The shared governance-file schema contract (C2MD ⇄ ACP). VDA-MD governance files: taxonomy, MUST/MUST NOT/MAY clause grammar, clause-level citations, RACI. Versioned first-class artifact.

Pull-based, infrastructure-agnostic bundle distribution. Publish + activate a signed bundle (activation sealed to Witness, referencing the commit hash); agents fetch over HTTPS. Rollback = activate the previous version.

The Compliance Guard — provider-free rule engine over governance changes. Honest structural diff + weakening detection (MUST counts, citations, required refs, conditioned capabilities). One rule-set, two entry points (inline + CI).

Witness sealing substrate for ACP. Real HTTP client (customer-managed custody: prepare→sign→submit) + a no-network fake for tests/demo. Seals hitl_decision / agent_action to witness.getvda.ai.

Signed, versioned, content-hashed governance bundle — the runtime projection of approved git state. Deterministic build, Ed25519 signing (#key-3), verification against did:web:acp.getvda.ai.

The ACP governance CI test suite — schema validation, Compliance Guard, governance-level adversarial scenarios, and deterministic impact analysis. Provider-free; invocable as a step in the customer's own CI (GitHub Action / GitLab component / plain CLI).

The ACP evaluator SDK — the fleet-reuse artifact. Any agent embeds it to fetch → verify → cache → evaluate → seal a governance bundle LOCALLY. Framework-agnostic. Fail-static.

Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

JWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion. Unauthenticated calls are rejected.

Proxy Gemini (Vertex AI) completions wrapped in OpenTelemetry trace spans; returns the answer plus the trace/span id.

Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

JWT-gated LLM gateway: authenticate (bcrypt/JWT), then run a LangChain-on-Vertex Gemini completion. Unauthenticated calls are rejected.

Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Google-OAuth-gated LLM gateway: verify a Google ID token, then run a Gemini (Vertex AI) completion for the verified caller.

Hash passwords with bcrypt and issue/verify JWT session tokens.

Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Run a prompt through a LangChain (system + human) chain over Gemini on Vertex AI; optional LangSmith tracing.

Generate a production-ready docker-compose.yml for a Postgres + Redis (database + cache) stack — health checks, named volumes, PgBouncer pooling, Redis maxmemory/persistence policy, bridge networking