io.github.greencore-solutions/rco-a2a

repo:https://github.com/greencore-solutions/rco-a2a

Signed, deterministic compliance state per object per jurisdiction, resolved upstream.

transport:: remote
credential class:: self-provisionable
repo:: https://github.com/greencore-solutions/rco-a2a

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

get_record
Return any RCO by record_id, including superseded records - the audit trail, retained byte-identical.
shallow
list_issuers
Return the signed consortium issuer registry document, verbatim as published at consortium-10060.org/issuers.json.
shallow
list_rule_sets
List the versioned rule sets in force and formerly in force for a jurisdiction: id, version, hash, effective dates, artifact URL. Never the regulation text.
shallow
publish_record
Publish a signed Regulatory Compliance Object to the partner rail (rco-a2a-cpg.ai). The ONLY write path in the suite, and it accepts only what already verifies: the record must be schema-valid RCO v1.3, its issuer must be a cpg-rail issuer active in the signed consortium registry, its verification_url must equal that issuer's registry JWKS URL, its detached JWS must verify against that JWKS, and its record_id (and any supersession) must be consistent. GSC never authors a partner record and never holds a partner private key: GSC verifies, receipts to Azure Confidential Ledger, and serves. A submitted record is never modified. Idempotent: republishing a byte-identical record returns the same receipt. Typed errors only.
shallow
resolve_compliance
Return the current signed Regulatory Compliance Object for an object in a jurisdiction. Deterministic. Inside the resolved universe (SPEC v1.2 pairs.json + the jurisdiction doors' own objects) an unknown object returns a pre-resolved, signed CPG-404 record; outside it the typed error record_not_found is returned - nothing is signed at request time. Never narrative.
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/b9f6e6c5-ff41-4882-baa0-7591c3b11971/badge.svg)](https://vouch.tools/servers/b9f6e6c5-ff41-4882-baa0-7591c3b11971)