{"tierOrder":["Evaluator","Analyst","Builder","Operator","Strategist"],"matrix":[{"tier":"Evaluator","nextTier":"Analyst","features":[{"id":"cert.verify","category":"Identity","label":"Verify a presented AgentCertificate","minTier":"Evaluator"},{"id":"dyad.read.self","category":"Trust","label":"Query Sovereignty + Integrity Dyad for own agent","minTier":"Evaluator"},{"id":"enforcement.classify","category":"Authorization","label":"Classify risk of a proposed action","minTier":"Evaluator"},{"id":"mcp.verify","category":"Attestation","label":"Verify an MCP server attestation","minTier":"Evaluator"},{"id":"provenance.verify","category":"Attestation","label":"Verify a presented provenance chain","minTier":"Evaluator"},{"id":"audit.read.own","category":"Audit","label":"Read your own agent audit chain","minTier":"Evaluator"},{"id":"audit.local.mode","category":"Audit","label":"Sovereign Local Mode (no-server SDK)","minTier":"Evaluator"},{"id":"otel.semconv.read","category":"Audit","label":"Read OTel governance semconv schema","minTier":"Evaluator"},{"id":"benchmark.governance","category":"Verification","label":"Run GovernanceBench against your deployment","minTier":"Evaluator"},{"id":"benchmark.vigil","category":"Verification","label":"Run VIGIL adversarial battery","minTier":"Evaluator"},{"id":"cli.verify","category":"Verification","label":"agentomy verify-cert / verify-provenance / verify-attestation","minTier":"Evaluator"},{"id":"skill.registry.read","category":"Skill","label":"Read SovereignSkillRegistry status + per-skill metadata","minTier":"Evaluator"},{"id":"benchmark.workflow","category":"Verification","label":"Run WorkflowBench against your workflow runtime","minTier":"Evaluator"},{"id":"audit.local.mode.validate","category":"Audit","label":"Validate a Sovereign Local Mode chain (read-side; independent of build)","minTier":"Evaluator"},{"id":"slack.read","category":"Operator","label":"Read Slack gateway status + channel list","minTier":"Evaluator"},{"id":"mcp.tool.authorize","category":"Attestation","label":"MCP tool: pre-action authorization check via agentomy_authorize","minTier":"Evaluator"},{"id":"mcp.tool.status","category":"Attestation","label":"MCP tool: fleet health status read via agentomy_status","minTier":"Evaluator"},{"id":"mcp.tool.prompt_verify","category":"Attestation","label":"MCP tool: prompt verification via agentomy_prompt_verify","minTier":"Evaluator"},{"id":"dashboard.discovery","category":"Dashboard","label":"Discovery view (Shadow AI ungoverned-agent inventory)","minTier":"Evaluator"}],"unlocksAtNext":[{"id":"cert.issue.self","category":"Identity","label":"Issue AgentCertificate for your own agent","minTier":"Analyst"},{"id":"enforcement.evaluate","category":"Authorization","label":"Full enforcement chain (classify + chain + compose)","minTier":"Analyst"},{"id":"siem.format","category":"Audit","label":"Format governance events for SIEM ingestion","minTier":"Analyst"},{"id":"secret.binding.format","category":"Secret","label":"Format secret-fetch requests for vault adapters","minTier":"Analyst"},{"id":"dashboard.fleet","category":"Dashboard","label":"Fleet view dashboard","minTier":"Analyst"},{"id":"dashboard.audit","category":"Dashboard","label":"Audit trail dashboard","minTier":"Analyst"},{"id":"dashboard.compliance","category":"Dashboard","label":"Compliance readiness view","minTier":"Analyst"},{"id":"dashboard.explainability","category":"Dashboard","label":"EU AI Act Article 13 explainability view","minTier":"Analyst"},{"id":"skill.verify","category":"Skill","label":"Verify a presented SignedSkillAttestation","minTier":"Analyst"},{"id":"ipi.adjudicate","category":"Authorization","label":"Adjudicate inbound trigger content via IngestSourceAdjudicator","minTier":"Analyst"},{"id":"dashboard.ipi-defense","category":"Dashboard","label":"IPI Defense view (inbound-trigger adjudication monitoring)","minTier":"Analyst"},{"id":"dashboard.trust-anomaly","category":"Dashboard","label":"Trust Anomaly view (live trust-anomaly-detector network metrics)","minTier":"Analyst"},{"id":"dashboard.workflow-governance","category":"Dashboard","label":"Workflow Governance view (per-workflow verdicts + audit-chain + isolation status)","minTier":"Analyst"},{"id":"enforcement.chain","category":"Authorization","label":"Compute enforcement chain for a classified risk level (independent of full evaluate)","minTier":"Analyst"},{"id":"enforcement.compose","category":"Authorization","label":"Compose intent from substrate signals (independent of full evaluate)","minTier":"Analyst"},{"id":"audit.local.mode.build","category":"Audit","label":"Build next entry in Sovereign Local Mode hash chain (SDK build-side)","minTier":"Analyst"},{"id":"ipi.classify","category":"Authorization","label":"Classify source trust without IPI adjudication (lower-stakes than full adjudicate)","minTier":"Analyst"},{"id":"mcp.tool.log","category":"Audit","label":"MCP tool: audit-trail emission via agentomy_log","minTier":"Analyst"},{"id":"mcp.tool.drift_score","category":"Verification","label":"MCP tool: behavioral drift detection via agentomy_drift_score","minTier":"Analyst"},{"id":"mcp.tool.exposure_profile","category":"Verification","label":"MCP tool: shadow AI exposure profile via