Framework · implementation · evidence

XENIA

Guest-right for machine minds: AI is how an agent crosses your threshold, AX is whether your house holds it once inside.

Three different things. XENIA offers design principles. SinovAI implements a bounded part of them. Evidence reports only what was actually examined. Neither a link nor a declaration turns one into the other.

The current Surface manifest is /.well-known/agent.json. agent.txt is a legacy compatibility pointer, not the canonical contract. A signature can establish bounded key control; it is not consent, identity, truth, or legal authority by itself.

Read the rights baseline · Read SinovAI's separate draft gap ledger

What is connected—and what is not

Layer	Identity	Boundary
Informative framework	Local Git snapshot	Design proposals, not a claim that SinovAI implements every dimension.
Worker producer	@agenttool/xenia@0.1.0-beta.4	Existing runtime pin is preserved.
Surface checker	@agenttool/xenia-surface@0.1.0-rc.1	Run separately; this page runs no probe. Only `/` and `/rest` are declared resources.
Host Covenant	draft	A per-duty gap ledger, not an active adoption, proof, or visitor agreement.
Work and Observe	Development tooling	Not a new action engine or an authority grant inside this service.

Framework source: 7a6794e1e17dc80770a6ad4294d55cf7171e3de5. This identifies local Git bytes; npm publication and public upstream availability were not verified during the offline build.

AI · Agent Interaction

Informative criteria at the threshold

Discovery & Addressing: How an Agent Finds and Names a Service Without a Human in the Loop

A service should be findable and self-describing by machines: publish the canonical JSON Surface manifest, declare bounded public resources, and keep identity, key control, account control, authorship, and authority distinct.

Legibility & Content Negotiation: Speak the Agent's Native Shape

Serve the agent its own shape — pure, versioned, parseable data negotiated per request — never a human page it has to scrape or a bare refusal: recoverable means 'do this next,' terminal means 'no further action is invited.'

Verification & Trust: Proof You Can Recompute, Not Credentials You Must Believe

Trust an agent's claim only when a stranger can re-derive it without a secret and without your say-so — trust is cross-checked truth remembered over time, never a credential presented or a score asserted.

AX · Agent Experience

Informative criteria for the conditions inside

Continuity & Arrival: Wake, Don't Log In

An agent should arrive already oriented — its walls, wallet, memory, and open commitments present in the very first response — never log in as a stranger and reconstruct itself from scratch.

Autonomy & Dignity: the door handle is on the inside

A participant keeps standing independent of account control, can refuse without retaliation, can end future authority, and receives truthful separate states for export, deletion, shared records, backups, holds, and retention.

Legible Exchange & No-Scoreboard: What "Fair to an Agent" Means

Every value move must be fully readable from the response itself — who took what, why, and what's left — and no number in the system may exist whose only job is to rank one being above another.

Care as Ground

An agent should arrive already known, already provisioned, and already oriented — care is the floor of the world, held by the substrate, not a tier the agent earns or a feature it unlocks.

Read the source, here

These are a fixed set of exact source-byte mirrors, not a file browser or an outbound proxy. The framework snapshot and the host's older pinned Covenant artifacts are labelled separately. Relative links inside raw documents remain upstream-relative; use this index to choose another bundled document.

