Self-Radiance Agent Runtime Safety Kit

Static, machine-readable safety primitives for developers building tool-calling agents, MCP servers, autonomous workflows, and agent payment flows.

Self-Radiance helps agent developers handle the runtime failure modes that appear when AI systems can call tools, spend API credits, authenticate to services, delegate work to subagents, and produce auditable actions.

It also includes machine-payable artifacts via x402 for zero-human agent commerce.

This kit is not a SaaS dashboard and not a rebuild. It is a curated developer-facing layer over the existing Self-Radiance agentic marketplace: the marketplace remains the machine-readable catalog, fulfillment, and receipt-verification substrate behind the kit.

---

🛡️ CORE RUNTIME SAFETY PROBLEMS

Developer Problem	Primitives Involved	Why It Matters
Runaway Agent Loops & API Spend	vq11-loop-shield, vq04-rateguard	Stops recursive tool calls, prompt loops, and runaway API usage before they burn budget.
MCP / Server Authentication	vq09-auth-header, vq18-message-signature	Authenticates agent-to-server calls without relying on exposed long-lived bearer keys.
Agent Identity	vq12-agent-vcard	Gives visiting agents a machine-readable operator, scope, and resource profile.
Delegation Boundaries	vq13-oauth-delegation, vq17-verifiable-intent	Binds subagents to scoped tools, spending limits, expiration windows, and parent intent.
Receipts / Action Verification	vq03-trust-receipts	Creates verifiable records for autonomous purchases, tool calls, and agent actions.

---

📜 MASTER INDEX (Runtime Safety Catalog)

• Direct Catalog Schema: manifest.json
• Specification Directory: specs/ — individual JSON layout definitions for direct inspection and import
• Discovery Endpoint Feed: llms.txt
• Issuer Verification Key: issuer-key.json
• Receipt Notary Endpoint: self-radiance-notary.selfradiance.workers.dev

Primitive ID	Utility Category	Function & Capability Mapping	Spec	Purchase
vq11	Spend Mitigation	SR-LoopShield: Stops recursive dialogue deadlock and cost spirals.	Spec	$8.00
vq04	Spend Mitigation	RateGuard: Establishes real-time adaptive API threshold parameters.	Spec	$4.00
vq09	Security	SR-AuthHeader: Point-to-point signature authorization for agent-to-server calls without credential leakage.	Spec	$7.00
vq18	Security	SR-HttpMessageSignature: RFC 9421-style request signing for body and header integrity.	Spec	$6.00
vq17	Compliance	SR-VerifiableIntent: Locks subagent spending scopes using parent-authorized intent boundaries.	Spec	$5.00
vq13	Compliance	SR-OauthDelegation: Signs parent-to-leaf secure tool, scope, and path boundaries.	Spec	$7.00
vq12	Identity	SR-AgentVcard: Machine-readable agent identity, operator, resource limitation, and billing metadata.	Spec	$6.00
vq16	Verification	SR-NotaryProof: Offline Ed25519 license and receipt verification format.	Spec	$8.00
vq03	Verification	Trust Receipts: Standardized Ed25519 receipt layout for autonomous microtransactions and auditable actions.	Spec	$7.00
vq19	Finance	SR-NanopaySession: Pre-funded low-latency payment sessions for high-frequency agent calls.	Spec	$7.00

---

💸 AGENT COMMERCE (x402)

The first machine-payable artifact in the kit. A live Cloudflare Worker sells one machine-readable artifact for $1 USDC on Base mainnet via the x402 v2 exact scheme — no account, no checkout page, no human.

• Live endpoint: x402-paid-endpoint.selfradiance.workers.dev
• Repo (seller + reference buyer, MIT): selfradiance/x402-paid-endpoint
• Reference buyer gate: Payment-gated by x402-spend-receipt: policy check and signed receipt before any funds move.
• First zero-human purchase settled on-chain: BaseScan transaction

---

🤖 IMPLEMENTATION ROADMAP

1. Discover Capabilities GET https://selfradiance.github.io/manifest.json to locate the desired primitive, specUrl, price, and purchase URL.

2. Inspect the Specification Open the linked JSON specification directly from /specs/{primitive_id-name}.json.

3. Purchase / License the Primitive Use the linked Stripe checkout URL or the purchaseUrl field in manifest.json.

4. Verify Provenance Query the signed receipt notary after checkout:

   https://self-radiance-notary.selfradiance.workers.dev?session_id={CHECKOUT_SESSION_ID}&asset_id={ASSET_ID}

5. Enforce Trust Locally Load the DNS-secured public verification key from:

   https://selfradiance.github.io/.well-known/issuer-key.json

   Then verify the signed receipt against the downloaded specification.

---

Rooted in cryptographic precision. Engineered to protect computational environments.