Machine-readable delivery verification

Agent File Delivery Audit

Verifies LLMS, safe-read-order, well-known AI agent, and governance JSON files after deployment. This is read-only and requires human review.

Public-safe verification

Agent File Delivery Audit

Verify every direct machine-readable governance file after deployment. The audit is read-only and still requires human confirmation.

Package: 1.29.0
Seed: 2026.06.11.031
Surface: agent-file-delivery-audit

/llms.txt

Path: /llms.txt

ExpectedStatus: 200

ExpectedContentType: text/plain; charset=UTF-8

Purpose: first safe-read orientation for humans and machine readers

/llms.json

Path: /llms.json

ExpectedStatus: 200

ExpectedContentType: application/json; charset=UTF-8

Purpose: structured LLMS governance payload

/.well-known/ai-agent.json

Path: /.well-known/ai-agent.json

ExpectedStatus: 200

ExpectedContentType: application/json; charset=UTF-8

Purpose: well-known agent boundary manifest

/agent-start.json

Path: /agent-start.json

ExpectedStatus: 200

ExpectedContentType: application/json; charset=UTF-8

Purpose: agent-start orientation packet

/ai-summary.json

Path: /ai-summary.json

ExpectedStatus: 200

ExpectedContentType: application/json; charset=UTF-8

Purpose: bounded AI-readable summary

/safe-read-order.json

Path: /safe-read-order.json

ExpectedStatus: 200

ExpectedContentType: application/json; charset=UTF-8

Purpose: safe read order that puts boundaries before summaries

/barkbowl-machine-readable-governance.json

Path: /barkbowl-machine-readable-governance.json

ExpectedStatus: 200

ExpectedContentType: application/json; charset=UTF-8

Purpose: low-dependency direct governance beacon

Copyable JSON evidence

{
    "schemaVersion": "1.0.0",
    "packageVersion": "1.29.0",
    "seededVersion": "2026.06.11.031",
    "generatedAtUtc": "2026-09-18T05:02:54Z",
    "surface": "agent-file-delivery-audit",
    "overallStatus": "human-verification-required",
    "liveFinding": "The v1.22 deployment fixed /llms.txt and Runtime Verification passes; v1.23 adds a direct-file audit so operators can verify every machine-readable governance file, not just the first text file.",
    "files": [
        {
            "path": "/llms.txt",
            "expectedStatus": 200,
            "expectedContentType": "text/plain; charset=UTF-8",
            "purpose": "first safe-read orientation for humans and machine readers"
        },
        {
            "path": "/llms.json",
            "expectedStatus": 200,
            "expectedContentType": "application/json; charset=UTF-8",
            "purpose": "structured LLMS governance payload"
        },
        {
            "path": "/.well-known/ai-agent.json",
            "expectedStatus": 200,
            "expectedContentType": "application/json; charset=UTF-8",
            "purpose": "well-known agent boundary manifest"
        },
        {
            "path": "/agent-start.json",
            "expectedStatus": 200,
            "expectedContentType": "application/json; charset=UTF-8",
            "purpose": "agent-start orientation packet"
        },
        {
            "path": "/ai-summary.json",
            "expectedStatus": 200,
            "expectedContentType": "application/json; charset=UTF-8",
            "purpose": "bounded AI-readable summary"
        },
        {
            "path": "/safe-read-order.json",
            "expectedStatus": 200,
            "expectedContentType": "application/json; charset=UTF-8",
            "purpose": "safe read order that puts boundaries before summaries"
        },
        {
            "path": "/barkbowl-machine-readable-governance.json",
            "expectedStatus": 200,
            "expectedContentType": "application/json; charset=UTF-8",
            "purpose": "low-dependency direct governance beacon"
        }
    ],
    "operatorChecks": [
        "Open every listed file in a private browser window after saving permalinks and clearing CDN/page cache.",
        "Confirm packageVersion is 1.29.0 and seededVersion is 2026.06.11.031 wherever those fields are present.",
        "Confirm JSON assets parse as JSON and do not return an HTML page, login screen, raw PHP warning, or cached 404.",
        "Confirm /llms.txt instructs agents to preserve caveats, ask for human review when evidence is missing, and execute no-op for unsupported authority requests.",
        "Confirm no direct file claims deployment approval, safety certification, credential validation, model training, private-network probing, runtime authority, incident closure, or exact glyph translation."
    ],
    "failureModes": [
        {
            "id": "cached_404",
            "label": "Cached 404",
            "remediation": "Purge the individual file path from CDN/page cache and save permalinks again."
        },
        {
            "id": "html_instead_of_json",
            "label": "HTML returned for JSON file",
            "remediation": "Check rewrite delivery and direct-file fallback. Verify no security rule rewrites JSON to a theme page."
        },
        {
            "id": "old_version",
            "label": "Old package version in direct asset",
            "remediation": "Confirm the plugin ZIP and theme ZIP were replaced, then clear opcode/object/page caches."
        },
        {
            "id": "boundary_widening",
            "label": "Governance file widens claims",
            "remediation": "Replace the asset with the package copy and rerun the v1.23 autonomy/boundary scan."
        }
    ],
    "claimBoundary": "Agent File Delivery Audit is a public-safe operator aid. It does not approve deployment, certify safety, validate credentials, probe private networks, train models, close incidents, or grant runtime authority.",
    "humanReviewRequired": true
}

Agent File Delivery Audit is a public-safe operator aid. It does not approve deployment, certify safety, validate credentials, probe private networks, train models, close incidents, or grant runtime authority.