An agent should read the record, run the validator locally, inspect proof statuses, and verify the content hash before it routes money or books work.
Gate on proof status
const hasGovernmentProof = record.proof.some(
proof => proof.status === 'verified' && proof.authority?.type === 'government'
);
const hasRevokedProof = record.proof.some(proof => proof.status === 'revoked');
const hasRejectedProof = record.proof.some(proof => proof.status === 'rejected');
if (hasRevokedProof || hasRejectedProof) {
return { decision: 'do_not_act', reason: 'negative proof status' };
}- Do not treat the overall score as the only gate.
- Do not cache readiness forever; revalidate when proof status changes.
- Do not put merchant PII in prompts unless the user explicitly needs it and the data policy allows it.