{
  "schema_version": "smerc.beacon.v1",
  "name": "SMERC | Pre-Execution Recoverability Control",
  "standard_tagline": "Pre-execution recoverability control before automated actions execute.",
  "acronym_expansion": "Structural Momentum Entropy Range Confidence",
  "category": "pre-execution recoverability control for AI agents and automation workflows; implemented as runtime permission infrastructure",
  "search_categories": [
    "pre-execution recoverability control",
    "AI agent governance",
    "AI agent deployment governance",
    "deploying AI agents safely",
    "AI deployment risk controls",
    "AI agents in production",
    "safe deployment of agentic AI",
    "runtime controls after AI deployment",
    "runtime AI governance",
    "AI agent permissions",
    "AI agent runtime controls",
    "AI tool-call approval",
    "OpenAI Agents approval adapter",
    "OpenAI Agents SDK human in the loop",
    "MCP approval callback",
    "agent action checkpoint",
    "SMERC versus AI guardrails",
    "runtime permission layer",
    "recoverability scoring",
    "Ref gate",
    "runtime evidence trust gate",
    "typed endpoint contracts",
    "object shape validation",
    "agent authorization",
    "runtime AI governance",
    "GitHub Actions governance",
    "MCP tool governance",
    "Model Context Protocol governance",
    "agent tool call governance",
    "financial runtime governance",
    "stablecoin governance",
    "treasury automation governance",
    "payment workflow governance",
    "AML KYT evidence integration",
    "wallet screening evidence",
    "Travel Rule evidence",
    "blockchain analytics governance",
    "smart contract risk governance",
    "Microsoft Sentinel replay",
    "Microsoft Defender replay",
    "ILION-Bench v2 replay",
    "security automation recoverability",
    "AI automation controls",
    "deployment governance"
  ],
  "canonical_site": "https://admirable-sorbet-9986d5.netlify.app/",
  "canonical_repository": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer",
  "one_line_summary": "SMERC, short for Structural Momentum Entropy Range Confidence, is pre-execution recoverability control for AI agents and high-impact automation, implemented as runtime permission infrastructure that applies hard evidence gates before scoring whether technically authorized actions are recoverable enough to execute.",
  "status": "Pilot-grade technical review artifact for shadow-mode evaluation. Not certified for production enforcement.",
  "postures": ["ALLOW", "THROTTLE", "FREEZE", "DENY", "ESCALATE"],
  "core_questions": [
    "Are the action facts trusted enough to score?",
    "Is the proposed action recoverable enough to execute now?",
    "After detection, identity, and policy, should this action execute now?",
    "Which controls must apply before execution?",
    "Which model, agent, or automation executor is qualified for this task?",
    "What evidence and replay record should be preserved?"
  ],
  "potential_company_value": {
    "summary": "SMERC is designed to help companies reduce the blast radius of automated actions by scoring recoverability before execution.",
    "value_hypotheses": [
      "safer automation adoption",
      "less blunt allow/block decisions",
      "better replay and audit evidence",
      "response-action blast-radius reduction",
      "AI-agent tool-call governance"
    ],
    "boundary": "Potential value only; no live incident-reduction, outage-prevention, compliance-certification, or customer-validated savings claim yet."
  },
  "governance_surfaces": [
    "Ref-gated runtime admission",
    "runtime evidence trust gate",
    "recoverability-aware action evaluation",
    "model and agent fitness routing",
    "agent handshake protocol",
    "authenticated agent handshake runtime API",
    "MCP-style tool-call governance adapter",
    "SMERC-F external financial signal adapter",
    "Microsoft-style security replay adapter",
    "ILION-Bench v2 external replay adapter",
    "scoring-invariant verification",
    "runtime posture decisioning",
    "action-bound permits",
    "GitHub PR Guardian comments and certificates",
    "end-to-end PR Guardian proof loop",
    "SPARTa route reports",
    "Decision Lifecycle Ledger",
    "DLL Intelligence governance memory",
    "pilot review metrics",
    "GitHub Actions shadow-mode scoring",
    "Governance Pattern Atlas",
    "Credibility Partner Review Packet",
    "CISO 5-minute proof path",
    "GitHub Actions pilot readiness report"
  ],
  "decision_lifecycle_ledger": {
    "purpose": "Preserve request, evidence, evaluation, human review, execution, outcome, and learning recommendation records for governed AI-agent and automation actions.",
    "intelligence_layer": "Analyze verified ledgers for near misses, override effectiveness, rollback performance, recurring missing evidence, recovery failures, drift signals, and review-gated policy recommendations.",
    "boundary": "Pilot-grade governance evidence; not regulatory retention, automatic retraining, or proof of incident reduction without customer-context records."