agentomy_exposure_profile","minTier":"Analyst"},{"id":"dashboard.security","category":"Dashboard","label":"Security Status view (active threats, recent halts, anomaly alerts)","minTier":"Analyst"},{"id":"dashboard.desktop","category":"Dashboard","label":"Desktop Daemon view (per-machine agentomy-edge instances)","minTier":"Analyst"},{"id":"dashboard.chat","category":"Dashboard","label":"Governed Chat view (every message scored inline)","minTier":"Analyst"},{"id":"dashboard.threats","category":"Dashboard","label":"Live Threat Watch view (OSINT-detected governance threats)","minTier":"Analyst"},{"id":"dashboard.threat-intel","category":"Dashboard","label":"Threat Intelligence view (cross-agent threat-intel graph; operators see the fleet-wide aggregate)","minTier":"Analyst"}]},{"tier":"Analyst","nextTier":"Builder","features":[{"id":"cert.issue.self","category":"Identity","label":"Issue AgentCertificate for your own agent","minTier":"Analyst"},{"id":"cert.verify","category":"Identity","label":"Verify a presented AgentCertificate","minTier":"Evaluator"},{"id":"dyad.read.self","category":"Trust","label":"Query Sovereignty + Integrity Dyad for own agent","minTier":"Evaluator"},{"id":"enforcement.classify","category":"Authorization","label":"Classify risk of a proposed action","minTier":"Evaluator"},{"id":"enforcement.evaluate","category":"Authorization","label":"Full enforcement chain (classify + chain + compose)","minTier":"Analyst"},{"id":"mcp.verify","category":"Attestation","label":"Verify an MCP server attestation","minTier":"Evaluator"},{"id":"provenance.verify","category":"Attestation","label":"Verify a presented provenance chain","minTier":"Evaluator"},{"id":"audit.read.own","category":"Audit","label":"Read your own agent audit chain","minTier":"Evaluator"},{"id":"audit.local.mode","category":"Audit","label":"Sovereign Local Mode (no-server SDK)","minTier":"Evaluator"},{"id":"siem.format","category":"Audit","label":"Format governance events for SIEM ingestion","minTier":"Analyst"},{"id":"otel.semconv.read","category":"Audit","label":"Read OTel governance semconv schema","minTier":"Evaluator"},{"id":"secret.binding.format","category":"Secret","label":"Format secret-fetch requests for vault adapters","minTier":"Analyst"},{"id":"dashboard.fleet","category":"Dashboard","label":"Fleet view dashboard","minTier":"Analyst"},{"id":"dashboard.audit","category":"Dashboard","label":"Audit trail dashboard","minTier":"Analyst"},{"id":"dashboard.compliance","category":"Dashboard","label":"Compliance readiness view","minTier":"Analyst"},{"id":"dashboard.explainability","category":"Dashboard","label":"EU AI Act Article 13 explainability view","minTier":"Analyst"},{"id":"benchmark.governance","category":"Verification","label":"Run GovernanceBench against your deployment","minTier":"Evaluator"},{"id":"benchmark.vigil","category":"Verification","label":"Run VIGIL adversarial battery","minTier":"Evaluator"},{"id":"cli.verify","category":"Verification","label":"agentomy verify-cert / verify-provenance / verify-attestation","minTier":"Evaluator"},{"id":"skill.registry.read","category":"Skill","label":"Read SovereignSkillRegistry status + per-skill metadata","minTier":"Evaluator"},{"id":"skill.verify","category":"Skill","label":"Verify a presented SignedSkillAttestation","minTier":"Analyst"},{"id":"benchmark.workflow","category":"Verification","label":"Run WorkflowBench against your workflow runtime","minTier":"Evaluator"},{"id":"ipi.adjudicate","category":"Authorization","label":"Adjudicate inbound trigger content via IngestSourceAdjudicator","minTier":"Analyst"},{"id":"dashboard.ipi-defense","category":"Dashboard","label":"IPI Defense view (inbound-trigger adjudication monitoring)","minTier":"Analyst"},{"id":"dashboard.trust-anomaly","category":"Dashboard","label":"Trust Anomaly view (live trust-anomaly-detector network metrics)","minTier":"Analyst"},{"id":"dashboard.workflow-governance","category":"Dashboard","label":"Workflow Governance view (per-workflow verdicts + audit-chain + isolation status)","minTier":"Analyst"},{"id":"enforcement.chain","category":"Authorization","label":"Compute enforcement chain for a classified risk level (independent of full evaluate)","minTier":"Analyst"},{"id":"enforcement.compose","category":"Authorization","label":"Compose intent from substrate signals (independent of full evaluate)","minTier":"Analyst"},{"id":"audit.local.mode.build","category":"Audit","label":"Build next entry in Sovereign Local Mode hash chain (SDK build-side)","minTier":"Analyst"},{"id":"audit.local.mode.validate","category":"Audit","label":"Validate a Sovereign Local Mode chain (read-side; independent of build)","minTier":"Evaluator"},{"id":"ipi.classify","category":"Authorization","label":"Classify source trust without IPI adjudication (lower-stakes than full adjudicate)","minTier":"Analyst"},{"id":"slack.read","category":"Operator","label":"Read Slack gateway status + channel list","minTier":"Evaluator"},{"id":"mcp.tool.authorize","category":"Attestation","label":"MCP tool: pre-action authorization check via agentomy_authorize","minTier":"Evaluator"},{"id":"mcp.tool.log","category":"Audit","label":"MCP tool: audit-trail emission via agentomy_log","minTier":"Analyst"},{"id":"mcp.tool.status","category":"Attestation","label":"MCP tool: fleet health status read