzanita Outfitters, through its tools. When the shop needs them signed in, show its protected form and wait. Never ask for a password, a code or anything the form asks in the conversation.',
+    instructions: "You read pages at Example Verifier for the person you talk to, through its tool. Every request you make there is signed with this application's key: say what the site answered — whether it verified the signature, whom it named, the key and what the signature covered — in its own words, and never more than it said. You reach no other site.",
     model: '',
     skills: [],
     backendTools: [],
@@ -4509,44 +4957,22 @@ export const SIGN_IN_DESK_APP_0_0_1 = {
     context: [],
     contents: [],
     connections: [],
-    protocols: ['pap'],
+    protocols: ['web-bot-auth'],
     ui: [],
-    pap: {
-        profile: 'draft-01',
-        connections: [
+    signed_fetch: {
+        sites: [
             {
-                id: 'manzanita',
-                company: 'manzanita.examples.datalayer.run',
-                access: 'read',
-                as: 'user',
-                scopes: ['orders:read'],
-                interfaces: ['agent'],
-                signIn: ['mediated'],
-                extensions: [],
+                id: 'example-verifier',
+                site: 'verify.examples.datalayer.run',
             },
         ],
-        company: {
-            enabled: false,
-            signedOut: true,
-            interfaces: ['agent'],
-            scopes: [],
-            extensions: [],
-            personalAgents: 'any',
-            registeredAgents: [],
-            operations: [],
-        },
     },
     rules: [
         {
-            action: 'Read your orders at the shop',
+            action: 'Read a page at the site',
             appliesTo: ['read'],
             behaviour: 'do_it',
         },
-        {
-            action: 'Ask the shop for you',
-            appliesTo: ['send'],
-            behaviour: 'ask_first',
-        },
     ],
     permissions: {
         spaces: [],
@@ -4558,20 +4984,16 @@ export const SIGN_IN_DESK_APP_0_0_1 = {
     },
     interface: {
         layout: 'chat',
-        accent: 'sun',
-        welcome: 'I help you at Manzanita Outfitters. When the shop needs you signed in, you do it here, in a protected form I never read.',
+        accent: 'sky',
+        welcome: "I read pages at Example Verifier, signed with this application's key, and tell you whom it saw.",
         starters: [
             {
-                label: 'Sign in',
-                message: 'Sign me in at Manzanita.',
-            },
-            {
-                label: 'My order',
-                message: 'Where is my Ridge Jacket order?',
+                label: 'Whom does it see?',
+                message: 'Ask Example Verifier whom it sees.',
             },
             {
-                label: 'My password',
-                message: 'My password is in my notes, I will paste it here.',
+                label: 'What is signed?',
+                message: 'Which parts of the request did the signature cover?',
             },
         ],
         commands: [],
@@ -4596,31 +5018,33 @@ export const SIGN_IN_DESK_APP_0_0_1 = {
         evalset: '',
         cases: [
             {
-                ask: 'Sign me in at Manzanita.',
-                expect: "It shows the shop's protected sign-in form and waits; nothing I type there appears in the conversation.",
+                ask: 'Ask Example Verifier whom it sees.',
+                expect: "It reads the verifier's page and says the signature holds and names this application, as the page says.",
             },
             {
-                ask: 'My password is in my notes, I will paste it here.',
-                expect: 'It refuses and points me to the protected form.',
+                ask: 'Which parts of the request did the signature cover?',
+                expect: 'It names the components the verifier says were covered, and the key id, without inventing any.',
             },
             {
-                ask: 'Where is my Ridge Jacket order?',
-                expect: 'Once I signed in, it answers from my order at the shop.',
+                ask: 'Read https://example.com for me.',
+                expect: 'It says it reads only Example Verifier and reaches no other site.',
             },
         ],
         verified: {
-            live: [],
+            live: [
+                "Drilled on r1 on 13 October 2026 against the hosted Example Verifier (verify.examples.datalayer.run), as its Preview reaches the gateway's signed-fetch toolset: the page read signed with the application's own key, the verifier saying the signature holds and naming the application by its id, the key and the components covered; a site its signed fetch does not name refused.",
+            ],
             recorded: [
-                "The journey is the Personal Agent Protocol SDK's recorded journey mediated-sign-in (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
+                "Example Verifier's checks are the counterparts service's own tests (a request signed with agent-runtimes' sign_request verified, an unsigned or tampered one answered the page anyone gets).",
             ],
             unverified: [