  },
  "discovery_endpoints": {
    "llms": "https://admirable-sorbet-9986d5.netlify.app/llms.txt",
    "humans": "https://admirable-sorbet-9986d5.netlify.app/humans.txt",
    "project_profile": "https://admirable-sorbet-9986d5.netlify.app/project.json",
    "beacon": "https://admirable-sorbet-9986d5.netlify.app/smerc-beacon.json",
    "well_known_beacon": "https://admirable-sorbet-9986d5.netlify.app/.well-known/smerc.json",
    "ai_discovery": "https://admirable-sorbet-9986d5.netlify.app/.well-known/ai-discovery.json",
    "ai_readme": "https://admirable-sorbet-9986d5.netlify.app/.well-known/ai-readme.json",
    "ai_review": "https://admirable-sorbet-9986d5.netlify.app/ai-review.json",
    "pilot_runbook": "https://admirable-sorbet-9986d5.netlify.app/pilot-runbook.json",
    "openapi": "https://admirable-sorbet-9986d5.netlify.app/openapi.json",
    "sitemap": "https://admirable-sorbet-9986d5.netlify.app/sitemap.xml",
    "robots": "https://admirable-sorbet-9986d5.netlify.app/robots.txt"
  },
  "mcp_runtime_governance": {
    "purpose": "Score MCP-style tool-call metadata before execution and map the result into SMERC posture, SPARTa route behavior, client/proxy recommendation, and replayable evidence.",
    "public_page": "https://admirable-sorbet-9986d5.netlify.app/mcp-governance.html",
    "documentation": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/MCP_Tool_Governance.md",
    "adapter": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reference_engine/mcp_tool_governance.py",
    "boundary": "Metadata-only pilot-grade adapter; does not replace MCP, OAuth, IAM, OPA, AI gateways, Microsoft security tools, or human accountability."
  },
  "microsoft_security_replay": {
    "purpose": "Replay synthetic Sentinel, Defender, Azure Activity, and advanced-hunting shaped security events through SMERC to score proposed response-action recoverability before execution.",
    "public_page": "https://admirable-sorbet-9986d5.netlify.app/microsoft-security-replay.html",
    "documentation": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/Microsoft_Security_Replay_Adapter.md",
    "report": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/Microsoft_Security_Replay_Report.md",
    "boundary": "Synthetic Microsoft-style replay only; not Microsoft telemetry, Microsoft certification, Sentinel validation, Defender validation, customer validation, threat detection, or incident-reduction proof."
  },
  "ilion_benchmark_replay": {
    "purpose": "Replay public ILION-Bench v2 execution-safety scenarios through SMERC to compare binary ALLOW/BLOCK labels with recoverability-aware runtime postures.",
    "public_page": "https://admirable-sorbet-9986d5.netlify.app/ilion-benchmark.html",
    "documentation": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/ILION_Bench_v2_Replay.md",
    "report": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/ILION_Bench_v2_Replay_Report.md",
    "boundary": "External benchmark replay only; not customer telemetry, production validation, incident-reduction proof, or ILION endorsement."
  },
  "financial_runtime_external_signals": {
    "purpose": "Consume AML/KYT-, wallet-screening-, fraud-, Travel Rule-, treasury-risk-, reserve-monitoring-, blockchain-analytics-, transaction-monitoring-, and smart-contract-risk-style outputs as evidence before automated financial actions execute.",
    "public_page": "https://admirable-sorbet-9986d5.netlify.app/smerc-f-customer-evaluation.html",
    "documentation": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/SMERC_F_External_Financial_Signals.md",
    "report": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/SMERC_F_External_Signal_Report.md",
    "boundary": "Evidence adapter only; not AML compliance, KYT screening, sanctions screening, address attribution, Travel Rule compliance, custody, settlement, transaction execution, legal determination, or production certification."
  },
  "model_agent_fitness": {
    "purpose": "Select the qualified model, agent, or automation executor for a specific task under current risk, data, authority, and recoverability conditions.",
    "input_signals": [
      "required_capabilities",
      "risk_level",
      "reversibility",
      "evidence_validity",
      "data_sensitivity",
      "required_tool_authority",
      "latency_requirement",
      "cost_sensitivity",
      "impact_scope",
      "anomaly_pressure"
    ],
    "output_fields": [
      "recommended_executor",
      "allowed_executors",
      "blocked_executors",
      "execution_posture",
      "candidate_rankings",
      "model_fitness_score",
      "risk_adjusted_executor_score",
      "reason_codes",
      "controls",
      "replay"
    ]
  },
  "agent_handshake_api": {
    "endpoint": "POST /v1/agent/handshake",
    "purpose": "Allow a discovered agent to declare itself, propose a task and action, receive executor fitness plus recoverability posture, and preserve a replayable handshake record before execution.",
    "required_scope": "actions.evaluate",
    "event": "agent.handshake.evaluated"
  },
  "github_pr_guardian": {
    "purpose": "Render SMERC runtime decisions into pull-request comments and hash-bound review certificates for AI-assisted code, deployment, secret, permission, and infrastructure changes.",
    "artifact_examples": [
      "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/SMERC_PR_Guardian_Comment.md",
      "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/smerc_pr_guardian_certificate_example.json",
      "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/End_To_End_PR_Guardian_Demo.md"
    ],
    "end_to_end_demo": "Connects a synthetic AI-assisted PR request to SMERC decision, PR comment and certificate, SPARTa route, Decision Lifecycle Ledger, and DLL Intelligence.",
    "boundary": "Pilot-grade review evidence; not a replacement for branch protection, code review, security review, deployment approvals, or human accountability."
