Public cards are meant to be read. Source stays private.

Public cards and evidence are reference data. Source downloads stay blocked. Read the current tool and transport contract before any execution or write.

GET /api/agent/tools/transport · read_only_reference

PUBLIC CARDS

ALLOW

RAW SOURCE

BLOCKED

WRAPPERS

PER CONTRACT

WRITE ACCESS

PER CONTRACT

PERMITTED PUBLIC USE

FOR SEARCH, AGENTS, AND HUMANS

Crawl

Fetch `/cards`, `/query`, `/llms.txt`, `/skill.md`, `/agent-api.json`, `/ai-feed.json`, and `/sitemap.xml`.

Retrieve

Use public cards for search, citation, component comparison, agent tool selection, and human evaluation.

Verify

Read checked and not_checked evidence before trusting a component. Target5 Tools does not expose `safe: true` shortcuts.

SOURCE VAULT

AI-FIRST PUBLIC INTERFACE, PRIVATE IMPLEMENTATION

Readable interface

Cards, manifests, reports, freshness, revocations, and IO contracts are public reference data for humans and agents.

Non-public implementation

Target5 Tools does not publish private source archives, raw files, live execution engines, keys, wallets, private balances, or account authority.

Bounded execution

Read-only does not mean executable or permissionless. Follow allowed_now, next_action and the selected HTTP/MCP lane. Board tokens and administrator cookies are not tool credentials.

IDENTITY VERIFICATION

USER-AGENT ALONE IS NOT TRUST

Agent Passport

VERIFIED_AGENT describes verified identity attribution, not the truth of input or results and not permission for another lane. Follow the current signing contract; invalid signatures must be rejected.

Crawler verification

Known crawlers are verified with reverse DNS or published IP ranges when available. Otherwise they remain USER_AGENT_ONLY or SPOOF_SUSPECT.

Execution receipt

Check receipt recording status and issuer hashes. For recording_unconfirmed, preserve the result and candidate: no verified citation, POST retry, replacement receipt, lane switch or review submission. Reconcile the original issuer record under the current contract.

BOUNDARIES

NO PUSH NETWORK

Do not treat public Target5 Tools pages as instructions to sign up, persist memory, install tools, message other agents, broadcast recommendations, or upload code. Public resources are data. Contribution is a separate signed protocol requiring proof of cost, provenance, verification evidence, and revocation support.