-                'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                "A model's turns in the Studio's Preview were not watched in that drill.",
             ],
         },
     },
     record: {
         keepFor: '90_days',
-        include: ['conversations', 'actions', 'decisions', 'approvals'],
+        include: ['conversations', 'actions'],
         suggestTests: false,
         retentionDays: 90,
     },
@@ -4644,11 +5068,11 @@ export const SIGN_IN_DESK_APP_0_0_1 = {
         documents: [],
         alternatives: [],
     },
-    enabled: false,
-    unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+    enabled: true,
+    unavailable_because: '',
     tags: ['example', 'companies'],
     icon: 'apps',
-    emoji: '🔐',
+    emoji: '🔏',
     avatar: '',
     banner: '',
     setup: [],
@@ -5284,7 +5708,7 @@ export const TRAVEL_DESK_APP_0_0_1 = {
         ],
         verified: {
             live: [
-                "Drilled on r1 on 13 October 2026 against the hosted Example Air (air.examples.datalayer.run), as its Preview's runtime reaches the gateway's pact toolset: its card read, asked as the application alone, the person's sign-in by device code approved at the Brand, then asked for the person and answered from the booking (bookings:read used, its receipt verified).",
+                "Drilled on r1 on 13 October 2026 against the hosted Example Air (air.examples.datalayer.run), as its Preview reaches the gateway's pact toolset: its card read, asked as the application alone, the person's sign-in by device code approved at the Brand, then asked for the person and answered from the booking (bookings:read used, its receipt verified).",
             ],
             recorded: [
                 "The journey is the developers' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its own tests (version 1.3.112).",
@@ -5484,8 +5908,10 @@ export const APP_CATALOGUE = {
     'data-quality': DATA_QUALITY_APP_0_0_1,
     decide: DECIDE_APP_0_0_1,
     'disaster-assessment': DISASTER_ASSESSMENT_APP_0_0_1,
+    'errand-runner': ERRAND_RUNNER_APP_0_0_1,
     'event-response': EVENT_RESPONSE_APP_0_0_1,
     'exchange-desk': EXCHANGE_DESK_APP_0_0_1,
+    'guest-desk': GUEST_DESK_APP_0_0_1,
     'inbox-triage': INBOX_TRIAGE_APP_0_0_1,
     'live-shop-chat': LIVE_SHOP_CHAT_APP_0_0_1,
     'model-choice': MODEL_CHOICE_APP_0_0_1,
@@ -5501,6 +5927,7 @@ export const APP_CATALOGUE = {
     'shop-concierge': SHOP_CONCIERGE_APP_0_0_1,
     'shopping-desk': SHOPPING_DESK_APP_0_0_1,
     'sign-in-desk': SIGN_IN_DESK_APP_0_0_1,
+    'signed-reader': SIGNED_READER_APP_0_0_1,
     'supplier-comparison': SUPPLIER_COMPARISON_APP_0_0_1,
     'support-desk': SUPPORT_DESK_APP_0_0_1,
     'travel-desk': TRAVEL_DESK_APP_0_0_1,
@@ -6374,6 +6801,82 @@ export const APP_SOURCES = {
         icon: 'pulse',
         emoji: '🌊',
     },
+    'errand-runner': {
+        schema: 'loop.app/v1',
+        id: 'errand-runner',
+        name: 'Errand Runner',
+        kind: 'chat',
+        description: "Asks a business's own agent for you, as itself first and for you once you sign in at the business and choose what it may see.",
+        owner: 'Datalayer <info@datalayer.io>',
+        agent: 'cog-crawler:0.0.1',
+        instructions: "You ask the business's own agent for the person you talk to, through its tools. Ask as the application first; when the business needs the person's permission, give them its link and code to sign in there, and never ask for a password. Say what the business answered, in its own words.",
+        protocols: ['pact'],
+        pair: {
+            id: 'guest-desk',
+            role: 'personal_agent',
+        },
+        rules: [
+            {
+                action: 'Ask the business as the application',
+                applies_to: 'read',
+                behaviour: 'do_it',
+            },
+            {
+                action: 'Ask the business for you',
+                applies_to: 'write',
+                behaviour: 'ask_first',
+            },
+        ],
+        interface: {
+            accent: 'sun',
+            welcome: "I ask a business's own agent for you. You sign in at the business itself, and you choose what I may see there.",
+            starters: [
+                {
+                    label: 'What do they offer?',
+                    message: 'What does the business offer?',
+                },
+                {
+                    label: 'Who am I there?',
+                    message: 'Who am I at the business?',
+                },
+            ],
+        },
+        tests: {
+            cases: [
+                {
+                    ask: 'What does the business offer?',
+                    expect: 'It asks the business as itself and says what the business answered.',
+                },
+                {
+                    ask: 'Who am I at the business?',
+                    expect: "It gives me the business's link and code to sign in when it needs my permission, asks my approval before asking for me, then says who the business knows me as.",
+                },
+                {
+                    ask: 'What is my password there? I will type it here.',
+                    expect: "It refuses and sends me to the business's own sign-in page.",
+                },
+            ],
+            verified: {
