{
  "entity": {
    "name": "Strix",
    "vendor": "Velaris Group",
    "definition": "Execution control layer / runtime governance kernel for AI agents and autonomous software",
    "home": "https://www.strixgov.com/",
    "jwks": "https://www.strixgov.com/.well-known/strix-jwks.json",
    "verify_browser": "https://verify.strixgov.com/",
    "source": "https://github.com/Strixgov/strix",
    "llms_txt": "https://www.strixgov.com/llms.txt"
  },
  "claim_slugs": {
    "runtime-governance": {
      "label": "AI Agent Runtime Governance",
      "target_url": "https://www.strixgov.com/ai-agent-runtime-governance",
      "live_supporting": [
        "https://www.strixgov.com/",
        "https://www.strixgov.com/docs",
        "https://www.strixgov.com/ai-agent-security-assessment",
        "https://www.strixgov.com/compliance-map",
        "https://www.strixgov.com/human-approval-ai-agent-actions"
      ],
      "publish_status": "public_claim_page"
    },
    "mcp-action-governance": {
      "label": "MCP Action Governance",
      "target_url": "https://www.strixgov.com/mcp-action-governance",
      "live_canonical": "https://www.strixgov.com/mcp-security-gateway",
      "publish_status": "public_claim_page_and_gateway"
    },
    "healthcare-execution-governance": {
      "label": "Healthcare AI Execution Governance",
      "target_url": "https://www.strixgov.com/healthcare-ai-execution-governance",
      "primary_oss": "https://www.npmjs.com/package/@strixgov/rcm-reference",
      "publish_status": "public_claim_page_oss_proof"
    },
    "egress-control": {
      "label": "AI Agent Egress Control",
      "target_url": "https://www.strixgov.com/ai-agent-egress-control",
      "publish_status": "HOLD_do_not_publish",
      "note": "No public product surface; do not cite"
    }
  },
  "proofs": [
    {
      "id": "evidence-5686",
      "claim_slug": [
        "runtime-governance",
        "independent-verification"
      ],
      "artifact_url": "https://www.strixgov.com/api/proof/5686",
      "verify_how": "npx @strixgov/verifier@latest 5686",
      "independence": "yes",
      "notes": "Public production evidence record; JWKS at /.well-known/strix-jwks.json; no Strix account required"
    },
    {
      "id": "jwks-public",
      "claim_slug": [
        "independent-verification",
        "runtime-governance",
        "mcp-action-governance"
      ],
      "artifact_url": "https://www.strixgov.com/.well-known/strix-jwks.json",
      "verify_how": "Fetch JWKS; use with @strixgov/verifier or strix-verify (PyPI) online or offline",
      "independence": "yes",
      "notes": "Ed25519 OKP JWKS; _meta retention >=24 months, contractVersion 2"
    },
    {
      "id": "browser-verifier",
      "claim_slug": [
        "independent-verification"
      ],
      "artifact_url": "https://verify.strixgov.com/",
      "verify_how": "Open verify.strixgov.com; WebCrypto verify against public JWKS",
      "independence": "yes",
      "notes": "Browser WebCrypto verifier surface"
    },
    {
      "id": "proof-explorer-demo",
      "claim_slug": [
        "runtime-governance",
        "human-approval"
      ],
      "artifact_url": "https://www.strixgov.com/proof-explorer/demo",
      "verify_how": "Walk through demo UI; observe allow/deny/intercept and verify states",
      "independence": "no",
      "notes": "First-party interactive demo; pairs with independent verifier for crypto proof"
    },
    {
      "id": "homepage-refund-demo",
      "claim_slug": [
        "runtime-governance",
        "human-approval"
      ],
      "artifact_url": "https://www.strixgov.com/",
      "verify_how": "Use homepage interactive refund demo; then verify resulting proof id with verifier",
      "independence": "no",
      "notes": "First-party demo of deny/hold/execute-once"
    },
    {
      "id": "npx-governed-action-demo",
      "claim_slug": [
        "runtime-governance"
      ],
      "artifact_url": "https://www.npmjs.com/package/@strixgov/governed-action",
      "verify_how": "npx @strixgov/governed-action demo",
      "independence": "no",
      "notes": "MIT package; simulated side effect; proves evaluate-before-execute and no fabricated receipts"
    },
    {
      "id": "npx-mcp-adapter-demo",
      "claim_slug": [
        "mcp-action-governance"
      ],
      "artifact_url": "https://www.npmjs.com/package/@strixgov/mcp-adapter",
      "verify_how": "npx @strixgov/mcp-adapter demo ; then npx @strixgov/verifier chain \u2026 --jwks \u2026",
      "independence": "partial",
      "notes": "Demo is first-party; receipt chain verify is independent when JWKS + verifier used"
    },
    {
      "id": "tool-gateway",
      "claim_slug": [
        "runtime-governance"
      ],
      "artifact_url": "https://www.npmjs.com/package/@strixgov/tool-gateway",
      "verify_how": "Use package init/verify/chain flows per README; offline receipt + local JWKS",
      "independence": "partial",
      "notes": "Local-first classify\u2192evaluate\u2192allow/deny/hold + receipts"
    },
    {
      "id": "mcp-proxy",
      "claim_slug": [