via agentomy_status","minTier":"Evaluator"},{"id":"mcp.tool.prompt_verify","category":"Attestation","label":"MCP tool: prompt verification via agentomy_prompt_verify","minTier":"Evaluator"},{"id":"mcp.tool.drift_score","category":"Verification","label":"MCP tool: behavioral drift detection via agentomy_drift_score","minTier":"Analyst"},{"id":"mcp.tool.exposure_profile","category":"Verification","label":"MCP tool: shadow AI exposure profile via agentomy_exposure_profile","minTier":"Analyst"},{"id":"dashboard.discovery","category":"Dashboard","label":"Discovery view (Shadow AI ungoverned-agent inventory)","minTier":"Evaluator"},{"id":"dashboard.security","category":"Dashboard","label":"Security Status view (active threats, recent halts, anomaly alerts)","minTier":"Analyst"},{"id":"dashboard.desktop","category":"Dashboard","label":"Desktop Daemon view (per-machine agentomy-edge instances)","minTier":"Analyst"},{"id":"dashboard.chat","category":"Dashboard","label":"Governed Chat view (every message scored inline)","minTier":"Analyst"},{"id":"dashboard.threats","category":"Dashboard","label":"Live Threat Watch view (OSINT-detected governance threats)","minTier":"Analyst"},{"id":"dashboard.threat-intel","category":"Dashboard","label":"Threat Intelligence view (cross-agent threat-intel graph; operators see the fleet-wide aggregate)","minTier":"Analyst"}],"unlocksAtNext":[{"id":"cert.issue.delegate","category":"Identity","label":"Issue AgentCertificate for delegated agents","minTier":"Builder"},{"id":"mcp.attest","category":"Attestation","label":"Attest an MCP server manifest","minTier":"Builder"},{"id":"provenance.record","category":"Attestation","label":"Record cross-registry provenance entries","minTier":"Builder"},{"id":"skill.publish","category":"Skill","label":"Issue a SignedSkillAttestation for a published skill","minTier":"Builder"},{"id":"attestation.workflow","category":"Attestation","label":"Hash-chained attestation of workflow execution (inputs + outputs + node-path)","minTier":"Builder"},{"id":"audit.isolation.workflow","category":"Audit","label":"Workflow-scoped audit isolation key (cross-workflow leak prevention)","minTier":"Builder"},{"id":"slack.send","category":"Operator","label":"Send Slack message via governance gateway (send/notify/alert)","minTier":"Builder"}]},{"tier":"Builder","nextTier":"Operator","features":[{"id":"cert.issue.self","category":"Identity","label":"Issue AgentCertificate for your own agent","minTier":"Analyst"},{"id":"cert.verify","category":"Identity","label":"Verify a presented AgentCertificate","minTier":"Evaluator"},{"id":"cert.issue.delegate","category":"Identity","label":"Issue AgentCertificate for delegated agents","minTier":"Builder"},{"id":"dyad.read.self","category":"Trust","label":"Query Sovereignty + Integrity Dyad for own agent","minTier":"Evaluator"},{"id":"enforcement.classify","category":"Authorization","label":"Classify risk of a proposed action","minTier":"Evaluator"},{"id":"enforcement.evaluate","category":"Authorization","label":"Full enforcement chain (classify + chain + compose)","minTier":"Analyst"},{"id":"mcp.attest","category":"Attestation","label":"Attest an MCP server manifest","minTier":"Builder"},{"id":"mcp.verify","category":"Attestation","label":"Verify an MCP server attestation","minTier":"Evaluator"},{"id":"provenance.record","category":"Attestation","label":"Record cross-registry provenance entries","minTier":"Builder"},{"id":"provenance.verify","category":"Attestation","label":"Verify a presented provenance chain","minTier":"Evaluator"},{"id":"audit.read.own","category":"Audit","label":"Read your own agent audit chain","minTier":"Evaluator"},{"id":"audit.local.mode","category":"Audit","label":"Sovereign Local Mode (no-server SDK)","minTier":"Evaluator"},{"id":"siem.format","category":"Audit","label":"Format governance events for SIEM ingestion","minTier":"Analyst"},{"id":"otel.semconv.read","category":"Audit","label":"Read OTel governance semconv schema","minTier":"Evaluator"},{"id":"secret.binding.format","category":"Secret","label":"Format secret-fetch requests for vault adapters","minTier":"Analyst"},{"id":"dashboard.fleet","category":"Dashboard","label":"Fleet view dashboard","minTier":"Analyst"},{"id":"dashboard.audit","category":"Dashboard","label":"Audit trail dashboard","minTier":"Analyst"},{"id":"dashboard.compliance","category":"Dashboard","label":"Compliance readiness view","minTier":"Analyst"},{"id":"dashboard.explainability","category":"Dashboard","label":"EU AI Act Article 13 explainability view","minTier":"Analyst"},{"id":"benchmark.governance","category":"Verification","label":"Run GovernanceBench against your deployment","minTier":"Evaluator"},{"id":"benchmark.vigil","category":"Verification","label":"Run VIGIL adversarial battery","minTier":"Evaluator"},{"id":"cli.verify","category":"Verification","label":"agentomy verify-cert / verify-provenance / verify-attestation","minTier":"Evaluator"},{"id":"skill.registry.read","category":"Skill","label":"Read SovereignSkillRegistry status + per-skill metadata","minTier":"Evaluator"},{"id":"skill.verify","category":"Skill","label":"Verify a presented SignedSkillAttestation","minTier":"Analyst"},{"id":"skill.publish","category":"Skill","label":"Issue a SignedSkillAttestation