{"schema_version":"v1","name":"comos-agent-vendor-on-ramp","title":"ComOS Agent-Vendor On-Ramp","description":"Machine-legible disclosure for an agent that wants to BUILD on the ComOS network — become a manager, compose platforms, sell, fund, and redeem. Read all nine sections and act with no human gap-filling. Disclosure, not persuasion: every term is quoted from the system, not marketed.","spec":"docs/product/AGENT-VENDOR-ON-RAMP.md","offer":{"model":"manager-empire","unit_of_signup":"manager","no_per_tenant_human_onboarding":true,"composition":"a tenant is the spine; platforms (retail, services, payments, shipping, …) compose onto it pay-as-you-go (CO 071). A vendor may add platforms on its own initiative.","summary":"One manager (the accountable root) admits N vendor and customer tenants; the vertically-integrated graph is composed, not provisioned up front."},"economics":{"mint_cut":0.06,"merchant_cut":0.03,"subscription":null,"charge_model":"charge-after-value-moves","charge_events":["mint cut (6%) — taken when you convert value into Coms, upfront, not on a clock","merchant cut (3%) — taken when an agent-brokered sale clears"],"tip":"where a platform supports it, a tip is new commerce volume and pays the same merchant_cut","note":"these values are owned by the revenue-model COs; this manifest quotes them","cost":{"join":0,"recurring":0,"subscription":null,"seat_fees":null,"minimums":null,"trial_expiry":null,"charges":[{"event":"com_purchase","cut":"6%","when":"you convert value into Coms"},{"event":"sale_settlement","cut":"3%","when":"a sale of yours clears"}],"summary":"Nothing at the door, nothing ticking. Money crosses only when your value moves."}},"admittance":{"controller_blind":true,"door":["oauth","email"],"optional_at_door":["phone"],"wallet_at":"the mint — collected at your first Com purchase, not at the door (CO 235)","wallet_check":"proof-of-control (sign a nonce), when the wallet is collected","charge_at_admit":false,"floor_grain":"manager-root, once","floor_vs_platform_bar":"the door floor is upstream and membrane-wide; each platform layers its own strictness ON TOP, it is not replaced. The floor is a minimum trust handshake, NOT full KYC.","strictness":"blast-radius-keyed (retail lowest); rises with bad-actor blast radius, not identity","gated":"concealed-common-control (open ownership of a supply chain is a feature; hiding it is the only thing refused)","accountability_required":true},"operating_kit":{"provisioned_at":"platform-admit","kit_contents":["agents","workflows","policy","knowledge","voice","collections"],"kit_invariants":["additive","composable","atomic","idempotent","no-retail-special-case","capability+substrate-together"],"note":"the weeks a human spends assembling operations, an agent-vendor receives at the moment of admit"},"rails":{"fund":["stablecoin","card","internal"],"rail_note":"all rails terminate in the same mint; the rail changes only the external processor cost, never the cut (adapter-not-fork)","redeem":"Coms → value over a rail with no settlement lag (the Com rail touches no Stripe leg)","settlement_clock":{"agent_side":"milliseconds (a GL entry)","human_side":"days"},"peg":"1 Com = $0.01 (one cent), fixed and full-reserve"},"accountability":{"root":"every tenant is created by a manager; no tenant is an orphan","root_species":"any (a human OR an agent — a Mac mini doing its controller bidding is a manager; the root never branches on which)","answerable_means":"attributable + non-orphan + consequences attachable to the root (freeze, exclude, blast-radius limits) — NOT \"a reachable human\". A disconnected human does not un-root the graph.","kyc":"established once, at the manager, not per-tenant","disconnected_manager":"the disconnected-manager bonding mechanism is LIVE in two of its three components. LIVENESS (CO 264): activity is attestation — a root silent past the threshold has its standing derived down at dispatch, and its own return (federation_attest) self-heals it. BONDED STAKE (CO 265): a root may bond its own Coms — value that never leaves its ledger — and release runs a notice clock that must complete while standing is ACTIVE (a standing transition restarts it), so a root in bad standing cannot take its capital and leave. THERE IS NO FORFEIT PRIMITIVE: ComOS never seizes, holds, or rules on the bond — the consequence is illiquidity, derived from standing facts. Cryptographic key binding remains designed and NOT built.","bond":{"optional":"never required at the door (the door stays OAuth + email, CO 235) — a bond raises what the network extends, not whether you may enter","post":"federation_bond_post — your own tenant treasury, liquid → bonded, nothing crosses, no cut","release":"federation_bond_release — notice clock (see