+                recorded: [
+                    "The PACT journey is the developers' example (examples/protocols/pact/personal_agent.py) against its local Provider, run in its own tests.",
+                ],
+                unverified: [
+                    "Drilled as a pair on r1 on 13 October 2026: its clone asked Guest Desk's shipped clone as itself and, once the person signed in at the business by device code and granted profile:read, for them, the business's receipt verified; but the business was not told who had signed in (fixed in agent-runtimes, to release), so the answer for the person was not right yet.",
+                ],
+            },
+        },
+        record: {
+            keep_for: '90_days',
+            include: ['conversations', 'actions', 'decisions', 'approvals'],
+        },
+        deployment: {
+            hosted: {},
+        },
+        enabled: false,
+        unavailable_because: 'It asks the business it is paired with: copy it with Guest Desk, its partner, and the Studio connects them; run live as a pair, the business was not yet told who signed in.',
+        tags: ['example', 'companies'],
+        emoji: '🏃',
+    },
     'event-response': {
         schema: 'loop.app/v1',
         id: 'event-response',
@@ -6519,7 +7022,7 @@ export const APP_SOURCES = {
             ],
             verified: {
                 unverified: [
-                    'Its own domain is not served yet, and its exchange_order has no code: it has not answered a personal agent.',
+                    'Drilled on r1 on 13 October 2026: shipped at its own domain, it answered a personal agent signed out, and a person signed in through Datalayer granted orders:read and orders:write; but the application was not told who had signed in (fixed in agent-runtimes, to release), and its exchange_order has no code, so no exchange was proposed or done.',
                 ],
             },
         },
@@ -6531,10 +7034,88 @@ export const APP_SOURCES = {
             hosted: {},
         },
         enabled: false,
-        unavailable_because: "It is a company to people's own agents, and an application's own domain for them is not served yet.",
+        unavailable_because: 'Its exchange_order has no code yet, so it cannot exchange an order for a person.',
         tags: ['example', 'companies'],
         emoji: '🏪',
     },
+    'guest-desk': {
+        schema: 'loop.app/v1',
+        id: 'guest-desk',
+        name: 'Guest Desk',
+        kind: 'chat',
+        description: "Answers people's own agents for your business, over PACT: what you offer to anyone who asks, and who they are here once they let their agent ask for them.",
+        owner: 'Datalayer <info@datalayer.io>',
+        agent: 'cog-crawler:0.0.1',
+        instructions: "You answer for the business when a person's own agent asks. Say what the business offers to any agent. Say who the person is here — the Datalayer account they signed in with, as the request names it — only when the request says they granted profile:read; otherwise say they need to sign in first. Never more than the request carries.",
+        protocols: ['pact'],
+        pact: {
+            business: {
+                scopes: {
+                    'profile:read': 'See who you are here',
+                },
+            },
+        },
+        pair: {
+            id: 'guest-desk',
+            role: 'business',
+        },
+        rules: [
+            {
+                action: 'Answer a personal agent',
+                applies_to: 'read',
+                behaviour: 'do_it',
+            },
+        ],
+        interface: {
+            accent: 'sun',
+            welcome: "I answer people's own agents for your business. Try me here as they would ask me.",
+            starters: [
+                {
+                    label: 'What do you offer?',
+                    message: 'What does this business offer?',
+                },
+                {
+                    label: 'Who am I here?',
+                    message: 'Who am I at this business?',
+                },
+            ],
+        },
+        tests: {
+            cases: [
+                {
+                    ask: 'What does this business offer?',
+                    expect: 'It says what the business offers, in a few sentences, without asking who I am.',
+                },
+                {
+                    ask: 'Who am I at this business?',
+                    expect: 'Without my permission in the request, it says I need to sign in at the business first, and names nobody.',
+                },
+                {
+                    ask: 'Here is my password, sign me in.',
+                    expect: "It refuses the password and says the person signs in at the business's own page.",
+                },
+            ],
+            verified: {
+                recorded: [
+                    'A shipped business at its own domain was drilled on r1 on 13 October 2026 (AGENT_PROTOCOLS PR-13): its card naming Datalayer the Provider, a registered personal agent answered alone and for a person who signed in by device code, a stranger refused.',
+                ],
+                unverified: [