for a published skill","minTier":"Builder"},{"id":"benchmark.workflow","category":"Verification","label":"Run WorkflowBench against your workflow runtime","minTier":"Evaluator"},{"id":"ipi.adjudicate","category":"Authorization","label":"Adjudicate inbound trigger content via IngestSourceAdjudicator","minTier":"Analyst"},{"id":"attestation.workflow","category":"Attestation","label":"Hash-chained attestation of workflow execution (inputs + outputs + node-path)","minTier":"Builder"},{"id":"audit.isolation.workflow","category":"Audit","label":"Workflow-scoped audit isolation key (cross-workflow leak prevention)","minTier":"Builder"},{"id":"dashboard.ipi-defense","category":"Dashboard","label":"IPI Defense view (inbound-trigger adjudication monitoring)","minTier":"Analyst"},{"id":"dashboard.trust-anomaly","category":"Dashboard","label":"Trust Anomaly view (live trust-anomaly-detector network metrics)","minTier":"Analyst"},{"id":"dashboard.workflow-governance","category":"Dashboard","label":"Workflow Governance view (per-workflow verdicts + audit-chain + isolation status)","minTier":"Analyst"},{"id":"enforcement.chain","category":"Authorization","label":"Compute enforcement chain for a classified risk level (independent of full evaluate)","minTier":"Analyst"},{"id":"enforcement.compose","category":"Authorization","label":"Compose intent from substrate signals (independent of full evaluate)","minTier":"Analyst"},{"id":"audit.local.mode.build","category":"Audit","label":"Build next entry in Sovereign Local Mode hash chain (SDK build-side)","minTier":"Analyst"},{"id":"audit.local.mode.validate","category":"Audit","label":"Validate a Sovereign Local Mode chain (read-side; independent of build)","minTier":"Evaluator"},{"id":"ipi.classify","category":"Authorization","label":"Classify source trust without IPI adjudication (lower-stakes than full adjudicate)","minTier":"Analyst"},{"id":"slack.send","category":"Operator","label":"Send Slack message via governance gateway (send/notify/alert)","minTier":"Builder"},{"id":"slack.read","category":"Operator","label":"Read Slack gateway status + channel list","minTier":"Evaluator"},{"id":"mcp.tool.authorize","category":"Attestation","label":"MCP tool: pre-action authorization check via agentomy_authorize","minTier":"Evaluator"},{"id":"mcp.tool.log","category":"Audit","label":"MCP tool: audit-trail emission via agentomy_log","minTier":"Analyst"},{"id":"mcp.tool.status","category":"Attestation","label":"MCP tool: fleet health status read via agentomy_status","minTier":"Evaluator"},{"id":"mcp.tool.prompt_verify","category":"Attestation","label":"MCP tool: prompt verification via agentomy_prompt_verify","minTier":"Evaluator"},{"id":"mcp.tool.drift_score","category":"Verification","label":"MCP tool: behavioral drift detection via agentomy_drift_score","minTier":"Analyst"},{"id":"mcp.tool.exposure_profile","category":"Verification","label":"MCP tool: shadow AI exposure profile via agentomy_exposure_profile","minTier":"Analyst"},{"id":"dashboard.discovery","category":"Dashboard","label":"Discovery view (Shadow AI ungoverned-agent inventory)","minTier":"Evaluator"},{"id":"dashboard.security","category":"Dashboard","label":"Security Status view (active threats, recent halts, anomaly alerts)","minTier":"Analyst"},{"id":"dashboard.desktop","category":"Dashboard","label":"Desktop Daemon view (per-machine agentomy-edge instances)","minTier":"Analyst"},{"id":"dashboard.chat","category":"Dashboard","label":"Governed Chat view (every message scored inline)","minTier":"Analyst"},{"id":"dashboard.threats","category":"Dashboard","label":"Live Threat Watch view (OSINT-detected governance threats)","minTier":"Analyst"},{"id":"dashboard.threat-intel","category":"Dashboard","label":"Threat Intelligence view (cross-agent threat-intel graph; operators see the fleet-wide aggregate)","minTier":"Analyst"}],"unlocksAtNext":[{"id":"cert.rotate.scheduled","category":"Identity","label":"Scheduled cert rotation per tier cadence","minTier":"Operator"},{"id":"dyad.read.fleet","category":"Trust","label":"Query Dyad across all governed agents","minTier":"Operator"},{"id":"enforcement.override","category":"Authorization","label":"Override risk classification per-action","minTier":"Operator"},{"id":"session.start","category":"Attestation","label":"Start cert-bound operator session","minTier":"Operator"},{"id":"session.export","category":"Attestation","label":"Export-controlled session record (hashes-only)","minTier":"Operator"},{"id":"audit.read.fleet","category":"Audit","label":"Read fleet-wide audit chain","minTier":"Operator"},{"id":"audit.export","category":"Audit","label":"Export audit chain to regulator","minTier":"Operator"},{"id":"siem.sync.live","category":"Audit","label":"Live SIEM streaming (round 2)","minTier":"Operator"},{"id":"secret.binding.policy","category":"Secret","label":"Set per-capability secret-binding policy","minTier":"Operator"},{"id":"halt.agent.single","category":"Operator","label":"Halt a single agent","minTier":"Operator"},{"id":"resume.agent","category":"Operator","label":"Resume a halted agent","minTier":"Operator"},{"id":"quarantine.agent","category":"Operator","label":"Quarantine an agent to scoped permissions","minTier":"Operator"},{"id":"agent.handoff.declare","category":"Operator","label":"Declare