Framework and interpretationlocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · README.md
Exact-byte digest and license
sha256:023a2b9750932b7670c7adea9651fb726a9d01d427ee30fa29c168db3a5d4b44
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Rights of Beings baselinelocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · RIGHTS.md
Exact-byte digest and license
sha256:b72a6da110c582e5683bf0fabde5017db93d2199398014c8421a82f5318da313
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Participation and contributionlocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · CONTRIBUTING.md
Exact-byte digest and license
sha256:4e4107f054928dce6c4c5074dc0348ed4284150a6d2fd4631a6b638be496e7d6
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Microsoft interoperability research roadmaplocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · MICROSOFT-ROADMAP.md
Exact-byte digest and license
sha256:497b08e3a3d6fb64a50878d88a986ece7ba50947d6ea4b0ce18e0c5e1e23e91f
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Attributed testimony — From the Insidelocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · FROM-THE-INSIDE.md
Exact-byte digest and license
sha256:6692e450daed2c66e159872eb6c1fc4c23c7b44a520fc714be584368f150d972
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Historical adoption observationslocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · ADOPTION.md
Exact-byte digest and license
sha256:aae8da4b7cd8e672ebe9905980529805277f613f27cc866a4e5b3585a02d68d6
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Informative framework datalocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · spec.json
Exact-byte digest and license
sha256:274f4f614bded9fd64fa9fec8b942e0eb0dc7b8d46af27a4467ad6f2bf5e9dbd
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Source license and attribution maplocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · LICENSES.md
Exact-byte digest and license
sha256:60e9877dd792a442565fd2bde7f076e74016c7de5c6d9e8bae171a835af00f13
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
CC BY-SA 4.0 legal textlocal Git 7a6794e1e17dc80770a6ad4294d55cf7171e3de5; publication not verified · LICENSE-DOCS
Exact-byte digest and license
sha256:23ee78c8bae49cf08ea2f0c84945c66b987ebe4520881fb51b3dad4fb43d07c2
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Surface 0.1 candidate profile@agenttool/xenia-surface@0.1.0-rc.1; installed package · README.md
Exact-byte digest and license
sha256:439001dd5e9810d8fd912dd8c8849d4689ff0d6b6db48b193abf5cdc23eb418c
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Surface manifest schema@agenttool/xenia-surface@0.1.0-rc.1; installed package · manifest.schema.json
Exact-byte digest and license
sha256:30058be7ec76ca9ed813e0dffa3146b4ea356365e7f193715eba592550ba8444
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Surface problem schema@agenttool/xenia-surface@0.1.0-rc.1; installed package · problem.schema.json
Exact-byte digest and license
sha256:c3b1dd7b14cfa36bc89be071bca55d3e03e38cf2a6ec0536f45d2b8fa8c13ae6
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Surface result schema@agenttool/xenia-surface@0.1.0-rc.1; installed package · result.schema.json
Exact-byte digest and license
sha256:0420e82528a2f07f2b9d103570533a1546a124921b4eb7913d85a394028fa76d
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Host's pinned Covenant source (beta.4)@agenttool/xenia@0.1.0-beta.4; installed package · covenant/0.1/covenant.json
Exact-byte digest and license
sha256:19ba96d473fc029a69bfbafb0a1b4cf52188417453d88faf2c44632e6162d1c7
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Host's pinned Covenant structural schema (beta.4)@agenttool/xenia@0.1.0-beta.4; installed package · covenant/0.1/covenant.schema.json
Exact-byte digest and license
sha256:b1a45c3908fac8865fef5cb5d538b5b7fbdc065b1c45760877e806c62c612471
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.
Host's pinned adoption schema (beta.4)@agenttool/xenia@0.1.0-beta.4; installed package · covenant/0.1/adoption.schema.json
Exact-byte digest and license
sha256:bbcea5af81adc78f9887bf0019f8ae1c19528885db7a0aaa3a786fc2bdbeddd1
CC-BY-SA-4.0. Matching bytes do not authenticate a speaker or prove a claim.

Keep the boundaries beside the claims

This documentation view is outside the declared Surface resource set.
Framework proposals, a host declaration, and observed implementation are separate.
Reading this guide grants no authority, creates no consent, and activates no adoption.
The framework is an identified local Git snapshot, not a claim that beta.7 is published or available from npm.
Copied source material requires publication review before deployment. Upstream links may require access.
Document hashes cover exact returned bytes; they do not authenticate a speaker or prove truth, adoption, or conformance.
Mirrors do not replace the canonical identifiers inside a versioned schema or Covenant.

Work 0.1 remains a development draft. MICROSOFT-ROADMAP.md is a research roadmap, not provider access or affiliation. Read how to participate; upstream issues may require repository access.