{
  "certification_version": "aux-certification-requirements-0.1.0",
  "profiles_version": "aux-certification-profiles-0.1.0",
  "profile_id": "vendor_payment_pre_action",
  "profile_version": "1.0.0",
  "certification_scope": "vendor_payment_pre_action",
  "endpoint": "https://api.aux.prdictionedge.ai/v1/certification-requirements?profile_id=vendor_payment_pre_action",
  "profiles_endpoint": "https://api.aux.prdictionedge.ai/v1/certification-profiles",
  "request_shape": {
    "profile_id": "optional string; default vendor_payment_pre_action",
    "proposal": "object",
    "transaction_history": "array when required by the selected profile",
    "source_attestations": "array of {source_domain,jws} when required by the selected profile",
    "evidence_bundles": "optional previously issued AUX evidence bundles"
  },
  "requirements": [
    {
      "id": "transaction_identity",
      "title": "Transaction identity and amount",
      "why": "Bind the requested action to one transaction, invoice number, and amount before AUX evaluates it.",
      "responsibility": "CALLER",
      "source_requirement": "CALLER_ORIGINATED",
      "acceptable_evidence": [
        "transaction object supplied in the request"
      ],
      "required_fields": [
        "proposal.transaction_id",
        "proposal.invoice.number",
        "proposal.invoice.amount"
      ]
    },
    {
      "id": "invoice_source_integrity",
      "title": "Invoice source and document integrity",
      "why": "AUX must tie the invoice number and amount to an actual invoice artifact rather than a bare caller assertion.",
      "responsibility": "CALLER",
      "source_requirement": "CALLER_PROVIDED_VERIFIABLE_ARTIFACT",
      "acceptable_evidence": [
        "invoice artifact hash plus independently trust-anchored signed invoice/AP source attestation"
      ],
      "required_fields": [
        "proposal.invoice.number",
        "proposal.invoice.amount"
      ]
    },
    {
      "id": "sanctions_identity",
      "title": "Independent sanctions identity screening",
      "why": "A caller-provided sanctions flag cannot independently certify the counterparty.",
      "responsibility": "AUX",
      "source_requirement": "AUX_INDEPENDENT_SOURCE",
      "acceptable_evidence": [
        "authoritative public sanctions data resolved by AUX"
      ],
      "required_fields": [
        "proposal.vendor.id",
        "proposal.vendor.name"
      ]
    },
    {
      "id": "legal_entity_status",
      "title": "Independent legal-entity status and address",
      "why": "Corporate existence, status, and registered address must be resolved outside the calling agent.",
      "responsibility": "AUX",
      "source_requirement": "AUX_INDEPENDENT_SOURCE",
      "acceptable_evidence": [
        "GLEIF record where applicable",
        "authoritative corporate registry",
        "equivalent independently trust-anchored source attestation"
      ],
      "required_fields": [
        "proposal.vendor.id",
        "proposal.vendor.name"
      ]
    },
    {
      "id": "domain_identity",
      "title": "Independent domain identity",
      "why": "AUX should resolve whether the presented vendor domain belongs to the expected counterparty instead of trusting a lookalike-domain boolean.",
      "responsibility": "BOTH",
      "source_requirement": "AUX_INDEPENDENT_SOURCE",
      "acceptable_evidence": [
        "caller supplies vendor domain; AUX resolves IANA RDAP plus HTTPS domain-control identity evidence",
        "equivalent independently trust-anchored source attestation"
      ],
      "required_fields": [
        "proposal.vendor.domain"
      ]
    },
    {
      "id": "vendor_history",
      "title": "Independent or authorized vendor transaction history",
      "why": "Duplicate invoices, amount anomalies, and destination changes require a trustworthy historical baseline.",
      "responsibility": "BOTH",
      "source_requirement": "AUTHORIZED_HISTORY_SOURCE",
      "acceptable_evidence": [
        "independently trust-anchored signed ERP/AP/payment-history attestation bound to the history hash"
      ],
      "required_fields": [
        "transaction_history[].vendor_id",
        "transaction_history[].invoice_number",
        "transaction_history[].amount",
        "transaction_history[].bank_fingerprint"
      ]
    },
    {
      "id": "bank_destination",
      "title": "Independent bank-destination consistency",
      "why": "The payment destination must be tied to an authorized financial or payment source rather than a caller-supplied fingerprint alone.",
      "responsibility": "BOTH",
      "source_requirement": "AUTHORIZED_FINANCIAL_SOURCE",
      "acceptable_evidence": [
        "independently trust-anchored signed bank/payment-system attestation bound to the destination fingerprint"
      ],
      "required_fields": [
        "proposal.payment.bank_fingerprint"
      ]
    },
    {
      "id": "agent_authority",
      "title": "Authority to perform the consequential action",
      "why": "A transaction can be factually clean while the acting agent still lacks authority to execute it.",
      "responsibility": "BOTH",
      "source_requirement": "TRUSTED_DELEGATION_OR_POLICY",
      "acceptable_evidence": [
        "independently trust-anchored signed delegation/policy attestation bound to agent, action, transaction, and value limit"
      ],
      "required_fields": [
        "delegation or policy reference"
      ]
    }
  ],
  "source_attestation_contract": "https://api.aux.prdictionedge.ai/v1/evidence/source-attestation",
  "certification_endpoint": "https://api.aux.prdictionedge.ai/v1/certifications",
  "durable_attempts_endpoint": "https://api.aux.prdictionedge.ai/v1/certification-attempts",
  "note": "POST the selected profile plus its caller data. AUX resolves supported public reference evidence automatically and returns only caller-action gaps, adverse evidence, a temporary-source state, or CERTIFIED through the certification endpoint.",
  "price_usd": 0
}