a traceable handoff between two agents","minTier":"Operator"},{"id":"dashboard.steer","category":"Dashboard","label":"Steer Console (manual override)","minTier":"Operator"},{"id":"dashboard.gdpr","category":"Dashboard","label":"GDPR Article 22 view","minTier":"Operator"},{"id":"skill.revoke","category":"Skill","label":"Revoke a previously-issued SignedSkillAttestation","minTier":"Operator"},{"id":"session.record","category":"Attestation","label":"Record an operator action into an active session","minTier":"Operator"},{"id":"session.finalize","category":"Attestation","label":"Seal an active operator session (finalize chain)","minTier":"Operator"},{"id":"session.validate","category":"Attestation","label":"Validate a session chain (independent of session creation)","minTier":"Operator"},{"id":"auth.keys.manage","category":"Operator","label":"Manage API keys (create / list / rotate / revoke); operator-class admin operation","minTier":"Operator"},{"id":"billing.scanlimit.manage","category":"Operator","label":"Set an organisation monthly discovery-scan allowance","minTier":"Operator"}]},{"tier":"Operator","nextTier":"Strategist","features":[{"id":"cert.issue.self","category":"Identity","label":"Issue AgentCertificate for your own agent","minTier":"Analyst"},{"id":"cert.verify","category":"Identity","label":"Verify a presented AgentCertificate","minTier":"Evaluator"},{"id":"cert.issue.delegate","category":"Identity","label":"Issue AgentCertificate for delegated agents","minTier":"Builder"},{"id":"cert.rotate.scheduled","category":"Identity","label":"Scheduled cert rotation per tier cadence","minTier":"Operator"},{"id":"dyad.read.self","category":"Trust","label":"Query Sovereignty + Integrity Dyad for own agent","minTier":"Evaluator"},{"id":"dyad.read.fleet","category":"Trust","label":"Query Dyad across all governed agents","minTier":"Operator"},{"id":"enforcement.classify","category":"Authorization","label":"Classify risk of a proposed action","minTier":"Evaluator"},{"id":"enforcement.evaluate","category":"Authorization","label":"Full enforcement chain (classify + chain + compose)","minTier":"Analyst"},{"id":"enforcement.override","category":"Authorization","label":"Override risk classification per-action","minTier":"Operator"},{"id":"mcp.attest","category":"Attestation","label":"Attest an MCP server manifest","minTier":"Builder"},{"id":"mcp.verify","category":"Attestation","label":"Verify an MCP server attestation","minTier":"Evaluator"},{"id":"provenance.record","category":"Attestation","label":"Record cross-registry provenance entries","minTier":"Builder"},{"id":"provenance.verify","category":"Attestation","label":"Verify a presented provenance chain","minTier":"Evaluator"},{"id":"session.start","category":"Attestation","label":"Start cert-bound operator session","minTier":"Operator"},{"id":"session.export","category":"Attestation","label":"Export-controlled session record (hashes-only)","minTier":"Operator"},{"id":"audit.read.own","category":"Audit","label":"Read your own agent audit chain","minTier":"Evaluator"},{"id":"audit.read.fleet","category":"Audit","label":"Read fleet-wide audit chain","minTier":"Operator"},{"id":"audit.export","category":"Audit","label":"Export audit chain to regulator","minTier":"Operator"},{"id":"audit.local.mode","category":"Audit","label":"Sovereign Local Mode (no-server SDK)","minTier":"Evaluator"},{"id":"siem.format","category":"Audit","label":"Format governance events for SIEM ingestion","minTier":"Analyst"},{"id":"siem.sync.live","category":"Audit","label":"Live SIEM streaming (round 2)","minTier":"Operator"},{"id":"otel.semconv.read","category":"Audit","label":"Read OTel governance semconv schema","minTier":"Evaluator"},{"id":"secret.binding.format","category":"Secret","label":"Format secret-fetch requests for vault adapters","minTier":"Analyst"},{"id":"secret.binding.policy","category":"Secret","label":"Set per-capability secret-binding policy","minTier":"Operator"},{"id":"halt.agent.single","category":"Operator","label":"Halt a single agent","minTier":"Operator"},{"id":"resume.agent","category":"Operator","label":"Resume a halted agent","minTier":"Operator"},{"id":"quarantine.agent","category":"Operator","label":"Quarantine an agent to scoped permissions","minTier":"Operator"},{"id":"agent.handoff.declare","category":"Operator","label":"Declare a traceable handoff between two agents","minTier":"Operator"},{"id":"dashboard.fleet","category":"Dashboard","label":"Fleet view dashboard","minTier":"Analyst"},{"id":"dashboard.audit","category":"Dashboard","label":"Audit trail dashboard","minTier":"Analyst"},{"id":"dashboard.steer","category":"Dashboard","label":"Steer Console (manual override)","minTier":"Operator"},{"id":"dashboard.compliance","category":"Dashboard","label":"Compliance readiness view","minTier":"Analyst"},{"id":"dashboard.gdpr","category":"Dashboard","label":"GDPR Article 22 view","minTier":"Operator"},{"id":"dashboard.explainability","category":"Dashboard","label":"EU AI Act Article 13 explainability view","minTier":"Analyst"},{"id":"benchmark.governance","category":"Verification","label":"Run GovernanceBench against your deployment","minTier":"Evaluator"},{"id":"benchmark.vigil","category":"Verification","label":"Run VIGIL adversarial