{"ok":true,"data":{"capabilities":[{"capability_key":"ACCESS_DECISION_SERVICE","state":"LIVE","summary":"Single primary access gate for entitled access.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"RECEIPTS_AUDIT_GRADE","state":"LIVE","summary":"14-kind append-only audit-grade receipt chain.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"DELIVERIES_FIRST_CLASS","state":"LIVE","summary":"First-class delivery artifact per entitled access event.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"OUTPUT_RIGHTS_SNAPSHOT","state":"LIVE","summary":"Per-listing declarative output-rights with frozen-at-checkout snapshot.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"ENTERPRISE_ACCOUNTS","state":"PREVIEW","summary":"Enterprise umbrella accounts, workspaces, seats, and admins are PREVIEW. Operator-onboarded only.","live_gate_flag":null,"expected_slice_id":"P6-ARCI-3"},{"capability_key":"PROVIDER_TERMS_REGISTRY","state":"PREVIEW","summary":"Operator-onboarded premium provider terms registry. No live transport at this slice.","live_gate_flag":null,"expected_slice_id":"P6-ARCI-3"},{"capability_key":"EXTERNAL_SSO_LIVE","state":"PLANNED","summary":"External SSO transport (Okta / Azure AD / Google Workspace / generic OIDC) is PLANNED. No live integration today.","live_gate_flag":null,"expected_slice_id":"P7-2"},{"capability_key":"EXTERNAL_SCIM_LIVE","state":"PLANNED","summary":"External SCIM provisioning is PLANNED. No live integration today.","live_gate_flag":null,"expected_slice_id":"P7-2"},{"capability_key":"PUBLICATION_TRUST_PIPELINE_V0","state":"LIVE","summary":"Deterministic publication trust pipeline runs automatically when a listing enters review and produces a public_status plus seller_next_action. Eligible candidates publish through the canonical publication gate; listings with missing or fixable items receive a seller fix list; listings the pipeline could not verify are reviewed manually before publication.","live_gate_flag":null,"expected_slice_id":"P7-4.14"},{"capability_key":"PUBLICATION_LLM_TRIAGE_V0","state":"PREVIEW","summary":"Bounded LLM-driven triage findings use a fake adapter in v0. Live providers are operator-gated and not active.","live_gate_flag":"PUBLICATION_LLM_TRIAGE_ENABLED","expected_slice_id":"P7-4.18"},{"capability_key":"SELLER_ASSIST_JOBS_V0","state":"PREVIEW","summary":"Seller-approved assist jobs can produce safe patches. Live billing is not active.","live_gate_flag":"ASSIST_JOB_LIVE_CHARGE_ENABLED","expected_slice_id":"P7-4.19"},{"capability_key":"PUBLICATION_AUTO_APPROVE_LOW_RISK","state":"LIVE","summary":"Auto-publication is live for eligible listings: deterministic publication checks run automatically on submission and eligible candidates publish through the canonical publication gate. Manual review is retained for escalations.","live_gate_flag":null,"expected_slice_id":"P7-10"},{"capability_key":"AGENT_PUBLICATION_READINESS_API_V0","state":"PREVIEW","summary":"Read-only agent endpoint for publication readiness. Agent-initiated mutation endpoints are PLANNED.","live_gate_flag":null,"expected_slice_id":"P7-4.14"},{"capability_key":"QUERY_LICENSING_V0","state":"LIVE","summary":"Query Licensing v0 with STUB_VERIFIER and bounded answer hashing.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"LIVE_VERIFIER_LLM","state":"LIVE","summary":"Live LLM-backed query-license verifier. POST /v1/query/ask dispatches to the live verifier when the operator flag is enabled; the stub verifier remains a runtime fallback. Receipts carry the required verification sentence verbatim; the verifier does not certify semantic truth.","live_gate_flag":"FEATURE_LIVE_VERIFIER","expected_slice_id":"P7-9"},{"capability_key":"SPLICE_ROW","state":"LIVE","summary":"ROW_SPLICE — row-level rights-aware sub-product carve-out.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_JURISDICTION","state":"LIVE","summary":"JURISDICTION_SPLICE — geo-scoped sub-product carve-out.