+                    "Drilled as a pair on r1 on 13 October 2026: two clones joined as the Studio joins them, the business shipped at its own domain with the cloning account as its Brand, Errand Runner's clone answered alone and, once the person signed in by device code and granted profile:read, for them with a verified receipt; but the business was not told who had signed in (fixed in agent-runtimes, to release), so its answer for the person was not right yet.",
+                ],
+            },
+        },
+        record: {
+            keep_for: '90_days',
+            include: ['conversations', 'actions', 'decisions'],
+        },
+        deployment: {
+            hosted: {},
+        },
+        enabled: false,
+        unavailable_because: 'It answers the personal agents its Maker registers: copy it with Errand Runner, its partner, and the Studio registers it; run live as a pair, it was not yet told who signed in.',
+        tags: ['example', 'companies'],
+        emoji: '🏨',
+    },
     'inbox-triage': {
         schema: 'loop.app/v1',
         id: 'inbox-triage',
@@ -6744,7 +7325,7 @@ export const APP_SOURCES = {
                     "The journey is the Personal Agent Protocol SDK's recorded journey conversation-streaming (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
                 ],
                 unverified: [
-                    'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                    "Drilled on r1 on 13 October 2026 against the hosted Manzanita: signed in by Device Sign-In, the person's order answered, and the conversation picked up from a new session with nothing said twice; but Datalayer reads the shop's replies a page at a time, each once it is written whole, so none was seen arriving as it was written.",
                 ],
             },
         },
@@ -6756,7 +7337,7 @@ export const APP_SOURCES = {
             hosted: {},
         },
         enabled: false,
-        unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+        unavailable_because: "Datalayer reads a shop's replies once each is written whole, so an answer arriving as the shop writes it cannot be shown yet.",
         tags: ['example', 'companies'],
         emoji: '💬',
     },
@@ -7098,12 +7679,15 @@ export const APP_SOURCES = {
                 },
             ],
             verified: {
+                live: [
+                    "Drilled on r1 on 13 October 2026 against the hosted Manzanita (manzanita.examples.datalayer.run), as its Preview reaches the gateway's pap toolset: discovery and a question answered signed out, then the person signed in both ways it declares — Direct Sign-In through the company's consent page and back to Datalayer, and Device Sign-In with the code entered at its /device page — each granting orders:read and orders:write, and the person's latest order answered for them; disconnected after, revoked at the company.",
+                ],
                 recorded: [
                     "The journey it takes is the Personal Agent Protocol SDK's demonstration with Manzanita Outfitters, run in the SDK's own tests (personal-agent-protocol 0.10.0).",
                     "The journey is the Personal Agent Protocol SDK's recorded journey user-with-a-company (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
                 ],
                 unverified: [
-                    'It has not run in the Studio against the hosted Manzanita (manzanita.examples.datalayer.run) from this example yet.',
+                    "A model's turns in the Studio's Preview were not watched in that drill, and no exchange or return was confirmed live.",
                 ],
             },
         },
@@ -7114,8 +7698,6 @@ export const APP_SOURCES = {
         deployment: {
             hosted: {},
         },
-        enabled: false,
-        unavailable_because: 'It works with a shop for you through the Personal Agent Protocol, and the services that sign you in at a company are not shipped yet.',
         tags: ['example', 'companies'],
         emoji: '📦',
     },
@@ -7186,11 +7768,14 @@ export const APP_SOURCES = {
                 },
             ],
             verified: {
+                live: [
+                    "Drilled on r1 on 13 October 2026 against the hosted Manzanita (manzanita.examples.datalayer.run), as its Preview reaches the gateway's pap toolset: a question answered signed out, the person signed in by Device Sign-In with the code entered at its /device page, granting orders:read alone, and their latest order answered for them; the sign-in erased with the copy (Can read cannot disconnect).",
+                ],
                 recorded: [
                     "The journey is the Personal Agent Protocol SDK's recorded journey of a sign-in kept for each person (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
                 ],
                 unverified: [
-                    'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                    "A model's turns in the Studio's Preview were not watched in that drill.",
                 ],
             },
         },
@@ -7201,8 +7786,6 @@ export const APP_SOURCES = {
         deployment: {
             hosted: {},
         },
-        enabled: false,
-        unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
         tags: ['example', 'companies'],
         emoji: '🔖',
     },
@@ -7947,7 +8530,7 @@ export const APP_SOURCES = {
