Standards and certification

# asc.yml: what this repo claims, and where the evidence is.
claims:
  - standard: EAO@1.0
    scope: agent/            # the agent code the claim covers
    notes: |
      Spending limits live in agent/limits.ts.
      Every purchase goes through the jury guard in agent/guard.ts.
  - standard: ETC@1.0
    scope: treasury/

const cert = await asc.certify({
  repo: 'github.com/example/agent',
  commit: '9f3c2e1',
  standards: ['EAO@1.0'],
  jury: { size: 5, quorum: 4, tier: 'standard' },
});
// cert.outcome: 'PASS' or 'NOT CERTIFIED', with a score, a report and an ASCII badge

# Certify every push to main against the standards this repo claims to meet.
# A certificate is a code review of one commit against a published standard,
# not a legal or safety certification. Planned API.
name: ASC certify
on:
  push:
    branches: [main]
jobs:
  certify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: verafy/asc-certify@v0     # planned
        with:
          standards: EAO@1.0, ETC@1.0   # Ethical Agent Operations, Ethical Treasury Conduct
          fail-on: fail                 # or: needs_evidence
          api-key: ${{ secrets.ASC_API_KEY }}
      # Writes asc-report.md to the job summary and the ASCII badge to the PR.

git ls-tree -r <commit> | awk '{print $4"\t"$3}' | LC_ALL=C sort | sha256sum