{
  "format": "vercy-enterprise-adoption-profile/v1",
  "contourId": "EM-AI-01",
  "name": "Enterprise AI Agent and Execution",
  "decision": "PROFILE",
  "newRuntimeId": false,
  "bases": [
    "WM-AI-001",
    "WM-AI-002",
    "WM-AI-005",
    "WM-AI-004"
  ],
  "constraints": [
    "WM-AI-001 remains the governed AI System accountability and use-context boundary.",
    "WM-AI-002 remains a durable Agent definition whose assigned identity survives model-version, tool-set, endpoint-reference and run-time grant-attenuation changes.",
    "WM-AI-005 owns immutable content-addressed configuration revisions.",
    "WM-AI-004 owns one bounded run and references exactly one effective configuration digest.",
    "WM-SFT-004 remains the referenced model-artifact master; WM-AI-005 pins its immutable model-version reference and WM-AI-004 records the resolved model version.",
    "ToolBinding remains a relation only when configuration, agent and run carry typed references to a first-class external grant with independent identity, approval lineage and revocation lifecycle.",
    "InferenceEndpoint remains a relation only when an external runtime or network master identifies the destination, WM-AI-005 pins its serving contract and WM-AI-004 records the resolved endpoint and serving digest.",
    "Every configuration tool declaration pins tool and grant references, contract and schema digests, exact scopes, exact resource audience, effect class and required approval class.",
    "WM-AI-002 records who vetted each standing tool binding and against which grant; WM-AI-004 records tool, grant identifier, exercised scope, call audience, allow or deny result and vetted-set membership.",
    "Effective tool authority at action time is the intersection of principal rights, agent-held grant, declared tool scope, resource audience, unrevoked approval, delegated scope and effective configuration.",
    "Role labels never grant authority; accountable authority remains on a referenced human, organization or operator.",
    "Every delegation hop narrows or preserves authority, retains exclusions and obeys a maximum depth.",
    "Every run records the stable agent, accountable authority, configuration revision, requested and responding models, tool snapshot, ordered trajectory, grant and approval decisions, resolved endpoints and outputs.",
    "Every run pins derived, non-identifying SHA-256 digests over canonical bytes: base uses domain vercy.ai.config.base.v1 and effective uses domain vercy.ai.config.effective.v1.",
    "Dynamic grant and approval state is excluded from the immutable base digest and included by reference and decision result in the effective digest.",
    "A run keeps one immutable configuration revision; each authorization observation records invocation time, grant and approval revisions, revocation-effective time and a deterministic tie rule under one declared UTC time basis.",
    "Grant revocation blocks invocations ordered at or after its effective time without rewriting earlier observations or changing Agent identity.",
    "The accountable authority recorded by a run equals the Agent's governed authority unless the run cites the effective governed transfer record.",
    "Accountable-authority, purpose or trust-domain change creates a new Agent by default; an identity-preserving operator transfer requires an explicit governed transfer record.",
    "Configuration, run, model, agent, endpoint, grant and tool service never mint each other's identifiers."
  ],
  "holds": [
    "Endpoint and tool-service references require reconciliation with WM-SFT-018, WM-SFT-010, WM-SFT-003 and service boundaries.",
    "The AI-01, AI-03, AI-04 and AI-07 field-level crosswalk is incomplete.",
    "Base models retain source-pin, ISO, deprecated MCP and development-telemetry holds.",
    "The external grant, approval and runtime endpoint masters must prove the identity and lifecycle conditions required to avoid ToolBinding and InferenceEndpoint masters.",
    "Per-tool scope, serving-contract and dual-digest extensions require multi-profile validation.",
    "One frozen independent audit remains pending."
  ],
  "version": "0.1.0",
  "assurance": "reviewable-research-profile",
  "publicationState": "published-partial",
  "runtimeId": null,
  "canonical": false,
  "installable": false
}