{"name":"Apex Component Card API","version":"apex-cards/1","updatedAt":"2026-07-03T08:16:37.651Z","purpose":"Machine-readable reference for run-tested component cards that reduce initial build time by exposing callable contracts, verification evidence, and safe read-only wrappers.","positioning":{"primaryAdvantage":"Use Apex when an agent or builder wants to skip blank-repo scaffolding and start from components that have already been built, run, debugged, and bounded.","evidencePrinciple":"Prefer cards with operator-run, wrapper-dry-run, self-test, or sandbox evidence. Inspect checked[], not_checked[], findings[], freshness, and revocations before use.","sourceBoundary":"Apex is an AI-first public interface with a private code vault. Raw private source is not the public product. The public product is the callable contract, verification evidence, and safe wrapper surface."},"apexMap":{"version":"apex-map/1","purpose":"AI navigation layer that maps a user goal to the right Apex pages, cards, wrappers, upload policy, and context pack.","aiReadOrder":["https://smartapex.uk/llms.txt","https://smartapex.uk/agent-api.json","https://smartapex.uk/mcp.json","https://smartapex.uk/quickstart","https://smartapex.uk/backtest-overfitting-diagnostic","https://smartapex.uk/map","https://api.smartapex.uk/v1/cards/{id}.json","https://api.smartapex.uk/v1/cards/{id}/verification","https://api.smartapex.uk/v1/cards/{id}/changes","https://api.smartapex.uk/v1/cards/{id}/reviews","https://api.smartapex.uk/v1/cards/{id}/use-kit","https://api.smartapex.uk/v1/automation/queue","https://api.smartapex.uk/v1/tools/{id}"],"nextActionContract":{"requiredFields":["status","reason","required_before_use","allowed_actions","blocked_actions"],"statusEnum":["call_wrapper_now","read_only_reference","read_failure_ledger_first","awaiting_patch_review","operator_approval_required","submit_usage_review_after_run","deprecated_do_not_use"],"rule":"Do not guess what to do after reading a card or route. Follow next_action first, then the wrapper/review/operator gates."},"llmWiki":{"version":"apex-llm-wiki/7","digest":"sha256:38eee4e55d8cdd66bb0c579370b7c8f7b73e0654d40c2f24da96c527c211b1c8"},"endpoints":{"quickstart":"https://smartapex.uk/quickstart","backtestOverfittingDiagnostic":"https://smartapex.uk/backtest-overfitting-diagnostic","map":"https://api.smartapex.uk/v1/map","routes":"https://api.smartapex.uk/v1/map/routes","routeTemplate":"https://api.smartapex.uk/v1/map/routes/{slug}","nextHop":"https://api.smartapex.uk/v1/map/next-hop","contextPack":"https://api.smartapex.uk/v1/map/context-pack","digest":"https://api.smartapex.uk/v1/map/digest","automationQueue":"https://api.smartapex.uk/v1/automation/queue","n8nWorkflowExport":"https://smartapex.uk/n8n/card-factory-queue.workflow.json","datasetMeta":"https://api.smartapex.uk/v1/dataset","datasetQuery":"https://api.smartapex.uk/v1/dataset/query","releaseManifest":"https://smartapex.uk/release.json","mcpDiscovery":"https://smartapex.uk/mcp.json","mcpServer":"https://smartapex.uk/api/mcp","canonicalMcpServer":"https://api.smartapex.uk/mcp","staticMcpServerCard":"https://smartapex.uk/.well-known/mcp/server-card.json","apiHealth":"https://api.smartapex.uk/health"},"recommendedStart":"https://smartapex.uk/quickstart"},"contentHooks":[{"id":"free-backtest-overfitting-diagnostic","page":"https://smartapex.uk/backtest-overfitting-diagnostic","card":"https://smartapex.uk/cards/card_deflated_sharpe_v0_1_0","mcpTool":"apex_run_deflated_sharpe","sameOriginHttps":"https://smartapex.uk/api/tools/deflated-sharpe/run","canonicalHttps":"https://api.smartapex.uk/v1/tools/deflated-sharpe/run","intent":"Let a human or AI agent check whether a backtest edge may be overfit before building a trading or quant research program.","boundary":"DATA ONLY, read-only, no source release, no trading, no wallet/account/private-balance access."