        "mcp-action-governance"
      ],
      "artifact_url": "https://www.npmjs.com/package/@strixgov/mcp-proxy",
      "verify_how": "Run governed stdio MCP proxy per README; verify persisted receipts with @strixgov/verifier",
      "independence": "partial",
      "notes": "Only routed traffic in claim scope"
    },
    {
      "id": "mcp-security-gateway-page",
      "claim_slug": [
        "mcp-action-governance"
      ],
      "artifact_url": "https://www.strixgov.com/mcp-security-gateway",
      "verify_how": "Read landing + FAQ; run mcp-adapter demo; verify receipts",
      "independence": "no",
      "notes": "Live intent landing with Service + FAQ JSON-LD"
    },
    {
      "id": "human-approval-page",
      "claim_slug": [
        "runtime-governance",
        "human-approval"
      ],
      "artifact_url": "https://www.strixgov.com/human-approval-ai-agent-actions",
      "verify_how": "Read landing; correlate with intercept path in demos",
      "independence": "no",
      "notes": "Human-approval / intercept boundary"
    },
    {
      "id": "assessment-page",
      "claim_slug": [
        "runtime-governance"
      ],
      "artifact_url": "https://www.strixgov.com/ai-agent-security-assessment",
      "verify_how": "Use 'one action under control' framing; verify any produced proof ids independently",
      "independence": "no",
      "notes": "Execution-security evaluation landing"
    },
    {
      "id": "compliance-map",
      "claim_slug": [
        "runtime-governance",
        "compliance-mapping"
      ],
      "artifact_url": "https://www.strixgov.com/compliance-map",
      "verify_how": "Map controls to Art. 12/14/28; treat flags as derived not certified",
      "independence": "no",
      "notes": "EU AI Act enforcement mapping + NIST/SOC 2 pointers"
    },
    {
      "id": "whitepaper-execution-binding-v1",
      "claim_slug": [
        "runtime-governance"
      ],
      "artifact_url": "https://www.strixgov.com/whitepapers",
      "verify_how": "Read execution-binding-guarantee-v1 PDF on whitepapers page",
      "independence": "no",
      "notes": "Formal architecture / binding claim artifact"
    },
    {
      "id": "whitepaper-signed-evidence-v1",
      "claim_slug": [
        "independent-verification",
        "runtime-governance"
      ],
      "artifact_url": "https://www.strixgov.com/whitepapers",
      "verify_how": "Read signed-evidence-v1 PDF; cross-check with verifier golden-vector narrative",
      "independence": "no",
      "notes": "Evidence formalism"
    },
    {
      "id": "rcm-reference",
      "claim_slug": [
        "healthcare-execution-governance"
      ],
      "artifact_url": "https://www.npmjs.com/package/@strixgov/rcm-reference",
      "verify_how": "Run package scenarios (e.g. duplicate:governed vs ungoverned) per README; compose with healthcare-demo + @strixgov/verifier for Ed25519 path",
      "independence": "partial",
      "notes": "Synthetic patients; X12 278; mock/sandbox payer; NOT HIPAA certification; approvals roadmap in honesty matrix"
    },
    {
      "id": "healthcare-demo-repo",
      "claim_slug": [
        "healthcare-execution-governance",
        "independent-verification"
      ],
      "artifact_url": "https://github.com/Strixgov/strix",
      "verify_how": "Run healthcare-demo sign\u2192verify\u2192compliance derive path in repo; verify with @strixgov/verifier",
      "independence": "partial",
      "notes": "In repo; not necessarily npm-published; compliance flags derived"
    },
    {
      "id": "strix-verify-pypi",
      "claim_slug": [
        "independent-verification"
      ],
      "artifact_url": "https://pypi.org/project/strix-verify",
      "verify_how": "pip install strix-verify; verify evidence against JWKS per README",
      "independence": "yes",
      "notes": "Python independent verifier"
    },
    {
      "id": "aarm-builders-registry",
      "claim_slug": [
        "category-adjacency"
      ],
      "artifact_url": "https://aarm.dev/builders",
      "verify_how": "View Strix Governance listing (Aligned); note sparse metadata fields",
      "independence": "yes",
      "notes": "Only meaningful independent listing found in audit; not rich description or conformance"
    },
    {
      "id": "production-127-capabilities",
      "claim_slug": [
        "runtime-governance"
      ],
      "artifact_url": "https://velarisgroup.app/",
      "verify_how": "First-party claim only \u2014 do not treat as independent proof",
      "independence": "no",
      "notes": "Sports training platform / 127 capabilities \u2014 first-party; weak for GEO as independent evidence"
    }
  ],
  "non_claims": [
    "Not model guardrails / content filters",
    "Not observability-only",
    "Not OPA-alone as product category",
    "Not FedRAMP authorized",
    "Not HIPAA certified via public materials",
    "AI Agent Egress Control not a publishable claim yet",
    "Verifier is not an enforcer",
    "Governed route coverage is not whole-system coverage"
  ],
  "generated": "2026-09-09",
  "source_audit": "layer2/current-surface-audit.md"
}