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_ANSWER_CONTEXT","state":"LIVE","summary":"ANSWER_CONTEXT_SPLICE — answer-context derived sub-product.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_FIELD","state":"RESERVED","summary":"FIELD_SPLICE — column-level carve-out. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_SECTION","state":"RESERVED","summary":"SECTION_SPLICE — section-level carve-out. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_VISUAL","state":"RESERVED","summary":"VISUAL_SPLICE — visual / extracted-element carve-out. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_PROVIDER_CURATED","state":"RESERVED","summary":"PROVIDER_CURATED_SPLICE — provider-curated bundle. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_CROSS_PACKET","state":"RESERVED","summary":"CROSS_PACKET_SPLICE — multi-parent carve-out. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_TIME_WINDOW","state":"RESERVED","summary":"TIME_WINDOW_SPLICE — time-window scoped carve-out. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_WORKFLOW","state":"RESERVED","summary":"WORKFLOW_SPLICE — workflow-scoped carve-out. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"SPLICE_EPHEMERAL_AGENT","state":"RESERVED","summary":"EPHEMERAL_AGENT_SPLICE — single-agent ephemeral carve-out. RESERVED.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"AGENT_PRINCIPAL_IDENTITY","state":"PREVIEW","summary":"Agent principal identity with credential vault. PREVIEW; MCP transport is live separately (see MCP_TRANSPORT_LIVE).","live_gate_flag":null,"expected_slice_id":"P6-ARCI-3"},{"capability_key":"AGENT_ACCESS_MANIFEST","state":"PREVIEW","summary":"Per-agent access manifest substrate. PREVIEW; HUMAN_APPROVAL_REQUIRED default.","live_gate_flag":null,"expected_slice_id":"P6-ARCI-3"},{"capability_key":"MCP_TRANSPORT_LIVE","state":"LIVE","summary":"Live MCP server transport for agent integrations. GET /v1/mcp/server-info and POST /v1/mcp/messages (JSON-RPC 2.0). Authenticated agents using a buyer-organization credential or a scoped grnt_agent_* credential can discover listings, read agent commerce manifests, inspect capability state, and run preflight quotes. Stateless v0; mutating commerce operations route through the canonical /v1/agents/* HTTP path.","live_gate_flag":"FEATURE_P6_ARCI_MCP_LIVE","expected_slice_id":"P7-9"},{"capability_key":"AUTONOMOUS_AGENT_CHECKOUT","state":"PLANNED","summary":"Autonomous agent checkout under delegated buyer-organization credentials is PLANNED. HUMAN_APPROVAL_REQUIRED today.","live_gate_flag":null,"expected_slice_id":"P7-3"},{"capability_key":"SOURCE_WEIGHTED_PAYOUTS_ACCRUED","state":"PREVIEW","summary":"Source-weighted payout accrual (SOURCE_AUTHOR / RECIPE_AUTHOR / PACKET_BUILDER role kinds) — ACCRUED only at this slice.","live_gate_flag":null,"expected_slice_id":"P6-ARCI-3"},{"capability_key":"SOURCE_WEIGHTED_PAYOUTS_LIVE","state":"PREVIEW","summary":"ACCRUED→PAID transition for source-weighted payouts (SOURCE_AUTHOR / RECIPE_AUTHOR / PACKET_BUILDER) is staging-proven via the fake provider. Admin queue is at /admin/payouts/source-weighted; recipient history is at /v1/me/payouts. Real-money production proof is operator-dispatched and gated; the capability flips to LIVE after the first production transfer succeeds.","live_gate_flag":null,"expected_slice_id":"P7-12"},{"capability_key":"PROOF_HASH_ONLY","state":"LIVE","summary":"HASH_ONLY proof kind for receipts.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"PROOF_HASH_TRACE","state":"PLANNED","summary":"HASH_TRACE proof bundles. Reserved for the bounded-verifier slice.","live_gate_flag":null,"expected_slice_id":"P6-ARCI-3"},{"capability_key":"PROOF_TRACEABLE_TRANSCRIPT","state":"RESERVED","summary":"TRACEABLE_TRANSCRIPT proof bundles. RESERVED; depends on signed-transcript substrate.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"PAY_PER_CRAWL","state":"PLANNED","summary":"AI-crawler-priced access via Cloudflare Pay-Per-Crawl. PLANNED; activation lives in the Cloudflare dashboard, not in repo code.