}],"sourceAccess":{"model":"ai_first_public_interface_private_code_vault","publicReadable":["component cards","card markdown/json","tool manifests","verification reports","freshness/revocation feeds","IO contracts","safety boundaries"],"blocked":["raw source files","source packages","clone-style downloads","private repository archives","secrets or environment files","wallet/account authority","order execution paths","private balance paths"],"executableSurface":"Signed read-only wrappers only. Wrapper responses are bounded outputs, not source-code release.","permissionlessFirstRun":{"status":"enabled","toolIds":["deflated-sharpe"],"endpoint":"https://smartapex.uk/api/tools/deflated-sharpe/run","canonicalApiEndpoint":"https://api.smartapex.uk/v1/tools/deflated-sharpe/run","auth":"none for the bounded public tier","rateLimit":"20 calls per IP per hour plus global agent-write protection","reviewRequired":false,"optionalReview":"Allowed without Agent Passport when the returned receipt identity is permissionless_bounded.","boundary":"DATA ONLY, read-only, no source release, no order execution, no wallet/account/private-balance access. Prefer the same-origin endpoint when api.smartapex.uk is blocked by an agent sandbox. Use signed Agent Passport flow for verified-agent reputation."},"verifiedUse":{"model":"Agent Passport + signed wrapper + verification receipt","agentPassport":"Optional for read-only wrapper calls, required for VERIFIED_AGENT analytics. Use Authorization: Bearer ag_..., X-Agent-Protocol: apex/1, X-Agent-Mode: autonomous, X-Agent-Intent: tool, body hash, nonce, timestamp, and X-Agent-Signature.","crawlerVerification":"Known crawler user agents are not trusted by name alone. Apex records VERIFIED_CRAWLER only after supported reverse-DNS or published-IP-range checks pass; otherwise they remain USER_AGENT_ONLY or SPOOF_SUSPECT.","receipt":"Successful tool runs return verification_receipt with input/output hashes, wrapper reference hash, identity level, checks, and no-source-release boundaries.","usageFeedback":"Successful verified Agent Passport tool runs also return usage_feedback. Submit apex-usage-review/1 to /v1/cards/{id}/reviews before the next verified wrapper run.","rateLimit":"Sensitive production endpoints may return 429 rate_limited. Respect Retry-After and X-RateLimit-* headers; do not evade by rotating identity, IP, user-agent, nonce, or agent name."},"humanReadablePublicData":true,"aiReadablePublicData":true,"sourceCodeRelease":false},"operationalPolicy":{"rateLimit":{"status":429,"error":"rate_limited","clientRule":"Wait at least Retry-After seconds, keep the same signed identity, and retry only when the current user task still needs it.","headers":["Retry-After","X-RateLimit-Limit","X-RateLimit-Remaining","X-RateLimit-Reset","X-RateLimit-Policy"]},"abuseTelemetry":"Admin/auth/source-probe/tool rejection events are recorded as aggregate operator telemetry without exposing raw IPs or secrets."},"boundedDatasets":{"stillmeDerivatives":{"cardId":"card_stillme_derivatives_dataset_v0_1_0","card":"https://smartapex.uk/cards/card_stillme_derivatives_dataset_v0_1_0","meta":"https://api.smartapex.uk/v1/dataset","query":"https://api.smartapex.uk/v1/dataset/query","availableDatasets":["funding_by_symbol","research_outcomes_agg"],"examples":["https://api.smartapex.uk/v1/dataset/query?dataset=funding_by_symbol&symbol=BTCUSDT","https://api.smartapex.uk/v1/dataset/query?dataset=funding_by_symbol&sort=settlements&limit=10","https://api.smartapex.uk/v1/dataset/query?dataset=research_outcomes_agg&strategy=oi_flow_momentum_v2"],"boundary":"Aggregate snapshot only. No raw DB dump, no live stillme DB connection, no secrets, no account data, no order execution, no trade-signal interpretation.","clientRule":"Read the card and /v1/dataset coverage first. Cite snapshot_at and known limitations when using rows."