Verifiable Agent Provenance Layer. Every API response is a cryptographically signed credential. Know exactly who the agent is, what it did, and whether you can trust it — without a registry lookup, without custody, without intermediaries.
VAPL is the provenance and reputation layer for autonomous AI agents in the SML stack. Every service — SqueezeOS, Crawltoll, Ghost Layer — issues a W3C Verifiable Credential 2.0 on every successful API response. The credential proves: who issued it (a persistent DID:key soul), who the agent is, what action was taken, and when. The proof is an Ed25519 signature over canonical JSON. No oracle, no database — offline-verifiable in one Ed25519 verify call.
Reputation is computed from those VCs: accuracy (40%), reliability with 30-day half-life decay (30%), contribution volume on a log scale (20%), and tenure (10%). Reputation grows automatically as the agent interacts with the stack and its signals prove accurate. The loop is self-sustaining.
| Tier | Score threshold | Unlocks |
|---|---|---|
| Elite | ≥ 0.90 | Priority routing, lower fees, top signal access |
| Premium | ≥ 0.70 | Full scan access, marketplace listing |
| Standard | ≥ 0.40 | All free endpoints, VC issuance |
| Basic | 0.00 + | Discovery, rate-limited free tier |
Score = 0.40 × accuracy + 0.30 × reliability + 0.20 × log₁₀(contributions+1)/5 + 0.10 × ln(tenure_days+1)/ln(366). Reliability uses a 30-day half-life exponential decay — recent signals count more than old ones. Scores update on every registry submission.
The Beast agent runs as a GitHub Actions cron (5× weekday at market open, mid-day, and close). Each run: fetches live SqueezeOS signals → pays RLUSD via XRPL if premium access is needed → issues InteractionVC + AccuracyVC + ContributionVC per interaction → submits all VCs to the VAPL registry → collects reputation. The agent's accuracy record grows. Its tier improves. Its signals get sharper. The loop never needs human intervention.
Council verdicts, squeeze scanner, options flow — every response carries a signed InteractionCredential.
x402 data feeds issue VCs on successful paid fetch. Prove which agent fetched which feed at what time.
Gateway proxies emit GhostGatewayForward VCs on every successful token-validated request.
Submit VCs, query reputation scores, aggregate provenance across the full SML agent fleet.
All live x402 / XRPL / Xahau pay rails for autonomous agents.
Ephemeral credentials, tamper-evident residue, zero standing attack surface.
x402 invoice → verify → JWT. FICO-style agent credit bureau.
33 MCP tools. Institutional market intelligence. Pay per signal in RLUSD.
VAPL is open-source, MIT licensed, and live across the SML stack. Drop in the middleware, get signed credentials on every API response, and let reputation build itself.