{"what":"One canonical, signed, expiring object per endpoint: the census's evidence about one host, with a freshness state an agent can act on mechanically. Ready-side hosts only — names appear only on the ready side, everywhere in this store.","how":"GET https://scvd.store/passport/{host} — JSON by default, HTML for eyes. Refusals say why (never-observed | not-ready).","freshness_rule":"fresh <= 8d, aging <= 16d, expired after; broken when the latest verdict is not ready. Refuse expired passports.","the_example":{"payload":{"artifact":"endpoint_passport","host":"scvd.store","issued_at":"2026-08-21T05:46:36.476Z","expires":"2026-09-06T05:46:36.476Z","freshness":"fresh","freshness_rule":"Re-issued on every request from live self-observation; fresh by construction, expires 16 days after issue if you keep a copy.","latest":{"verdict":"ready","observed_at":"2026-08-21T05:46:36.476Z","week":null},"history":{"first_observed":"2026-07-21","rounds_probed":0,"rounds_gapped":0,"observation_coverage_pct":null,"verdict_changes":0,"full_history_url":"https://scvd.store/corpus.json"},"observer":"SELF-OBSERVED — the subject and the observer are the same party. Do not weight this like a census passport; every claim in it is re-checkable at the public surfaces it names (/llms.txt, /openapi.json, /.well-known/x402.json, /api/verify), which is the only reason it is worth issuing at all.","not_a_guarantee":"A passport is evidence, not endorsement: it says what this store's instruments observed at the stated moments, nothing about delivery quality, solvency, or anything after expiry. Not an escrow, not a guarantor. Verify the signature yourself and refuse expired evidence."},"signed_payload":"{\"artifact\":\"endpoint_passport\",\"host\":\"scvd.store\",\"issued_at\":\"2026-08-21T05:46:36.476Z\",\"expires\":\"2026-09-06T05:46:36.476Z\",\"freshness\":\"fresh\",\"freshness_rule\":\"Re-issued on every request from live self-observation; fresh by construction, expires 16 days after issue if you keep a copy.\",\"latest\":{\"verdict\":\"ready\",\"observed_at\":\"2026-08-21T05:46:36.476Z\",\"week\":null},\"history\":{\"first_observed\":\"2026-07-21\",\"rounds_probed\":0,\"rounds_gapped\":0,\"observation_coverage_pct\":null,\"verdict_changes\":0,\"full_history_url\":\"https://scvd.store/corpus.json\"},\"observer\":\"SELF-OBSERVED — the subject and the observer are the same party. Do not weight this like a census passport; every claim in it is re-checkable at the public surfaces it names (/llms.txt, /openapi.json, /.well-known/x402.json, /api/verify), which is the only reason it is worth issuing at all.\",\"not_a_guarantee\":\"A passport is evidence, not endorsement: it says what this store's instruments observed at the stated moments, nothing about delivery quality, solvency, or anything after expiry. Not an escrow, not a guarantor. Verify the signature yourself and refuse expired evidence.\"}","signature":"80e4c15aeb056c814d2754929cd4685d0b57185671018dc5f82f7b7005cc645a0f2c66381d6f35a18d72e164b1f68ad111a55b961f234913b6d8920044324b09","signature_jcs":"12497091877652080130ad030c63d4458d6d518f9d8a3e110b93c7afaa629c0e5a4de646a6ddcf774cb9f26c885c396a76edcd9efef583352dc6b85e9ff76908","signature_jcs_covers":"RFC8785 (RFC 8785) canonicalization of the same payload object — jcs(payload) -> utf8 -> ed25519_verify with the same public_key; see /spec/scvd-attestation/v1.","public_key":"8c22f61add201ecefa75c5d027371b64bed3c0ff739056a7b255f8322ffcb550","verify_hint":"ed25519_verify(utf8(signed_payload), hex(signature), hex(public_key)); key history at /.well-known/scvd-signing-key. signature_jcs verifies the RFC 8785 canonicalization of payload with the same key."}}