# Full Unabridged Specification: Creduent Open Protocol v2.0.0

## 1. Protocol Architecture
Creduent Open Protocol defines an open application-layer standard for cryptographic identity attestation, Ed25519 steward signatures, zero-trust DNS-bound identity verification, and action reversibility rules for autonomous AI agents and multi-agent systems.

## 2. Cryptographic Verification & JCS Canonicalization
All agent manifest attestations are canonicalized according to RFC 8785 (JSON Canonicalization Scheme) prior to signing with Ed25519 private keys. The resulting base64-encoded signature is attached as `manifest.steward_sig`.

## 3. DNS-Bound Identity Verification
Agent domain ownership is validated via DNS TXT records. The registry queries `_creduent.{domain}` or `_creduent_recovery.{domain}` to verify matching public keys before issuing attestation certificates.

## 4. Action Reversibility Classification Matrix
- `read_only`: Execute immediately without manual confirmation.
- `soft_write`: Execute with local state transaction log.
- `external_reversible`: Execute with external compensating transaction handler.
- `irreversible`: Interrupt execution loop until Ed25519 steward approval signature is received.

## 5. Web Resources & Specification
- Official Site: https://idevsec.com/creduent
- Registry: https://creduent.idevsec.com
- Corporate Steward: https://idevsec.com
- Founder: Kashish Kanojia (CyberFascinate)