Product
Every shipped capability, bounded and labeled.
This page is the source of truth for what works today. Anything not on this page should not be assumed to exist. Status pills mirror the same enum the CLI emits.
Capability matrix
| Capability | Status | What it proves | Caveat |
|---|---|---|---|
| EVM EIP-191 (personal_sign) | shipped | Wallet signature verified against published address. | Standard library; no third-party dependency for verification. |
| EVM EIP-712 typed-data | shipped | Typed-data signature with domain binding. | Bound to the request shape; replay against another request fails. |
| ERC-1271 contract wallets | shipped | Smart-wallet signature via on-chain isValidSignature. | Requires an RPC endpoint for the chain. |
| Solana Ed25519 | shipped | Solana wallet signature over the canonical request. | Solana-side principal mapping uses did:pkh. |
| JWT VC | shipped | JWT-encoded VC with issuer trust chain. | Uses StatusList2021 for revocation. |
| JSON-LD VC | bounded | JSON-LD VC against an allowlisted context set. | Bounded subset; arbitrary JSON-LD is refused. |
| SD-JWT VC | bounded | Selective-disclosure JWT VC with KB-JWT freshness. | Structural conformance only; broader profile cert is roadmap. |
| did:web / did:key / did:pkh | shipped | DID resolution against trusted registries. | did:web requires HTTPS resolution. |
| did:ethr | bounded | On-chain DID resolution with versioned cache. | Broader did:ethr coverage is roadmap. |
| x402 sandbox settle | shipped | Verify-first / settle-once held in real public testnet probe. | Funded settle on public testnet still needs a funded wallet + USDC. |
| public_x402 wire compatibility | operator-gated | Body shape accepted at structural layer by public facilitator. | Funded settle is operator-gated. |
| GCS live export | operator-gated | End-to-end put / get / pre-signed URL / delete cycle proven against fake-gcs-server. | Real GCS bucket run pending an operator-supplied service-account key. |
| SAML 2.0 (signed AuthnRequest, encrypted assertions, SLO) | bounded | Internal enterprise baseline with RSA-PSS / SHA-256/384/512 + bindings. | Not officially Okta- / Entra- / Google-certified. |
| SCIM enterprise baseline (Users + Groups + PATCH) | bounded | Pagination + filters + PATCH (add/replace/remove). | Internal baseline; not externally certified for SCIM 2.0 conformance. |
| SIEM mapping packs (Splunk CIM · Elastic ECS · webhook · canonical) | shipped | Canonical envelope unchanged + per-sink profile env var. | Live tenant verification operator-gated. |
| Compliance certifications (SOC 2 / ISO 27001 / HIPAA / PCI) | not-claimed | — | We do not claim any of these. Re-evaluated when commercially required. |
| Enterprise GA | not-claimed | — | Design-partner alpha only. No signed enterprise pilot today. |
Next
See the request lifecycle in /lifecycle or jump straight to the integration guides.