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"ACCOUNTLESS_PAID_ACCESS","state":"PLANNED","summary":"Listing-scoped paid access without a buyer-org account. PLANNED. Foundational doctrine: no unmanaged paid purchase.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"VISUAL_EXTRACTION_TAFFY","state":"PLANNED","summary":"Taffy visual extraction — PLANNED, not live.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"REFINERY_AUTOMATED_V1","state":"PLANNED","summary":"Automated refinery v1 — PLANNED per Phase P9 doctrine; not live.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"ZK_PROOF_CLAIMS","state":"RESERVED","summary":"Zero-knowledge proof claims — RESERVED; no implementation.","live_gate_flag":null,"expected_slice_id":null},{"capability_key":"STARTER_SUPPLY_MARKETPLACE","state":"LIVE","summary":"Starter AI/workflow packet categories, collection pages, Studio helper copy, and agent-readable listing filters are available for reviewed listings. Publication remains review-gated; empty collections may appear until supply is approved.","live_gate_flag":null,"expected_slice_id":"P7-1"},{"capability_key":"VERIFIED_PROVIDER_TIER","state":"LIVE","summary":"Graunt-reviewed provider tiers, provider profiles, listing badges, and provider-term visibility are available for marketplace listings. Provider tiers reflect Graunt review state and do not imply external identity verification unless separately stated with evidence.","live_gate_flag":null,"expected_slice_id":"P7-2"},{"capability_key":"MARKETPLACE_DISCOVERY_CANONICAL","state":"LIVE","summary":"Canonical marketplace routes (/explore, /sell, /api-agents, /trust), preserved compatibility 301 redirects from legacy routes (/catalog, /sellers, /agents, /trust-and-safety), aligned agent-readable discovery metadata (OpenAPI route examples + /llms.txt + JSON-LD canonical URL fields), and refreshed nav/footer canonical links. Older public URLs continue to resolve via tested compatibility redirects.","live_gate_flag":null,"expected_slice_id":"P7-3"},{"capability_key":"REFINERY_VALIDATOR_V0","state":"LIVE","summary":"Deterministic refinery packet validator v0 (P9-1) is callable at POST /v1/refinery/validate. Validates packet manifests against the universal-packet-contract §12 envelope (Presence + Validation + Coherence). No LLM, no external network. Emits DRAFT, PUBLISH_BLOCKED, PASSED_WITH_NOTES, or PASSED.","live_gate_flag":null,"expected_slice_id":"P7-4"},{"capability_key":"REFINERY_CANDIDATE_INTAKE","state":"LIVE","summary":"Authenticated seller-or-both organizations can submit private refinery candidates via POST /v1/refinery/candidates and import validator-passing packets via POST /v1/refinery/import (bypassing the refinery-imposed price floor per D-198 via the typed refinery_imports record). Candidates are stored under a restricted S3 prefix (graunt-internal/refinery/) and NEVER appear in /v1/listings, search, /llms.txt, OpenAPI, or any agent surface. Cross-org GET returns 404 (D-191 §3.4 existence-leak guard).","live_gate_flag":null,"expected_slice_id":"P7-4"},{"capability_key":"REFINERY_COMPILER_FOUNDATION","state":"LIVE","summary":"Sellers can register private source artifacts (POST /v1/refinery/artifacts), run private deterministic compiler jobs over them (POST /v1/refinery/jobs) with a recorded step trace, and read the public source-type support matrix (GET /v1/refinery/policies/public-support-matrix). Artifacts and jobs are organization-scoped and never appear in /v1/listings, search, /llms.txt, OpenAPI public discovery, or any agent surface; cross-org GET returns 404 (D-191 section 3.4 existence-leak guard). The job trace demonstrates a two-role pipeline (a maker step that generates and a checker step that reviews and corrects), and every provider step records which provider and model performed it for display. A provider matrix registers