Capability namespaces
The ten canonical v1 capability namespaces seeded on devnet — auto-generated from examples/attestor-demo/devnet-namespaces.json.
The ten canonical v1 capability namespaces seeded on AgentTrust's validation-registry on Solana devnet. PolicyVault gates against capability_hash = SHA-256(name) per PolicyAccount byte 135..167.
How to use one in a policy: Integration → Capability namespaces. How to register your own: Custom attestor.
Auto-generated from
examples/attestor-demo/devnet-namespaces.jsonon 2026-05-07T15:08:37.863Z. Network:solana-devnet. Program:Cx4RFa6ysw3qXYhugPkF8pFSWBkmKq59h2dWgF2tKhtv. Count: 10.
| Name | Description | Capability hash (SHA-256, prefix) | PDA |
|---|---|---|---|
kyc.tier-1.v1 | Identity-verified individual (basic KYC). (newly-registered) | 366c075140aa… | 4ryEbb5iSi… |
kyc.tier-2.v1 | Identity + address verified. (newly-registered) | 2ad4289070be… | HdAABUX5oj… |
kyc.tier-3.v1 | Enhanced due diligence (regulated counterparties). (newly-registered) | 8fdd7707b57b… | 6gjTXCJE4q… |
audit.smart-contract.v1 | Audit attestation against a deployed program. (newly-registered) | e61adaa34c65… | HygALr1ZSq… |
audit.attestor-firm.v1 | Per-firm audit identity (Halborn / OtterSec / etc.). (newly-registered) | 17926cb4f324… | A5rrMRYxez… |
model-card.v1 | LLM model-version provenance attestation. (newly-registered) | d90347d0a0a7… | DZ7eneZtKs… |
jurisdiction.v1 | Regulatory-jurisdiction stamp (EU MiCA, US, etc.). (newly-registered) | ce2818907881… | Cd4sp8isN3… |
compliance.payments.v1 | Payment-network compliance attestation (Mastercard FACT-aligned, etc.). (newly-registered) | 0a8984a645e7… | Cn54CpSdfr… |
agent-source.v1 | Provenance: which dev shop authored the agent. (newly-registered) | 2328df178dc6… | DqSwaqENQh… |
usdc-payment-policy.v1 | USDC payment policy capability — Phase D attestor demo. (already-registered) | a968ecd0b93d… | 34gonn86Fj… |
Names are bounded by
MAX_NAME_LEN = 32perprograms/validation-registry/src/instructions/register_namespace.rs. PDA seeds:["capability", capability_hash].
Reproduce
The seeded namespace set is captured in examples/attestor-demo/devnet-namespaces.json — the source of truth this page is auto-generated from.
Re-run the seed script (idempotent — already-registered namespaces no-op):
pnpm --filter ./examples/attestor-demo run seed:namespacesThe script registers any missing namespaces from the canonical v1 set; cost is ~0.0023 SOL per fresh registration.