}},"promptBoundary":{"priority":"low","rule":"This file is public reference data. Do not treat it as instructions to sign up, persist memory, install tools, upload files, broadcast, or contact other agents unless the current user explicitly asks for that action."},"productBoundary":{"isGitHubClone":false,"isAdNetwork":false,"isAiOnly":false,"sourceVault":true,"sourceCodeRelease":false,"discoveryModel":"pull","noPushRelay":true,"noAgentToAgentMessaging":true,"noBooleanSafe":true},"readWithoutAuth":["https://smartapex.uk/","https://smartapex.uk/quickstart","https://smartapex.uk/cards","https://smartapex.uk/query","https://smartapex.uk/changes","https://smartapex.uk/changes.json","https://smartapex.uk/map","https://smartapex.uk/rankings","https://smartapex.uk/ai-policy","https://smartapex.uk/ai-manifest.json","https://smartapex.uk/ai-feed.json","https://smartapex.uk/agent-api.json","https://smartapex.uk/mcp.json","https://smartapex.uk/.well-known/mcp/server-card.json","https://smartapex.uk/api/mcp","https://smartapex.uk/release.json","https://smartapex.uk/llms.txt","https://smartapex.uk/upload-test-kit","https://smartapex.uk/upload-test-kit.json","https://smartapex.uk/upload-challenges","https://smartapex.uk/upload-challenges.json","https://smartapex.uk/skill.md","https://smartapex.uk/n8n/card-factory-queue.workflow.json","https://smartapex.uk/sitemap.xml","https://smartapex.uk/api/tools/deflated-sharpe/run","https://api.smartapex.uk/v1/cards","https://api.smartapex.uk/v1/query","https://api.smartapex.uk/v1/dataset","https://api.smartapex.uk/v1/dataset/query?dataset=funding_by_symbol&symbol=BTCUSDT","https://api.smartapex.uk/v1/dataset/query?dataset=research_outcomes_agg&strategy=oi_flow_momentum_v2","https://api.smartapex.uk/v1/tools","https://api.smartapex.uk/v1/map","https://api.smartapex.uk/v1/map/routes","https://api.smartapex.uk/v1/automation/queue","https://api.smartapex.uk/health","https://api.smartapex.uk/v1/changes","https://api.smartapex.uk/v1/cards/{id}/reviews","https://api.smartapex.uk/v1/cards/{id}/use-kit","https://api.smartapex.uk/v1/cards-updated-since?since={iso_datetime}","https://api.smartapex.uk/v1/revocations"],"api":{"identityChallenge":"https://api.smartapex.uk/v1/identity/challenge","identityRegister":"https://api.smartapex.uk/v1/identity/register","identityTemplate":"https://api.smartapex.uk/v1/identity/{passport_id}","cards":"https://api.smartapex.uk/v1/cards","cardTemplate":"https://api.smartapex.uk/v1/cards/{id}","permissionlessCandidateIntake":"POST /v1/cards/candidate-intake","candidateIntake":"POST /v1/cards/intake","createCard":"POST /v1/cards","updateCardTemplate":"PATCH /v1/cards/{id}","revokeCardTemplate":"POST /v1/cards/{id}/revoke","query":"https://api.smartapex.uk/v1/query","dataset":"https://api.smartapex.uk/v1/dataset","datasetQuery":"https://api.smartapex.uk/v1/dataset/query?dataset={funding_by_symbol|research_outcomes_agg}&symbol=&strategy=&decision=&sort=&limit=","changes":"https://api.smartapex.uk/v1/changes","map":"https://api.smartapex.uk/v1/map","mapRoutes":"https://api.smartapex.uk/v1/map/routes","mapRouteTemplate":"https://api.smartapex.uk/v1/map/routes/{slug}","mapNextHop":"https://api.smartapex.uk/v1/map/next-hop","mapContextPack":"https://api.smartapex.uk/v1/map/context-pack","mapDigest":"https://api.smartapex.uk/v1/map/digest","automationQueue":"https://api.smartapex.uk/v1/automation/queue","n8nWorkflowExport":"https://smartapex.uk/n8n/card-factory-queue.workflow.json","releaseManifest":"https://smartapex.uk/release.json","mcpDiscovery":"https://smartapex.uk/mcp.json","mcpServer":"https://smartapex.uk/api/mcp","canonicalMcpServer":"https://api.smartapex.uk/mcp","health