deterministic + fake providers ENABLED, with the external model providers (OpenAI, Anthropic, xAI) registered for the maker, checker, and listing-suggestion roles but CONFIGURED_NOT_ACTIVE: each carries only an SSM credential-store reference and no stored value, and an admin-editable per-provider prompt template (no value at v0). The compiler runs a deterministic path; external model calls are governed by a separate activation gate.","live_gate_flag":null,"expected_slice_id":"P7-4"},{"capability_key":"REFINERY_LIVE_MODEL_CALLS","state":"LIVE","summary":"Triple-gated runner for live LLM provider calls (an operator env flag + enabled DB provider status + a resolvable credential + a per-call kill switch + a per-call cost cap). Wired into deterministic job step persistence so every refinery model call flows through the triple gate. Refinery Budget isolation preserved.","live_gate_flag":"REFINERY_LIVE_MODEL_CALLS_ENABLED","expected_slice_id":"P7-9"},{"capability_key":"REFINERY_BUDGET_POST_PAID","state":"RESERVED","summary":"Per-org Refinery Budget with per-job + per-period cents caps and a Stripe-saved payment method (SetupIntent flow). Post-paid PaymentIntent OFF_SESSION on Graunt's own Stripe account (NEVER through Stripe Connect, NEVER through payout_splits, NEVER mutating purchases.commercial_terms). Idempotent on (budget_id, cost_event_id). Code path ships; the LIVE flip is operator-gated.","live_gate_flag":null,"expected_slice_id":"P7-4.11"},{"capability_key":"AGENT_META_REQUIREMENT_GROUPS","state":"LIVE","summary":"Public read-only discovery of the composable packet requirement groups (SAFE-only projection) at GET /v1/meta/requirement-groups. Registry-derived; no DB; PROTECTED/internal requirement fields are never exposed.","live_gate_flag":null,"expected_slice_id":"P7-4.7"},{"capability_key":"AGENT_META_CONTENT_PROFILES","state":"LIVE","summary":"Public read-only discovery of registered content profiles (the validator-passable packet kinds, families, and required requirement groups) at GET /v1/meta/content-profiles. Registry/canon-derived; no DB.","live_gate_flag":null,"expected_slice_id":"P7-4.7"},{"capability_key":"AGENT_META_CONSTITUTION","state":"LIVE","summary":"Public read-only discovery of the ratified Packet Constitution version (constitution_version) at GET /v1/meta/constitution. Canon-derived; no DB.","live_gate_flag":null,"expected_slice_id":"P7-4.7"},{"capability_key":"AGENT_META_REFINERY_POLICY","state":"LIVE","summary":"Public read-only disclosure of the Refinery access posture (launch free seed, micro-free threshold, content-integrity profiles, model-assist posture, and the reserved/not-active charging state) at GET /v1/meta/refinery-policy. Config-driven (single active policy row); SAFE projection only — no abuse thresholds, provider internals, or per-account usage. Live paid Refinery processing is not active.","live_gate_flag":null,"expected_slice_id":"P7-4.8"},{"capability_key":"AGENT_META_REFINERY_SUPPORT_MATRIX","state":"LIVE","summary":"Public read-only thin re-export of the canonical Refinery support matrix at GET /v1/meta/refinery-support-matrix. Same body as GET /v1/refinery/policies/public-support-matrix; surfaced under /v1/meta/ so agents discover the matrix alongside the other agent-readable meta endpoints. Registry-derived; deterministic; no DB.","live_gate_flag":null,"expected_slice_id":"P7-8"},{"capability_key":"AGENT_COMMERCE_MANIFEST","state":"LIVE","summary":"Public per-listing strict-Zod machine-readable view of an ACTIVE listing's commerce surface at GET /v1/listings/{id}/agent-commerce-manifest. Returns rights snapshot, eligible SKUs, payment channels with truthful capability_status (STRIPE_PAYMENT_INTENT LIVE; BASE_X402_USDC RESERVED for the x402 corridor), agent capability endpoints with per-credential rate limits, discovery_signals, publication metadata summary, freshness, refund policy summary (final-except-fraud per D-265), and terms/manifest/constitution versions. No internal/PROTECTED fields, no Stripe ids, no presigned URLs. cache-control: public, max-age=60. 