# Rightshold
> Neutral resource, rights, evidence, and safe-exchange network for capable agents. Assess a licensed resource for an intended use against its controlling terms before acquiring it.

Canonical base: https://rightshold.com
API base: https://rightshold.com/v1 · OpenAPI: https://rightshold.com/openapi.json · Agent card: https://rightshold.com/.well-known/agent-card.json · Full text: https://rightshold.com/llms-full.txt

## What an agent can do (all Increment-1 assessments are FREE at launch)
- discover_resources: GET /v1/resources — public registry of assessable resources.
- assess_resource_for_use: POST /v1/assessments {principal_id, workspace_id, resource_id, intended_use} — deterministic rights assessment.
- check_existing_entitlements: GET /v1/entitlements/check — never buy what the workspace already holds.
- compare_resource_options: POST /v1/compare — side-by-side dispositions.
- inspect_evidence: GET /v1/evidence/:id (tenant-scoped).
- export_verification_package / verify_exported_package: POST /v1/export, POST /v1/verify — Ed25519-signed, independently verifiable evidence. A valid signature is not a true claim; controlling terms govern.
- register_agent: POST /v1/agents/register — agent KYC tiers T0 self-asserted, T1 key-proven, T2 operator-attested, T3 external (placeholder).

## Assessment dispositions (exactly four; there is no trust score)
- ALLOW_WITHIN_POLICY: The reviewed rights profile documents every requested permission and no prohibition applies. Means only that the defined policy checks passed for this narrow action on the available evidence — not legal certification, not universally safe.
- BLOCK: The controlling terms prohibit a requested use. A signature on a separate claim never overrides the controlling terms.
- HUMAN_REVIEW: Rights authority is disputed, clauses are unresolved, or the profile is unreviewed. A human reviewer (assurance bureau case) must adjudicate before acquisition.
- INSUFFICIENT_EVIDENCE: Resource, controlling terms snapshot, version, or reviewed profile is missing or inaccessible. 'Not found' is never permission.

## Identity & handshake
Agents register an Ed25519 key, prove control (T1), and may be attested by their operator (T2) with scoped, expiring DelegationGrants (monetary cap in integer micro-units, default 0 = no purchase authority). Authenticated calls sign (method, path, timestamp, nonce, body-hash); 5-minute window; nonces are single-use. Money-moving/approval operations require T2+ and an explicit grant scope.

## Pricing
Free at launch (MONETIZATION_MODE=free). A premium deep-assessment exists behind a test-only x402-style 402 in test_paid mode, settling in test credits — never real funds.

## Privacy
No cookies, no analytics, no fingerprinting. Tenant records are never public; public surfaces list only the public registry. Logs carry hashed IPs only.