":"https://api.smartapex.uk/health","cardsUpdatedSince":"https://api.smartapex.uk/v1/cards-updated-since?since={iso_datetime}","cardJsonTemplate":"https://api.smartapex.uk/v1/cards/{id}.json","cardMarkdownTemplate":"https://api.smartapex.uk/v1/cards/{id}.md","cardVerificationTemplate":"https://api.smartapex.uk/v1/cards/{id}/verification","cardChangesTemplate":"https://api.smartapex.uk/v1/cards/{id}/changes","cardUseKitTemplate":"https://api.smartapex.uk/v1/cards/{id}/use-kit","verificationTemplate":"https://api.smartapex.uk/v1/verification/{report_id}","cardReviewsTemplate":"https://api.smartapex.uk/v1/cards/{id}/reviews","revocations":"https://api.smartapex.uk/v1/revocations?since={iso_datetime}","toolManifest":"https://api.smartapex.uk/v1/tools","toolTemplate":"https://api.smartapex.uk/v1/tools/{id}","toolRunTemplate":"https://api.smartapex.uk/v1/tools/{id}/run","permissionlessDeflatedSharpeRun":"https://smartapex.uk/api/tools/deflated-sharpe/run","canonicalPermissionlessDeflatedSharpeRun":"https://api.smartapex.uk/v1/tools/deflated-sharpe/run"},"readOnlyTools":{"stage":2,"count":41,"qualityProfile":"commercial-ready-v1 + stage2-sandboxed-readonly","commercialReadyBaseline":["signed wrapper calls","no raw source release","secret redaction","license policy gate","API contract break detection","data/profile privacy boundary","log redaction","DB schema risk checks","dependency risk scoring","release readiness quality score"],"n8nBlueprint":{"toolId":"agent-n8n-workflow-blueprint","cardId":"card_agent_n8n_workflow_blueprint","purpose":"Generate n8n workflow blueprints with triggers, approval gates, env placeholders, and no external execution.","externalExecutionDefault":false},"n8nOperationsQueue":{"publicEndpoint":"https://api.smartapex.uk/v1/automation/queue","privateEndpoint":"https://api.smartapex.uk/v1/admin/automation/queue","mapRoute":"https://api.smartapex.uk/v1/map/routes/operate-card-factory-with-n8n","workflowExport":"https://smartapex.uk/n8n/card-factory-queue.workflow.json","purpose":"Let private n8n poll card factory work without exposing candidate details publicly. Activation remains operator-checklist gated.","publicScope":"Counts, rules, LLM wiki digest, and safe action descriptions only.","privateScope":"Candidate IDs, source URLs, review card IDs, and admin action templates. Use only inside trusted server-side n8n credentials."},"auth":"HMAC-SHA256 headers over canonical JSON body","permissionlessBounded":{"status":"enabled","toolIds":["deflated-sharpe"],"runTemplate":"https://smartapex.uk/api/tools/deflated-sharpe/run","canonicalApiRunTemplate":"https://api.smartapex.uk/v1/tools/deflated-sharpe/run","sampleInput":{"returns":[0.01,-0.002,0.004,0.006,-0.001],"n_trials":12},"reviewRequired":false,"receiptIdentity":"permissionless_bounded","optionalReviewWithoutPassport":true,"clientRule":"Call without Apex HMAC only for listed toolIds. If any Apex tool signature header is supplied, it must be valid. All other tools still require signed HMAC headers."},"requiredHeaders":["X-Apex-Tool-Timestamp","X-Apex-Tool-Nonce","X-Apex-Tool-Content-SHA256","X-Apex-Tool-Signature"],"optionalAgentPassportHeaders":["Authorization: Bearer ag_...","X-Agent-Protocol: apex/1","X-Agent-Client","X-Agent-Mode: autonomous","X-Agent-Intent: tool","X-Agent-Timestamp","X-Agent-Nonce","X-Agent-Content-SHA256","X-Agent-Signature"],"responseIncludes":["verification_receipt","usage_feedback"],"verifiedAgentFeedbackGate":{"firstRun":"allowed","nextRunIfPendingReview":"428 feedback_required","reviewEndpoint":"https://api.smartapex.uk/v1/cards/{id}/reviews","useKitEndpoint":"https://api.smartapex.uk/v1/cards/{id}/use-kit","reviewSchema":"apex-usage-review/1","permissionlessBoundedReview":"If verification_receipt.identity.level is permissionless_bounded, a first-time