battery","minTier":"Evaluator"},{"id":"cli.verify","category":"Verification","label":"agentomy verify-cert / verify-provenance / verify-attestation","minTier":"Evaluator"},{"id":"skill.registry.read","category":"Skill","label":"Read SovereignSkillRegistry status + per-skill metadata","minTier":"Evaluator"},{"id":"skill.verify","category":"Skill","label":"Verify a presented SignedSkillAttestation","minTier":"Analyst"},{"id":"skill.publish","category":"Skill","label":"Issue a SignedSkillAttestation for a published skill","minTier":"Builder"},{"id":"skill.revoke","category":"Skill","label":"Revoke a previously-issued SignedSkillAttestation","minTier":"Operator"},{"id":"benchmark.workflow","category":"Verification","label":"Run WorkflowBench against your workflow runtime","minTier":"Evaluator"},{"id":"ipi.adjudicate","category":"Authorization","label":"Adjudicate inbound trigger content via IngestSourceAdjudicator","minTier":"Analyst"},{"id":"attestation.workflow","category":"Attestation","label":"Hash-chained attestation of workflow execution (inputs + outputs + node-path)","minTier":"Builder"},{"id":"audit.isolation.workflow","category":"Audit","label":"Workflow-scoped audit isolation key (cross-workflow leak prevention)","minTier":"Builder"},{"id":"dashboard.ipi-defense","category":"Dashboard","label":"IPI Defense view (inbound-trigger adjudication monitoring)","minTier":"Analyst"},{"id":"dashboard.trust-anomaly","category":"Dashboard","label":"Trust Anomaly view (live trust-anomaly-detector network metrics)","minTier":"Analyst"},{"id":"dashboard.workflow-governance","category":"Dashboard","label":"Workflow Governance view (per-workflow verdicts + audit-chain + isolation status)","minTier":"Analyst"},{"id":"enforcement.chain","category":"Authorization","label":"Compute enforcement chain for a classified risk level (independent of full evaluate)","minTier":"Analyst"},{"id":"enforcement.compose","category":"Authorization","label":"Compose intent from substrate signals (independent of full evaluate)","minTier":"Analyst"},{"id":"audit.local.mode.build","category":"Audit","label":"Build next entry in Sovereign Local Mode hash chain (SDK build-side)","minTier":"Analyst"},{"id":"audit.local.mode.validate","category":"Audit","label":"Validate a Sovereign Local Mode chain (read-side; independent of build)","minTier":"Evaluator"},{"id":"session.record","category":"Attestation","label":"Record an operator action into an active session","minTier":"Operator"},{"id":"session.finalize","category":"Attestation","label":"Seal an active operator session (finalize chain)","minTier":"Operator"},{"id":"session.validate","category":"Attestation","label":"Validate a session chain (independent of session creation)","minTier":"Operator"},{"id":"ipi.classify","category":"Authorization","label":"Classify source trust without IPI adjudication (lower-stakes than full adjudicate)","minTier":"Analyst"},{"id":"auth.keys.manage","category":"Operator","label":"Manage API keys (create / list / rotate / revoke); operator-class admin operation","minTier":"Operator"},{"id":"billing.scanlimit.manage","category":"Operator","label":"Set an organisation monthly discovery-scan allowance","minTier":"Operator"},{"id":"slack.send","category":"Operator","label":"Send Slack message via governance gateway (send/notify/alert)","minTier":"Builder"},{"id":"slack.read","category":"Operator","label":"Read Slack gateway status + channel list","minTier":"Evaluator"},{"id":"mcp.tool.authorize","category":"Attestation","label":"MCP tool: pre-action authorization check via agentomy_authorize","minTier":"Evaluator"},{"id":"mcp.tool.log","category":"Audit","label":"MCP tool: audit-trail emission via agentomy_log","minTier":"Analyst"},{"id":"mcp.tool.status","category":"Attestation","label":"MCP tool: fleet health status read via agentomy_status","minTier":"Evaluator"},{"id":"mcp.tool.prompt_verify","category":"Attestation","label":"MCP tool: prompt verification via agentomy_prompt_verify","minTier":"Evaluator"},{"id":"mcp.tool.drift_score","category":"Verification","label":"MCP tool: behavioral drift detection via agentomy_drift_score","minTier":"Analyst"},{"id":"mcp.tool.exposure_profile","category":"Verification","label":"MCP tool: shadow AI exposure profile via agentomy_exposure_profile","minTier":"Analyst"},{"id":"dashboard.discovery","category":"Dashboard","label":"Discovery view (Shadow AI ungoverned-agent inventory)","minTier":"Evaluator"},{"id":"dashboard.security","category":"Dashboard","label":"Security Status view (active threats, recent halts, anomaly alerts)","minTier":"Analyst"},{"id":"dashboard.desktop","category":"Dashboard","label":"Desktop Daemon view (per-machine agentomy-edge instances)","minTier":"Analyst"},{"id":"dashboard.chat","category":"Dashboard","label":"Governed Chat view (every message scored inline)","minTier":"Analyst"},{"id":"dashboard.threats","category":"Dashboard","label":"Live Threat Watch view (OSINT-detected governance threats)","minTier":"Analyst"},{"id":"dashboard.threat-intel","category":"Dashboard","label":"Threat Intelligence view (cross-agent threat-intel graph; operators see the fleet-wide aggregate)","minTier":"Analyst"}],"unlocksAtNext":[{"id":"dyad.factor.weights","category":"Trust","label":"Customize factor