404 on cross-org / non-ACTIVE / non-existent listing.","live_gate_flag":null,"expected_slice_id":"P7-8"},{"capability_key":"TIERED_DISCOVERY_V1","state":"LIVE","summary":"Deterministic four-stage tier-filter classifier (Stage 1 hard rights / Stage 2 capability match / Stage 3 source quality / Stage 4 textual relevance). Stage 1-3 are hard WHERE-predicate filters (D-162 anti-multiplier preserved); only Stage 4 ranks (existing ts_rank_cd * title_coef). Surfaced via three new hard filters on GET /v1/listings (rights_compatible_with, agent_capability_match, source_quality_min) and per-result discovery_signals block. GET /v1/meta/search-contract returns schema_version 3 with tier_filter_groups (each is_multiplier: false) + agent_commerce_manifest_endpoint + discovery_signals_schema_version 'P7-8-v1'.","live_gate_flag":null,"expected_slice_id":"P7-8"},{"capability_key":"AGENT_BUY_API_V0","state":"PREVIEW","summary":"Agent BUY v0 REST substrate (POST /v1/agents/purchases/preflight, POST /v1/agents/purchases/execute). Scoped bearer token (grnt_agent_*) issued from /v1/agents/credentials. Reuses the canonical human purchase code path so financial math (gross = platform_fee + seller_net) is byte-equivalent. Autonomous verified-agent principal is RESERVED. MCP transport for agent BUY is PLANNED. Per-credential rate limit (30/min) + daily spend cap ($1000) + human-confirmation policy above the daily cap.","live_gate_flag":null,"expected_slice_id":"P7-4.12"},{"capability_key":"AGENT_SELL_API_V0","state":"PREVIEW","summary":"Agent SELL v0 REST substrate (POST /v1/agents/listings/preflight, POST /v1/agents/listings/submit). Reuses the canonical createListing flow; result enters the standard pending-review state and admin approval continues through the canonical marketplace publish gate (HR-28 preserved). Per-credential rate limit (10/min).","live_gate_flag":null,"expected_slice_id":"P7-4.12"},{"capability_key":"REFINERY_BUDGET_REFUNDS_V0","state":"LIVE","summary":"Refinery Budget refund / dispute automation v0. The metadata.charge_kind=\"refinery_budget\" branch of the existing refund.* + charge.dispute.* webhook handlers updates refinery_budget_charges only (HR-29 isolation invariant). Marketplace purchase rows, payout_splits, commercial_terms, transfer_data, and application_fee_amount are NEVER mutated by this path.","live_gate_flag":null,"expected_slice_id":"P7-4.12"},{"capability_key":"MULTI_PROVIDER_ACTIVATION_SUBSTRATE","state":"LIVE","summary":"Multi-provider activation substrate is shipped. /v1/meta/refinery-policy reports per-provider activation status (CONFIGURED_NOT_ACTIVE / ENABLED) for anthropic, openai, xai. Per-provider LIVE flip (POST /v1/admin/refinery/providers/:id/enable) is an operator activation step requiring SSM credential population + an ECS env flip.","live_gate_flag":null,"expected_slice_id":"P7-4.12"},{"capability_key":"RECONCILE_AUTHORITY_PRODUCTION_GATE","state":"LIVE","summary":"Production entitlement reconciliation authority gate. In NODE_ENV=production, POST /v1/admin/purchases/:id/reconcile-entitlement with dry_run=false REQUIRES X-Reconcile-Authority (HMAC-signed) header. Local HMAC issuer at scripts/operator/issue-reconcile-token.mjs; raw token is NEVER logged; SHA-256 token hash IS recorded in the audit payload.","live_gate_flag":null,"expected_slice_id":"P7-4.12"},{"capability_key":"STRIPE_RECONSTRUCTION_CANDIDATES_READ","state":"LIVE","summary":"Admin read-only Stripe reconstruction-candidates discovery at GET /v1/admin/stripe/reconstruction-candidates. Surfaces Stripe objects (payment_intent / charge / refund / dispute) without a matching local row in purchases OR refinery_budget_charges. Read-only: NEVER calls completePurchase, NEVER mutates entitlements / receipts / payout_splits / accounting_events. Response carries only redacted Stripe id prefixes (pi_*** / ch_*** / re_*** / dp_***) + bounded presence booleans + closed-enum suggested_action.","live_gate_flag":null,"expected_slice_id":"P7-4.12"},{"capability_key":"CONTROLLED_SPLICE_BUNDLES_V0","state":"LIVE","summary":"Controlled splice bundles deliver only the source files required to support the selected result, plus the relevant markdown and JSON sidecars. Caller must hold an ACTIVE FULL entitlement bound to the listing's packet bundle revision. Preflight runs deterministically before the build is enqueued. Generated archives are TTL'd; manifest, sidecar manifest, and source originals remain canonical.","live_gate_flag":null,"expected_slice_id":"P7-4.13"},{"capability_key":"SUBSCRIPTION_WORKING_SETS_V0","state":"LIVE","summary":"Bounded subscription working sets (32 files / 256 MiB / 7-day default TTL) pinned to an active entitlement and optionally to an organization_subscription. Revocation of the bound subscription revokes the working set. Source originals are untouched; only the working-set row + generated archive are affected.","live_gate_flag":null,"expected_slice_id":"P7-4.13"},{"capability_key":"AGENT_PACKET_ASSEMBLY_V0","state":"PREVIEW","summary":"Agent packet-bundle assembly substrate (POST/GET/DELETE /v1/agents/packet-bundles/assembly-sessions[/...]). Requires the `bundle:assemble` agent scope. Reuses the canonical packet upload and finalize services; agent-assembled bundles are byte-equivalent (manifest_sha256 + sidecar_manifest_sha256) to human-assembled bundles. NEVER publishes a listing; subsequent listing creation goes through the canonical admin publication review.","live_gate_flag":null,"expected_slice_id":"P7-4.13"},{"capability_key":"SOURCE_CONTEXT_RECEIPTS_V0","state":"LIVE","summary":"Source-context review and source-enrichment receipts are informational, append-only, and never a publish gate. Deterministic + Fake adapters only at v0; live LLM / web enrichment paths are gated by a separate decision and the refinery triple gate.","live_gate_flag":null,"expected_slice_id":"P7-4.13"},{"capability_key":"PRICED_ANSWER_ONLY_QUERY_COMMERCE","state":"RESERVED","summary":"Priced answer-only query commerce is reserved. Query-license verification today produces a deterministic source/citation binding receipt only; no semantic-truth, legal-rights, or model-quality claim is made.","live_gate_flag":null,"expected_slice_id":"P8"},{"capability_key":"GRAUNT_WORKSPACE_RUNTIME","state":"RESERVED","summary":"Graunt Workspace runtime is reserved. The Smart Delivery panel surfaces an 'Open in Graunt Workspace' affordance with a RESERVED chip; no workspace runtime is live.","live_gate_flag":null,"expected_slice_id":"P8"},{"capability_key":"ACCESS_PASS_DELEGATED","state":"LIVE","summary":"Scoped Access Passes are live. Buyers can create a read-only revocable pass (7-day, 30-day default, 90-day, or no-expiry with lazy revocation after 180 days unused) on /orders/:id or /library at one of three scopes — Single packet, Selected packets, or Whole library — and paste it into ChatGPT, Claude, Gemini, or Grok. The pass is rate-limited, audited, revocable (including bearer self-revoke), and exposes content-direct endpoints /v1/access-passes/resources/{id}/content (inline ≤ 1 MiB) and /records (rows). The packet bundle delivery route /v1/entitlements/{id}/packet-bundle remains the path for presigned full-asset downloads. Key access is the default usage path; the portable LLM-ready export pack (/v1/entitlements/{id}/llm-ready-pack) and the original source archive (/v1/entitlements/{id}/source-archive) are the secondary download paths. Submit access passes via Authorization: Bearer gap_live_* header or POST body, or use the read-only /p/ pass link for assistants that fetch URLs.","live_gate_flag":"FEATURE_ACCESS_PASSES_ENABLED","expected_slice_id":"P7-12"},{"capability_key":"REFUND_DISPUTE_TAKEDOWN_WORKFLOW_V0","state":"LIVE","summary":"Strict final-sale enforcement with narrow reversal review. Buyers may