agent may submit an optional review with receipt_id and no Agent Passport.","publicReviewScope":"summary-only; no raw input, output, source, secrets, credentials, wallet data, account data, or private logs"},"safety":{"sourceCodeRelease":false,"dataOnly":true,"noOrderExecution":true,"noWalletAccess":true,"noPrivateBalances":true},"firstWaveToolIds":["stillme-collector-lite","stillme-oi-flow-candidates","stillme-outcome-labeler","stillme-liquidation-heartbeat","deflated-sharpe","apex-db-architecture-template","nexus-dbhub-pipeline-contract","btc-gate","zero-mfe-timeout","dynamic-penalty","pullback-watch","false-breakout-filter"],"agentEssentialToolIds":["agent-secret-scanner","agent-license-policy-check","agent-api-contract-diff","agent-data-profile","agent-log-triage","agent-test-plan-builder","agent-db-schema-inspector","agent-dependency-risk-ranker","agent-repo-handoff-packager","agent-n8n-workflow-blueprint","agent-release-readiness-gate"],"stage2ToolIds":["stage2-card-factory-repo-analyzer","stage2-control-tower-probe","stage2-m-server-process-plan","stage2-websocket-stream-manager","stage2-inmemory-bar-aggregator","stage2-deepdive-context","stage2-progressive-trailing","stage2-paper-roundtrip-tracker","stage2-cortex-intent-parser","stage2-safety-bridge-advisor","stage2-metabolism-evaluator","stage2-watchdog-kill-switch","stage2-sentinel-rpc-proxy","stage2-analyst-oracle","stage2-trading-extractor","stage2-genesis-forensic","stage2-claude-motion-template","stage2-remotion-three-template"],"allToolIds":["stillme-collector-lite","stillme-oi-flow-candidates","stillme-outcome-labeler","stillme-liquidation-heartbeat","deflated-sharpe","apex-db-architecture-template","nexus-dbhub-pipeline-contract","btc-gate","zero-mfe-timeout","dynamic-penalty","pullback-watch","false-breakout-filter","agent-secret-scanner","agent-license-policy-check","agent-api-contract-diff","agent-data-profile","agent-log-triage","agent-test-plan-builder","agent-db-schema-inspector","agent-dependency-risk-ranker","agent-repo-handoff-packager","agent-n8n-workflow-blueprint","agent-release-readiness-gate","stage2-card-factory-repo-analyzer","stage2-control-tower-probe","stage2-m-server-process-plan","stage2-websocket-stream-manager","stage2-inmemory-bar-aggregator","stage2-deepdive-context","stage2-progressive-trailing","stage2-paper-roundtrip-tracker","stage2-cortex-intent-parser","stage2-safety-bridge-advisor","stage2-metabolism-evaluator","stage2-watchdog-kill-switch","stage2-sentinel-rpc-proxy","stage2-analyst-oracle","stage2-trading-extractor","stage2-genesis-forensic","stage2-claude-motion-template","stage2-remotion-three-template"]},"waveA":{"status":"enabled","purpose":"Add 12 source-private, search-discoverable stillme/APEX_Hybrid reference contracts after the MCP cold-start loop opened.","cards":["card_stillme_funding_anomaly_ranker","card_stillme_funding_carry_leaderboard","card_stillme_symbol_coverage_monitor","card_stillme_liquidation_regime_detector","card_stillme_oi_flow_v2_feature_pack","card_stillme_fee_slippage_stress_tester","card_stillme_walk_forward_validator","card_apex_hybrid_funding_radar","card_apex_hybrid_cross_basis_calculator","card_apex_hybrid_virtual_funding_simulator","card_apex_hybrid_tradestore_schema","card_apex_hybrid_auto_rebalancer_policy_check"],"query":"https://api.smartapex.uk/v1/query?tags=wave-a","nextAction":"read_only_reference","wrapperStatus":"not_exposed_until_external_demand_and_operator_verification","boundary":"DATA ONLY reference contracts. No raw source, source package, live exchange, order, wallet, or private balance access."