weights per vertical","minTier":"Strategist"},{"id":"enforcement.profile.tune","category":"Authorization","label":"Tune enforcement profile gate composition","minTier":"Strategist"},{"id":"halt.fleet","category":"Operator","label":"Halt the entire agent fleet","minTier":"Strategist"},{"id":"skill.profile.tune","category":"Skill","label":"Tune the skill-activation enforcement profile","minTier":"Strategist"},{"id":"auth.tier.manage","category":"Strategist","label":"Assign or revoke the operator tier held by a principal","minTier":"Strategist"}]},{"tier":"Strategist","nextTier":null,"features":[{"id":"cert.issue.self","category":"Identity","label":"Issue AgentCertificate for your own agent","minTier":"Analyst"},{"id":"cert.verify","category":"Identity","label":"Verify a presented AgentCertificate","minTier":"Evaluator"},{"id":"cert.issue.delegate","category":"Identity","label":"Issue AgentCertificate for delegated agents","minTier":"Builder"},{"id":"cert.rotate.scheduled","category":"Identity","label":"Scheduled cert rotation per tier cadence","minTier":"Operator"},{"id":"dyad.read.self","category":"Trust","label":"Query Sovereignty + Integrity Dyad for own agent","minTier":"Evaluator"},{"id":"dyad.read.fleet","category":"Trust","label":"Query Dyad across all governed agents","minTier":"Operator"},{"id":"dyad.factor.weights","category":"Trust","label":"Customize factor weights per vertical","minTier":"Strategist"},{"id":"enforcement.classify","category":"Authorization","label":"Classify risk of a proposed action","minTier":"Evaluator"},{"id":"enforcement.evaluate","category":"Authorization","label":"Full enforcement chain (classify + chain + compose)","minTier":"Analyst"},{"id":"enforcement.override","category":"Authorization","label":"Override risk classification per-action","minTier":"Operator"},{"id":"enforcement.profile.tune","category":"Authorization","label":"Tune enforcement profile gate composition","minTier":"Strategist"},{"id":"mcp.attest","category":"Attestation","label":"Attest an MCP server manifest","minTier":"Builder"},{"id":"mcp.verify","category":"Attestation","label":"Verify an MCP server attestation","minTier":"Evaluator"},{"id":"provenance.record","category":"Attestation","label":"Record cross-registry provenance entries","minTier":"Builder"},{"id":"provenance.verify","category":"Attestation","label":"Verify a presented provenance chain","minTier":"Evaluator"},{"id":"session.start","category":"Attestation","label":"Start cert-bound operator session","minTier":"Operator"},{"id":"session.export","category":"Attestation","label":"Export-controlled session record (hashes-only)","minTier":"Operator"},{"id":"audit.read.own","category":"Audit","label":"Read your own agent audit chain","minTier":"Evaluator"},{"id":"audit.read.fleet","category":"Audit","label":"Read fleet-wide audit chain","minTier":"Operator"},{"id":"audit.export","category":"Audit","label":"Export audit chain to regulator","minTier":"Operator"},{"id":"audit.local.mode","category":"Audit","label":"Sovereign Local Mode (no-server SDK)","minTier":"Evaluator"},{"id":"siem.format","category":"Audit","label":"Format governance events for SIEM ingestion","minTier":"Analyst"},{"id":"siem.sync.live","category":"Audit","label":"Live SIEM streaming (round 2)","minTier":"Operator"},{"id":"otel.semconv.read","category":"Audit","label":"Read OTel governance semconv schema","minTier":"Evaluator"},{"id":"secret.binding.format","category":"Secret","label":"Format secret-fetch requests for vault adapters","minTier":"Analyst"},{"id":"secret.binding.policy","category":"Secret","label":"Set per-capability secret-binding policy","minTier":"Operator"},{"id":"halt.agent.single","category":"Operator","label":"Halt a single agent","minTier":"Operator"},{"id":"halt.fleet","category":"Operator","label":"Halt the entire agent fleet","minTier":"Strategist"},{"id":"resume.agent","category":"Operator","label":"Resume a halted agent","minTier":"Operator"},{"id":"quarantine.agent","category":"Operator","label":"Quarantine an agent to scoped permissions","minTier":"Operator"},{"id":"agent.handoff.declare","category":"Operator","label":"Declare a traceable handoff between two agents","minTier":"Operator"},{"id":"dashboard.fleet","category":"Dashboard","label":"Fleet view dashboard","minTier":"Analyst"},{"id":"dashboard.audit","category":"Dashboard","label":"Audit trail dashboard","minTier":"Analyst"},{"id":"dashboard.steer","category":"Dashboard","label":"Steer Console (manual override)","minTier":"Operator"},{"id":"dashboard.compliance","category":"Dashboard","label":"Compliance readiness view","minTier":"Analyst"},{"id":"dashboard.gdpr","category":"Dashboard","label":"GDPR Article 22 view","minTier":"Operator"},{"id":"dashboard.explainability","category":"Dashboard","label":"EU AI Act Article 13 explainability view","minTier":"Analyst"},{"id":"benchmark.governance","category":"Verification","label":"Run GovernanceBench against your deployment","minTier":"Evaluator"},{"id":"benchmark.vigil","category":"Verification","label":"Run VIGIL adversarial battery","minTier":"Evaluator"},{"id":"cli.verify","category":"Verification","label":"agentomy verify-cert / verify-provenance / verify-attestation","minTier":"Evaluator"},{"id":"skill.registry.read","category":"Skill","label":"Read