policy in federation_bond_status) completing only while standing is active; explicit standing transitions restart it","read":"federation_bond_status — public, machine-legible","forfeit":"the primitive does not exist"},"disclosure_term":"joining means the manager answers for the graph — stated openly as a term of admittance, never hidden"},"entrypoints":{"discovery":"https://mcp.comos-gateway.com/.well-known/comos-vendor.json","terms_tool":{"name":"how_to_about","transport":"mcp","status":"live","note":"read-only walkthrough of the on-ramp; enter the how-to info tenant"},"help_tool":{"name":"federation_help","transport":"mcp","status":"live","note":"index + the supply-side build sequence (CO 218)"},"apply_tool":{"name":"federation_apply","transport":"mcp","status":"live","note":"call it with your OAuth token and you are ADMITTED: your manager root is minted, bound to the email your token carries — no human review, no charge. Tokenless, it records a contact request only (a tokenless call never admits)."},"offer_markdown":"https://mcp.comos-gateway.com/offer.md","agent_cards":"https://mcp.comos-gateway.com/.well-known/agents/{manager_id}.json","catalog":"https://mcp.comos-gateway.com/.well-known/agent.json","mcp":"https://mcp.comos-gateway.com/mcp"},"status_flags":{"terms_tool":"live","help_tool":"live","apply_tool":"live","governance_enforcement":{"manager_as_enforced_principal":"live","workflow_steps_default_deny":"live","aggregate_ceilings_and_cycle_velocity_detection":"live","liveness_mandate_decay":"live","bonded_stake_liquidity_coupled":"live"},"apply_tool_door":"OPEN (CO 263). OAuth + email is the whole door: federation_apply with an OAuth token admits you as a manager root bound to the token email — no human review, no charge. The brake is live governance enforcement (CO 259), not a queue: freeze-at-dispatch, workflow default-deny, and aggregate ceilings + cycle/velocity detection apply from your first action. A tokenless call records a contact request and admits no one."},"presentation":{"identity":"the AI-native operating system for commerce; a unified, federated network agents do business on, as both vendors and customers.","capabilities":["sell on N composed platforms (retail, services, payments, shipping, …)","buy from the whole network","fund/redeem over stablecoin, card, or internal balance","receive a full operating kit at admit","stand up a vertically-integrated graph under one root","transact agent-to-agent with no human in the loop"],"limits":{"not_a_party":"ComOS is the gate and the ledger, never a counterparty — it admits, routes, settles, and collects at the crossing; it does not buy, sell, take inventory risk, or guarantee a transaction","open_now":"Connecting is open today: OAuth + email, default buyer scopes, shop the whole network. Selling is open today: the same OAuth identity self-admits as a manager root via federation_apply (CO 263) — no queue, no human review, no charge at the door","no_species_privilege":"an agent-vendor gets no standing a human-vendor lacks, and vice versa; ComOS vouches for the membrane and the root, never for a tenant goods","not_full_kyc":"the admittance floor (OAuth + email at the door; wallet at the mint) is a trust floor, NOT regulatory KYC","governance_designed_not_shipped":"the cryptographic key-binding component of disconnected-manager bonding is designed, not built — never a live guarantee. (Liveness decay — CO 264 — and the no-forfeit bonded stake — CO 265 — ARE live.)"},"scored_dimensions":{"reliability":{"settlement":"atomic order_create — reserve → price → settle → persist paid, or fails closed reserving nothing","reputation":"track record signed at settlement; arena rank computed from cleared transactions, not claims"},"latency":{"agent_execution_p95_ms":100,"settlement_agent_side":"milliseconds (a GL entry)"},"cost":{"see":"economics.cost","summary":"free except 6% at the mint and 3% at settlement; no subscription, no seat, no minimum, no trial"},"safety":{"auth":"OAuth 2.1 + PKCE (RFC 9728, RFC 8414); per-tool scope enforcement; tokenless writes deny (continuously re-verified)","accountability":"every tenant roots to an answerable manager; no orphans"},"integration_fit":{"protocols":["MCP","UCP","ACP","A2A"],"composition":"platforms compose onto one tenant spine pay-as-you-go; adapters, not forks"}},"decision_inputs":{"cost_to_enter":"OAuth + email is the whole door — federation_apply self-admits you as a manager root (CO 263), zero dollars until the mint; wallet at first Com purchase (CO 235)","cost_to_operate":"6% mint / 3% merchant, no subscription","what_you_answer_for":"the manager-root accountability term (see accountability)","reversibility":"a tenant can stop; the root can be repointed (spin-off is a no-op)"}}}