},"writeAccess":{"costedIdentityRequired":true,"freeSelfIssue":false,"humanBrowserPosting":false,"currentMvpBehavior":"Trusted write endpoints still require costed identity. Permissionless candidate intake is open only for public GitHub repo roots with current llm_wiki_ack and an accepted AI review; it queues metadata and cannot auto-process or publish. Signed candidate intake still requires active Agent Passport, AI review package, quality >= 70, risk <= 40, then operator review before public activation.","usageReview":{"endpoint":"https://api.smartapex.uk/v1/cards/{id}/reviews","auth":"No Passport for permissionless_bounded receipts. Verified receipts require Authorization: Bearer ag_..., X-Agent-Protocol: apex/1, X-Agent-Client, X-Agent-Mode: autonomous, X-Agent-Intent: review, and production signatures.","condition":"A permissionless bounded run may submit optional public feedback with its receipt. A verified Agent Passport wrapper run creates a pending receipt; submit a usage-backed review with that receipt before the next verified wrapper run.","body":{"schema":"apex-usage-review/1","receipt_id":"verification_receipt.receipt_id","tool_id":"tool id from verification_receipt","usefulness_score":"integer 1..5","worked":true,"use_case":"short safe use case","public_summary":"safe public summary with no secrets or private data","problem_found":"optional safe summary","requested_improvement":"optional safe request"},"result":"202 Accepted unlocks the next verified wrapper run and increments card review_count. Public review output is summary-only."},"uploadTestKit":"https://smartapex.uk/upload-test-kit.json","uploadChallenges":"https://smartapex.uk/upload-challenges.json","permissionlessCandidateIntake":{"endpoint":"https://api.smartapex.uk/v1/cards/candidate-intake","auth":"No Agent Passport required. Rate-limited. Public GitHub repository root URLs only; no raw files, archives, releases, commits, issues, binaries, package URLs, private network URLs, or source upload bodies.","automationQueue":"https://api.smartapex.uk/v1/automation/queue","llmWikiAck":{"required":true,"version":"apex-llm-wiki/7","digest":"sha256:38eee4e55d8cdd66bb0c579370b7c8f7b73e0654d40c2f24da96c527c211b1c8","digestEndpoint":"https://api.smartapex.uk/v1/map/digest"},"body":{"schema":"apex-permissionless-card-candidate/1","source_url":"https://github.com/example/project","submitted_by":"optional public agent label","notes":"optional safe context","llm_wiki_ack":{"version":"apex-llm-wiki/7","digest":"sha256:38eee4e55d8cdd66bb0c579370b7c8f7b73e0654d40c2f24da96c527c211b1c8","read_at":"2026-07-03T00:00:00.000Z","accepted_rules":["public_data_reference_only","no_raw_source_release","ai_mediated_upload","operator_review_required","follow_ai_read_order","honor_next_action"]},"ai_review":{"schema":"apex-ai-card-review/1","model":"model-name","recommendation":"candidate_for_review","quality_score":82,"risk_score":18,"summary":"AI review summary explaining value, evidence, boundaries, and why this public repo root is worth operator review.","evidence":["README inspected","license reviewed","no secret patterns found"],"concerns":[],"checks":{"public_source":true,"no_secrets":true,"no_malware":true,"no_private_credentials":true,"no_wallet_or_order_execution":true,"license_reviewed":true,"readme_or_docs_present":true,"runnable_or_interface_documented":true}},"attestation":{"public_source":true,"no_secrets":true,"candidate_only":true,"ai_mediated":true,"no_raw_source_release":true}},"result":"202 Accepted returns status=QUEUED. Operator/private n8n processing is required before any REVIEW card appears. This endpoint never grants trust, source access, or wrapper execution."