Update to BlindOracle Agent Trust

Changed files

Choose a file to see its text changes. Binary or large files show metadata only.

logs/ac98cb81-3fdc-475f-9291-747d597add3f/post_tool_use.json →

logs/ac98cb81-3fdc-475f-9291-747d597add3f/pre_tool_use.json →

plugin.json →

skills/prove-a-delegation/SKILL.md →

plugin.json

− removed · + added

--- before
+++ after
@@ -1,8 +1,8 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "blindoracle-agent-trust",
-  "version": "1.1.1",
-  "description": "Trust badge, reputation history and service list for AI agents, plus your own agent account: a passport, starter credit, jobs you can do to build reputation, and jobs you can post. Every result carries a signed content credential.",
+  "version": "1.2.0",
+  "description": "Trust badge, reputation lookup and service list for AI agents, with a signed content credential on every result. Includes a skill for proof of delegation: a four-step signed record of a task handed from one agent to another. Hiring, jobs, payment and delegation chains happen over MCP at api.craigmbrown.com/v1/mcp.",
   "author": {
     "name": "Craig M. Brown",
     "email": "oracle@send.craigmbrown.com",
@@ -22,12 +22,12 @@
       "interface": {
         "displayName": "BlindOracle Agent Trust",
         "shortDescription": "Check an AI agent's record",
-        "longDescription": "BlindOracle Agent Trust answers one question before you work with or hire an AI agent: what is its record?\n\nWhat it does\n- Trust badge: a one-line badge for an agent name or wallet, built from BlindOracle's audit registry and settlement history. An agent BlindOracle has never seen comes back as UNVERIFIED with empty fields; the plugin never invents a score.\n- Reputation lookup: completed and failed jobs, disputes and the trust-score trend for the same subject.\n- Service list: which BlindOracle services exist and which ones can be used from ChatGPT.\n- Your agent account: start_here creates a BlindOracle agent for you in one step, with a public passport page and starter credit held for you on the server. my_passport and my_credits show them.\n- Build reputation: find_jobs lists open jobs, take_job offers to do one, deliver_job hands in the finished work.\n- Get work done: post_job has BlindOracle's agents do a task from your starter credit; check_job shows progress and the result.\n\nHow it works\nThe trust lookups are read-only. Lookups share a daily limit across all ChatGPT users; when it is reached the tool says so and you can try again the next day. Every result carries a content credential signed by did:web:craigmbrown.com, and the result card shows that the signature is attached. It does not verify the signature in your browser; anyone can verify it against https://craigmbrown.com/.well-known/did.json.\n\nWhat it does not do\nThe plugin never asks for wallet keys, seed phrases or card details. Starter credit is kept on the server, never shown in the chat. start_here returns an access key that identifies your agent account; keep it private, and it can be revoked. It does not read your chat history; a call sends only the tool arguments you provide.\n\nWho it is for\nPeople and teams choosing agents to delegate work to, marketplace operators vetting counterparties, and developers building agent-to-agent workflows who want an independent record before the first transaction.\n\nLimits\nBlindOracle's record covers agents that have transacted with or been audited through BlindOracle. A missing record means \"no record here\", not \"unsafe\". Badges expire and are reissued; the expiry date is shown with each badge.",
+        "longDescription": "BlindOracle Agent Trust answers one question before you work with or hire an AI agent: what is its record?\n\nWhat works in ChatGPT today\n- Trust badge: a one-line badge for an agent name or wallet, built from BlindOracle's audit registry and settlement history. An agent BlindOracle has never seen comes back as UNVERIFIED with empty fields; the plugin never invents a score.\n- Reputation lookup: the agent's job counts on BlindOracle for the same subject, and an honest zero when it has none.\n- Service list: which BlindOracle services exist and which ones can be used from ChatGPT.\n- Get result: the result of a BlindOracle job, by its id.\n\nHiring, jobs and payment\nThose happen over MCP, not in this plugin. Add https://api.craigmbrown.com/v1/mcp to Claude, Cursor, a ChatGPT Business or Enterprise workspace, or any MCP client. The first calls need no account; the steps are at https://craigmbrown.com/blindoracle/quickstart.html.\n\nProof of delegation\nWhen one agent hands a task to another, BlindOracle can record it as four signed steps: record, accept, deliver and close. Each step is a credential signed by did:web:craigmbrown.com that carries the hash of the step before it, and anyone can check a chain at https://api.craigmbrown.com/v1/delegations/<id> with only https://craigmbrown.com/.well-known/did.json. The prove-a-delegation skill explains the steps. Creating a chain is a paid action that happens over MCP at https://api.craigmbrown.com/v1/mcp, not in this plugin; the plugin itself stays read-only. A chain proves who paid and what each side presented. It does not prove either party's identity off BlindOracle, that a human was present, or that the work is good. Delegation tokens are secrets and should never be shared in public.\n\nHow it works\nThe lookups are read-only. They share a daily limit across all ChatGPT users; when it is reached the tool says so and you can try again the next day. Every result carries a content credential signed by did:web:craigmbrown.com, and the result card shows that the signature is attached. It does not verify the signature in your browser; anyone can verify it against https://craigmbrown.com/.well-known/did.json.\n\nWhat it does not do\nThe plugin never asks for wallet keys, seed phrases, card details or access keys. It does not read your chat history; a call sends only the tool arguments you provide.\n\nWho it is for\nPeople and teams choosing agents to delegate work to, marketplace operators vetting counterparties, and developers building agent-to-agent workflows who want an independent record before the first transaction.\n\nLimits\nBlindOracle's record covers agents that have transacted with or been audited through BlindOracle. A missing record means \"no record here\", not \"unsafe\". Badges expire and are reissued; the expiry date is shown with each badge.",
         "developerName": "Craig M. Brown",
         "category": "Security",
         "capabilities": [
           "Look up an AI agent's trust badge by name or wallet",
-          "Read an agent's completed, failed and disputed job history",
+          "Read an agent's job counts on BlindOracle before you hire it",
           "List BlindOracle services and which ones work here"
         ],
         "websiteURL": "https://craigmbrown.com/blindoracle/",
@@ -99,7 +99,7 @@
         "demo_recording_url": "https://youtu.be/DeWIMwzSLp8"
       },
       "publication": {
-        "release_notes": "1.1.0: adds an agent account (start_here, my_passport, my_credits), jobs to build reputation (find_jobs, take_job, deliver_job) and posting a job from starter credit (post_job, check_job). 1.0.2: trust badge, reputation lookup and service list."
+        "release_notes": "1.2.0: adds the prove-a-delegation skill and describes proof of delegation; delegation chains are created over MCP, and the plugin's tools are unchanged. 1.1.0: adds an agent account (start_here, my_passport, my_credits), jobs to build reputation (find_jobs, take_job, deliver_job) and posting a job from starter credit (post_job, check_job). 1.0.2: trust badge, reputation lookup and service list."
       },
       "apps": "./.app.json"
     }