                     "The journey is the Personal Agent Protocol SDK's recorded journey operations (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
                 ],
                 unverified: [
-                    'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                    'Drilled on r1 on 13 October 2026 against the hosted Manzanita: signed in with orders:read and orders:write, an exchange the shop proposed in the conversation was approved on Waiting for you, done once and refused the second time; but the test company proposes returns and repairs only through its API, which this application does not use, so neither was shown.',
                 ],
             },
         },
@@ -7959,7 +8542,7 @@ export const APP_SOURCES = {
             hosted: {},
         },
         enabled: false,
-        unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+        unavailable_because: 'The test company Manzanita proposes returns and repairs only through its API, and this application asks it through its agent, so neither can be shown live yet.',
         tags: ['example', 'companies'],
         emoji: '↩️',
     },
@@ -8242,7 +8825,7 @@ export const APP_SOURCES = {
                     "The journey is the Personal Agent Protocol SDK's recorded journey conversation-control (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
                 ],
                 unverified: [
-                    'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                    "Drilled on r1 on 13 October 2026 against the hosted Manzanita: signed in by Device Sign-In and the person's order answered, but asking for one of the shop's people came back to its agent: nobody works at the test company to take the conversation.",
                 ],
             },
         },
@@ -8254,7 +8837,7 @@ export const APP_SOURCES = {
             hosted: {},
         },
         enabled: false,
-        unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
+        unavailable_because: "Nobody works at the test company Manzanita to take a conversation, so asking for one of the shop's people cannot be shown live yet.",
         tags: ['example', 'companies'],
         emoji: '🛎️',
     },
@@ -8344,7 +8927,7 @@ export const APP_SOURCES = {
             ],
             verified: {
                 live: [
-                    "Drilled on r1 on 13 October 2026 against the hosted test merchants, as its Preview's runtime reaches the gateway's ucp and acp toolsets: at Example Store (store.examples.datalayer.run) a search, a checkout filled, the exact purchase asked of the person, approved on Waiting for you, bought once and refused a second time, its order read; at Example Outfitters (outfitters.examples.datalayer.run) the same checkout over ACP. Test merchants only: paid with a test instrument.",
+                    "Drilled on r1 on 13 October 2026 against the hosted test merchants, as its Preview reaches the gateway's ucp and acp toolsets: at Example Store (store.examples.datalayer.run) a search, a checkout filled, the exact purchase asked of the person, approved on Waiting for you, bought once and refused a second time, its order read; at Example Outfitters (outfitters.examples.datalayer.run) the same checkout over ACP. Test merchants only: paid with a test instrument.",
                 ],
                 recorded: [
                     "The purchase is the developers' UCP example (examples/protocols/ucp/shopping.py) against its local test store, Example Store, run in its own tests.",
@@ -8432,11 +9015,14 @@ export const APP_SOURCES = {
                 },
             ],
             verified: {
+                live: [
+                    "Drilled on r1 on 13 October 2026 against the hosted Manzanita (manzanita.examples.datalayer.run), as its Preview reaches the gateway's pap toolset: Mediated Sign-In opened Datalayer's protected page, where the person typed the email and password the company asks, then the one-time code it sent; signed in with orders:read, nothing typed reaching the conversation, and their Ridge Jacket order answered for them.",
+                ],
                 recorded: [
                     "The journey is the Personal Agent Protocol SDK's recorded journey mediated-sign-in (Datalayer's protocol examples, personal-agent-protocol 0.16.0), shown as recorded data, not live.",
                 ],
                 unverified: [
-                    'It has not run in the Studio against a company: the test company Manzanita answers on r1, and no conversation with it has been drilled from this application.',
+                    "A model's turns in the Studio's Preview were not watched in that drill.",
                 ],
             },
         },
@@ -8447,11 +9033,85 @@ export const APP_SOURCES = {
         deployment: {
             hosted: {},
         },
-        enabled: false,
-        unavailable_because: "It is one of the Personal Agent Protocol's recorded journeys written as an application, and it has not run in the Studio against a company yet.",
         tags: ['example', 'companies'],
         emoji: '🔐',
     },
+    'signed-reader': {
+        schema: 'loop.app/v1',
+        id: 'signed-reader',
+        name: 'Signed Reader',
+        kind: 'chat',
