{
  "schema": "nodevertex.capability-manifest@1",
  "name": "SynthSecret Secret Vertex",
  "version": 1,
  "application": "synthsecret",
  "applicationNamespace": "synthsecret.com",
  "resourcePath": "synthsecret.com/{tenantUid}/exchanges/{id}",
  "capabilities": [
    {
      "name": "identity.assert",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "identity.verify",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "key.publish",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "key.resolve",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.create",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.authorize",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.send",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.receive",
      "nano": {
        "input": "versioned typed request",
        "output": "encrypted envelope"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.acknowledge",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.revoke",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.expire",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    },
    {
      "name": "secret.inspect",
      "nano": {
        "input": "versioned typed request",
        "output": "authorized metadata"
      },
      "pico": {
        "authentication": "credential + possession proof",
        "authorization": "participant + tenant policy + exchange grant"
      },
      "micro": {
        "transport": "HTTPS",
        "endpoint": "https://synthsecret.com/v1/capabilities/execute"
      }
    }
  ],
  "events": [
    "secret.exchange.requested",
    "secret.exchange.authorized",
    "secret.available",
    "secret.retrieved",
    "secret.acknowledged",
    "secret.revoked",
    "secret.expired"
  ],
  "redaction": {
    "plaintext": "forbidden",
    "ciphertext": "excluded from events, logs, search, memory and model transcripts",
    "privateKeys": "forbidden",
    "auditFields": [
      "exchangeId",
      "type",
      "at",
      "tenant",
      "sender",
      "recipient",
      "context"
    ]
  },
  "idempotency": "required for create",
  "correlation": "x-request-id"
}