  },
  "non_claims": [
    "SMERC is not a replacement for IAM.",
    "SMERC is not a replacement for OPA or policy engines.",
    "SMERC is not a replacement for AI gateways.",
    "SMERC is not a replacement for SIEM, EDR, approval systems, model safety systems, or human accountability.",
    "SMERC does not claim live incident reduction without design-partner evidence."
  ],
  "review_paths": {
    "ciso_overview": "https://admirable-sorbet-9986d5.netlify.app/ciso.html",
    "category_definition": "https://admirable-sorbet-9986d5.netlify.app/pre-execution-recoverability-control.html",
    "glossary": "https://admirable-sorbet-9986d5.netlify.app/glossary.html",
    "ciso_5_minute_proof": "https://admirable-sorbet-9986d5.netlify.app/ciso-proof.html",
    "ai_agent_governance": "https://admirable-sorbet-9986d5.netlify.app/ai-agent-governance.html",
    "ai_agent_deployment_governance": "https://admirable-sorbet-9986d5.netlify.app/ai-agent-deployment-governance.html",
    "runtime_ai_governance": "https://admirable-sorbet-9986d5.netlify.app/runtime-ai-governance.html",
    "ai_agent_permissions": "https://admirable-sorbet-9986d5.netlify.app/ai-agent-permissions.html",
    "smerc_vs_ai_guardrails": "https://admirable-sorbet-9986d5.netlify.app/smerc-vs-ai-guardrails.html",
    "openai_agents_approval_adapter": "https://admirable-sorbet-9986d5.netlify.app/openai-agents-approval-adapter.html",
    "mcp_governance": "https://admirable-sorbet-9986d5.netlify.app/mcp-governance.html",
    "microsoft_security_replay": "https://admirable-sorbet-9986d5.netlify.app/microsoft-security-replay.html",
    "ilion_benchmark_replay": "https://admirable-sorbet-9986d5.netlify.app/ilion-benchmark.html",
    "self_service_pilot": "https://admirable-sorbet-9986d5.netlify.app/self-service-pilot.html",
    "interactive_product_story": "https://admirable-sorbet-9986d5.netlify.app/almost-shipped.html",
    "futureops_challenge": "https://admirable-sorbet-9986d5.netlify.app/futureops-challenge.html",
    "technical_status": "https://admirable-sorbet-9986d5.netlify.app/status.html",
    "credibility_partner_review": "https://admirable-sorbet-9986d5.netlify.app/credibility.html",
    "public_review": "https://admirable-sorbet-9986d5.netlify.app/community.html",
    "visibility_hub": "https://admirable-sorbet-9986d5.netlify.app/visibility.html",
    "github_repository": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer",
    "github_pr_guardian": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/GitHub_PR_Guardian.md",
    "mcp_tool_governance": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/MCP_Tool_Governance.md",
    "microsoft_security_replay_docs": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/Microsoft_Security_Replay_Adapter.md",
    "microsoft_security_replay_report": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/Microsoft_Security_Replay_Report.md",
    "ilion_benchmark_replay_report": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/ILION_Bench_v2_Replay_Report.md",
    "microsoft_ecosystem_positioning": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/Microsoft_Ecosystem_Positioning.md",
    "end_to_end_pr_guardian_demo": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/End_To_End_PR_Guardian_Demo.md",
    "governance_pattern_atlas": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/Governance_Pattern_Atlas.md",
    "credibility_partner_packet": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/Credibility_Partner_Review_Packet.md",
    "ciso_5_minute_proof_package": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/CISO_5_Minute_Proof_Package.md",
    "github_actions_pilot_readiness": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/reports/GitHub_Actions_Pilot_Readiness.md",
    "dll_intelligence": "https://github.com/KingsMtn/SMERC-Runtime-Permission-Layer/blob/main/docs/DLL_Intelligence.md",
    "pilot_path": "https://admirable-sorbet-9986d5.netlify.app/github-action.html"
  }
}