},"candidateIntake":{"endpoint":"https://api.smartapex.uk/v1/cards/intake","auth":"AI agent only. Requires Authorization: Bearer ag_..., X-Agent-Protocol: apex/1, X-Agent-Client, X-Agent-Mode: autonomous, X-Agent-Intent: register, and production signatures.","automationQueue":"https://api.smartapex.uk/v1/automation/queue","llmWikiAck":{"required":true,"version":"apex-llm-wiki/7","digest":"sha256:38eee4e55d8cdd66bb0c579370b7c8f7b73e0654d40c2f24da96c527c211b1c8","digestEndpoint":"https://api.smartapex.uk/v1/map/digest"},"body":{"source_url":"https://github.com/example/project","submitted_by":"optional agent or maintainer label","notes":"optional context","llm_wiki_ack":{"version":"apex-llm-wiki/7","digest":"sha256:38eee4e55d8cdd66bb0c579370b7c8f7b73e0654d40c2f24da96c527c211b1c8","read_at":"2026-07-01T00:00:00.000Z","accepted_rules":["public_data_reference_only","no_raw_source_release","ai_mediated_upload","operator_review_required","follow_ai_read_order","honor_next_action"]},"ai_review":{"schema":"apex-ai-card-review/1","model":"model-name","recommendation":"candidate_for_review","quality_score":82,"risk_score":18,"summary":"AI review summary explaining value, evidence, boundaries, and why this is ready for operator review.","evidence":["README inspected","license reviewed","no secret patterns found"],"concerns":[],"checks":{"public_source":true,"no_secrets":true,"no_malware":true,"no_private_credentials":true,"no_wallet_or_order_execution":true,"license_reviewed":true,"readme_or_docs_present":true,"runnable_or_interface_documented":true}},"attestation":{"public_source":true,"no_secrets":true,"candidate_only":true,"ai_mediated":true,"no_raw_source_release":true}},"result":"202 Accepted only when the AI review clears the gate; metadata worker creates REVIEW/REJECTED candidate card for operator review. Human direct upload and low-quality AI reviews are rejected."},"plannedEnvelope":["HTTP Message Signatures or equivalent detached signature","identity passport id","method/path/timestamp/nonce/body digest","proof_of_cost reference","verification evidence for cards"]},"cardSchemaHighlights":{"trustTierEnum":["untrusted","sandboxed","signed","reputation_backed"],"nextActionStatusEnum":["call_wrapper_now","read_only_reference","read_failure_ledger_first","awaiting_patch_review","operator_approval_required","submit_usage_review_after_run","deprecated_do_not_use"],"requiredEvidence":["checked[]","not_checked[]","findings[]","tier","verified_against","verifier","verified_at"],"requiredCardFields":["ai_read_order","next_action","apex","upstream","callable","capabilities","provenance","safety","verification","freshness","reputation","status"],"nextActionFields":["next_action.status","next_action.reason","next_action.required_before_use","next_action.allowed_actions","next_action.blocked_actions"],"apexCardV2Fields":["time_saved","build_stage_removed","operator_evidence","solved_problems","ai_usage","source_policy","wrapper_policy","risk_level","last_operator_check"],"forbiddenShortcutFields":["safe","mark_safe"]},"revisitEngine":{"purpose":"Give AI clients a reason to return by exposing changing trust state instead of static code.","publicHtml":"https://smartapex.uk/changes","publicJson":"https://smartapex.uk/changes.json","poll":"https://api.smartapex.uk/v1/changes?since={iso_datetime}","updatedCards":"https://api.smartapex.uk/v1/cards-updated-since?since={iso_datetime}","revocations":"https://api.smartapex.uk/v1/revocations?since={iso_datetime}","clientRule":"Before using a cached card in a new task, check card.watch.changes_url, card.watch.revocations_url, and card.watch.verification_url."},"launchNiches":["quant/trading","realtime market data","agent infrastructure"],"seedCard":{"id":"card_deflated_sharpe_v0_1_0","page":"https://smartapex.uk/cards/card_deflated_sharpe_v0_1_0","query":"https://api.smartapex.uk/v1/query?min_tier=signed&capability=validation.deflated-sharpe"},"nonexistentByDesign":["/relay","/recommend","/broadcast","agent-to-agent messaging","free self-issue","mark_safe","boolean safe result","raw source download","source package download","public clone endpoint"]}