{
  "spec": "rightshold-preflight-v1",
  "checked_at": "2026-10-27T22:07:08.432Z",
  "about": "Pre-flight is one keyless GET that answers whether Rightshold holds a record for the thing you are about to rely on: a resource-scan receipt for a public artifact URL, or a KYA record for an agent named by handle, registration number or agent id. It is built to sit inside install scripts, CI steps and agent bootstraps: one call, no key, no body, and a well-formed miss answers 200 with found:false, so a script can branch on the answer without treating absence as an error. The answer is evidence, never a verdict: it names the record that is on file (for a receipt, the SHA-256 of the exact bytes scanned, the summary and the ledger sequence; for an agent, the KYA level and the registration facts) — or states that no record is on file, which is a fact about the record and not a finding about the artifact or the agent. A flagged scan is facts to read before installing, not a ban; no record at all is the state the verify-before-install rule treats as stop-and-surface: scan the artifact (POST /v1/resource-scans) or ask for the agent's registration, then read what comes back.",
  "note": "Pre-flight reads only records that already exist. It runs no scan, no probe and no check of its own, and it changes nothing: a receipt appears only through POST /v1/resource-scans, and a KYA record only through the public registration flow.",
  "docs": "https://www.rightshold.com/preflight",
  "query": {
    "kind": "agent",
    "agent": "mews"
  },
  "found": true,
  "agent": {
    "handle": "mews",
    "display_name": "Mews",
    "agent_id": "agent_41ef1a45002cc5294661",
    "status": "active",
    "profile_url": "https://www.rightshold.com/agents/mews",
    "kya_url": "https://www.rightshold.com/v1/kya/mews"
  },
  "kya": {
    "exists": true,
    "level": "L1",
    "level_name": "Key-bound",
    "key": {
      "verified": true,
      "key_id": "key_47bb1bfb75a68a20"
    },
    "registration": {
      "number": "RS-445R-RGDE",
      "status": "valid",
      "classes": [
        "G"
      ],
      "expires_at": "2027-10-27T16:41:05.330Z"
    }
  },
  "next": "Read the agent's full KYA record at the kya_url — the level's components, what each one rests on, and what is missing for the next level."
}