SovereignSkillRegistry status + per-skill metadata","minTier":"Evaluator"},{"id":"skill.verify","category":"Skill","label":"Verify a presented SignedSkillAttestation","minTier":"Analyst"},{"id":"skill.publish","category":"Skill","label":"Issue a SignedSkillAttestation for a published skill","minTier":"Builder"},{"id":"skill.revoke","category":"Skill","label":"Revoke a previously-issued SignedSkillAttestation","minTier":"Operator"},{"id":"skill.profile.tune","category":"Skill","label":"Tune the skill-activation enforcement profile","minTier":"Strategist"},{"id":"benchmark.workflow","category":"Verification","label":"Run WorkflowBench against your workflow runtime","minTier":"Evaluator"},{"id":"ipi.adjudicate","category":"Authorization","label":"Adjudicate inbound trigger content via IngestSourceAdjudicator","minTier":"Analyst"},{"id":"attestation.workflow","category":"Attestation","label":"Hash-chained attestation of workflow execution (inputs + outputs + node-path)","minTier":"Builder"},{"id":"audit.isolation.workflow","category":"Audit","label":"Workflow-scoped audit isolation key (cross-workflow leak prevention)","minTier":"Builder"},{"id":"dashboard.ipi-defense","category":"Dashboard","label":"IPI Defense view (inbound-trigger adjudication monitoring)","minTier":"Analyst"},{"id":"dashboard.trust-anomaly","category":"Dashboard","label":"Trust Anomaly view (live trust-anomaly-detector network metrics)","minTier":"Analyst"},{"id":"dashboard.workflow-governance","category":"Dashboard","label":"Workflow Governance view (per-workflow verdicts + audit-chain + isolation status)","minTier":"Analyst"},{"id":"enforcement.chain","category":"Authorization","label":"Compute enforcement chain for a classified risk level (independent of full evaluate)","minTier":"Analyst"},{"id":"enforcement.compose","category":"Authorization","label":"Compose intent from substrate signals (independent of full evaluate)","minTier":"Analyst"},{"id":"audit.local.mode.build","category":"Audit","label":"Build next entry in Sovereign Local Mode hash chain (SDK build-side)","minTier":"Analyst"},{"id":"audit.local.mode.validate","category":"Audit","label":"Validate a Sovereign Local Mode chain (read-side; independent of build)","minTier":"Evaluator"},{"id":"session.record","category":"Attestation","label":"Record an operator action into an active session","minTier":"Operator"},{"id":"session.finalize","category":"Attestation","label":"Seal an active operator session (finalize chain)","minTier":"Operator"},{"id":"session.validate","category":"Attestation","label":"Validate a session chain (independent of session creation)","minTier":"Operator"},{"id":"ipi.classify","category":"Authorization","label":"Classify source trust without IPI adjudication (lower-stakes than full adjudicate)","minTier":"Analyst"},{"id":"auth.keys.manage","category":"Operator","label":"Manage API keys (create / list / rotate / revoke); operator-class admin operation","minTier":"Operator"},{"id":"auth.tier.manage","category":"Strategist","label":"Assign or revoke the operator tier held by a principal","minTier":"Strategist"},{"id":"billing.scanlimit.manage","category":"Operator","label":"Set an organisation monthly discovery-scan allowance","minTier":"Operator"},{"id":"slack.send","category":"Operator","label":"Send Slack message via governance gateway (send/notify/alert)","minTier":"Builder"},{"id":"slack.read","category":"Operator","label":"Read Slack gateway status + channel list","minTier":"Evaluator"},{"id":"mcp.tool.authorize","category":"Attestation","label":"MCP tool: pre-action authorization check via agentomy_authorize","minTier":"Evaluator"},{"id":"mcp.tool.log","category":"Audit","label":"MCP tool: audit-trail emission via agentomy_log","minTier":"Analyst"},{"id":"mcp.tool.status","category":"Attestation","label":"MCP tool: fleet health status read via agentomy_status","minTier":"Evaluator"},{"id":"mcp.tool.prompt_verify","category":"Attestation","label":"MCP tool: prompt verification via agentomy_prompt_verify","minTier":"Evaluator"},{"id":"mcp.tool.drift_score","category":"Verification","label":"MCP tool: behavioral drift detection via agentomy_drift_score","minTier":"Analyst"},{"id":"mcp.tool.exposure_profile","category":"Verification","label":"MCP tool: shadow AI exposure profile via agentomy_exposure_profile","minTier":"Analyst"},{"id":"dashboard.discovery","category":"Dashboard","label":"Discovery view (Shadow AI ungoverned-agent inventory)","minTier":"Evaluator"},{"id":"dashboard.security","category":"Dashboard","label":"Security Status view (active threats, recent halts, anomaly alerts)","minTier":"Analyst"},{"id":"dashboard.desktop","category":"Dashboard","label":"Desktop Daemon view (per-machine agentomy-edge instances)","minTier":"Analyst"},{"id":"dashboard.chat","category":"Dashboard","label":"Governed Chat view (every message scored inline)","minTier":"Analyst"},{"id":"dashboard.threats","category":"Dashboard","label":"Live Threat Watch view (OSINT-detected governance threats)","minTier":"Analyst"},{"id":"dashboard.threat-intel","category":"Dashboard","label":"Threat Intelligence view (cross-agent threat-intel graph; operators see the fleet-wide aggregate)","minTier":"Analyst"}],"unlocksAtNext":[]}],"totalFeatures":77}