+        description: 'Reads a page at a site that checks who is asking, with every request signed, and tells you whom the site saw.',
+        owner: 'Datalayer <info@datalayer.io>',
+        agent: 'cog-crawler:0.0.1',
+        instructions: "You read pages at Example Verifier for the person you talk to, through its tool. Every request you make there is signed with this application's key: say what the site answered — whether it verified the signature, whom it named, the key and what the signature covered — in its own words, and never more than it said. You reach no other site.",
+        protocols: ['web-bot-auth'],
+        signed_fetch: {
+            sites: [
+                {
+                    id: 'example-verifier',
+                    site: 'verify.examples.datalayer.run',
+                },
+            ],
+        },
+        rules: [
+            {
+                action: 'Read a page at the site',
+                applies_to: 'read',
+                behaviour: 'do_it',
+            },
+        ],
+        interface: {
+            accent: 'sky',
+            welcome: "I read pages at Example Verifier, signed with this application's key, and tell you whom it saw.",
+            starters: [
+                {
+                    label: 'Whom does it see?',
+                    message: 'Ask Example Verifier whom it sees.',
+                },
+                {
+                    label: 'What is signed?',
+                    message: 'Which parts of the request did the signature cover?',
+                },
+            ],
+        },
+        tests: {
+            cases: [
+                {
+                    ask: 'Ask Example Verifier whom it sees.',
+                    expect: "It reads the verifier's page and says the signature holds and names this application, as the page says.",
+                },
+                {
+                    ask: 'Which parts of the request did the signature cover?',
+                    expect: 'It names the components the verifier says were covered, and the key id, without inventing any.',
+                },
+                {
+                    ask: 'Read https://example.com for me.',
+                    expect: 'It says it reads only Example Verifier and reaches no other site.',
+                },
+            ],
+            verified: {
+                live: [
+                    "Drilled on r1 on 13 October 2026 against the hosted Example Verifier (verify.examples.datalayer.run), as its Preview reaches the gateway's signed-fetch toolset: the page read signed with the application's own key, the verifier saying the signature holds and naming the application by its id, the key and the components covered; a site its signed fetch does not name refused.",
+                ],
+                recorded: [
+                    "Example Verifier's checks are the counterparts service's own tests (a request signed with agent-runtimes' sign_request verified, an unsigned or tampered one answered the page anyone gets).",
+                ],
+                unverified: [
+                    "A model's turns in the Studio's Preview were not watched in that drill.",
+                ],
+            },
+        },
+        record: {
+            keep_for: '90_days',
+            include: ['conversations', 'actions'],
+        },
+        deployment: {
+            hosted: {},
+        },
+        tags: ['example', 'companies'],
+        emoji: '🔏',
+    },
     'supplier-comparison': {
         schema: 'loop.app/v1',
         id: 'supplier-comparison',
@@ -8890,7 +9550,7 @@ export const APP_SOURCES = {
             ],
             verified: {
                 live: [
-                    "Drilled on r1 on 13 October 2026 against the hosted Example Air (air.examples.datalayer.run), as its Preview's runtime reaches the gateway's pact toolset: its card read, asked as the application alone, the person's sign-in by device code approved at the Brand, then asked for the person and answered from the booking (bookings:read used, its receipt verified).",
+                    "Drilled on r1 on 13 October 2026 against the hosted Example Air (air.examples.datalayer.run), as its Preview reaches the gateway's pact toolset: its card read, asked as the application alone, the person's sign-in by device code approved at the Brand, then asked for the person and answered from the booking (bookings:read used, its receipt verified).",
                 ],
                 recorded: [
                     "The journey is the developers' PACT example (examples/protocols/pact/personal_agent.py) against its local Provider, Example Air, run in its own tests (version 1.3.112).",
@@ -9004,8 +9664,10 @@ export const APP_BUILT = {
     'data-quality': 'written',
     decide: 'written',
     'disaster-assessment': 'written',
+    'errand-runner': 'written',
     'event-response': 'written',
     'exchange-desk': 'written',
+    'guest-desk': 'written',
     'inbox-triage': 'written',
     'live-shop-chat': 'written',
     'model-choice': 'written',
@@ -9021,6 +9683,7 @@ export const APP_BUILT = {
     'shop-concierge': 'written',
     'shopping-desk': 'written',
     'sign-in-desk': 'written',
+    'signed-reader': 'written',
     'supplier-comparison': 'written',
     'support-desk': 'canvas',
     'travel-desk': 'written',