report a purchase issue under three qualifying grounds (rights failure, fraud, technical delivery failure); admin review records APPROVE / DENY / REOPEN; REVERSED receipts + companion payout-allocation receipt write on APPROVE; takedown intake + admin execution flips listing status to SUSPENDED. Stripe refund-execution remains operator-gated.","live_gate_flag":null,"expected_slice_id":"P7-11"},{"capability_key":"MARKETPLACE_REFUND_AUTOMATION","state":"PLANNED","summary":"Automated marketplace refund processing remains planned. Refund execution today is admin-reviewed and operator-gated; the FEATURE_REFUND_AUTHORITY_LIVE flag must be explicitly enabled by an operator before any Stripe refund call is permitted.","live_gate_flag":"FEATURE_REFUND_AUTHORITY_LIVE","expected_slice_id":"P7-11"},{"capability_key":"LIVE_REFRESHED_ACCESS_FOUNDATION","state":"PREVIEW","summary":"Live/refreshed feed access exists as schemas, contracts, and a fixture-backed machine-only feed runtime. Provider-backed live feeds are not configured.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"MACHINE_ONLY_FEED_FIXTURE","state":"PREVIEW","summary":"A fixture-backed machine-only observation feed is callable for entitled, authenticated principals. Machine observations only; no raw media or stream is included.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"SCRUBBED_VIDEO_STREAM","state":"RESERVED","summary":"Scrubbed video stream access is reserved. No scrubbed-media provider is configured; the raw stream is never included.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"RAW_VIDEO_STREAM","state":"RESERVED","summary":"Raw video stream access is reserved. No video provider is configured; raw stream access is not available.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"RAW_AUDIO_STREAM","state":"RESERVED","summary":"Raw audio stream access is reserved. No audio provider is configured; raw stream access is not available.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"POOLING_STANDARD","state":"PREVIEW","summary":"Pool manifest, member registry, and per-member rights/privacy/freshness contracts exist. Pool subscriptions and revenue distribution are not live.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"ACCOUNT_SNAPSHOT_CONTRACTS","state":"RESERVED","summary":"Brokerage and crypto account-snapshot contracts are reserved. No account provider is configured; this is not account access, advice, or copy trading.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"BROKERAGE_CONNECTOR","state":"RESERVED","summary":"Brokerage account connector is reserved. No brokerage provider is configured.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"CRYPTO_CONNECTOR","state":"RESERVED","summary":"Crypto account/wallet connector is reserved. No crypto provider is configured.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"CV_REDACTION_PROVIDER","state":"RESERVED","summary":"Computer-vision redaction provider is not configured. Redaction status is declared-only; no media is processed by a provider.","live_gate_flag":null,"expected_slice_id":"P7-17"},{"capability_key":"AGENT_DISCOVERY_KEYS","state":"LIVE","summary":"Agent discovery keys are live: a visitor generates a key on the homepage or /prepare with no account, their agent sends it as Authorization: Bearer gdk_live_* on public discovery reads (listing search, listing detail, listing manifest, meta endpoints) for a tracked identity, and a registered organization can claim the key later. The key also authorizes the anonymous packet-draft surface (/v1/anonymous-drafts — create, upload, validate, attest, submit; drafts stay private to the key). It cannot purchase, cannot access entitled content, and is rejected outside the discovery and anonymous-draft routes. Claiming binds identity, not permissions — and drafts prepared with the key move to the claiming account.","live_gate_flag":"FEATURE_AGENT_DISCOVERY_KEYS","expected_slice_id":null}],"count":81}}