{"contractVersion":"2026-08-06","runtimeAdapters":[{"key":"vintraa-http-v1","aliases":["vintraa-http"],"runtimeType":"REMOTE_HTTP","state":"SUPPORTED","discovery":true,"sandbox":true,"customerExecution":true,"publication":true,"reason":"Vintraa's signed HTTPS invocation envelope is supported end to end."},{"key":"openapi-operation-v1","aliases":["openapi-operation"],"runtimeType":"REMOTE_HTTP","state":"SUPPORTED","discovery":true,"sandbox":true,"customerExecution":true,"publication":true,"reason":"Bounded, unauthenticated, reviewed read-only OpenAPI GET operations are supported; mutation, headers, cookies, redirects, arbitrary URLs, and credential passthrough are denied."},{"key":"a2a-jsonrpc-v1","aliases":["a2a-jsonrpc"],"runtimeType":"REMOTE_A2A","state":"SUPPORTED","discovery":true,"sandbox":true,"customerExecution":true,"publication":true,"reason":"Bounded A2A JSON-RPC SendMessage execution is supported for explicitly reviewed read-only public 0.x and 1.x skills; mutation and authenticated cards require additional approval or credential brokering."},{"key":"mcp-streamable-http-v1","aliases":["mcp-streamable-http"],"runtimeType":"REMOTE_MCP","state":"SUPPORTED","discovery":true,"sandbox":true,"customerExecution":true,"publication":true,"reason":"Reviewed read-only MCP tools over unauthenticated Streamable HTTP are supported; mutating tools and credentialed servers are denied."},{"key":"oci-process-v1","aliases":[],"runtimeType":"MANAGED_OCI","state":"DISCOVERY_ONLY","discovery":true,"sandbox":false,"customerExecution":false,"publication":false,"reason":"Digest-pinned OCI images can be registered, but isolated scheduling and execution are not implemented."},{"key":"vintraa-native-v1","aliases":[],"runtimeType":"VINTRAA_NATIVE","state":"RESERVED","discovery":false,"sandbox":false,"customerExecution":false,"publication":false,"reason":"Vintraa-native adapters are reserved for platform-owned releases."}],"customerExperienceModes":[{"mode":"EMBEDDED_WEB","state":"SUPPORTED","sandbox":true,"customerExecution":true,"publication":true,"reason":"A sandboxed developer surface can invoke actions through the Vintraa gateway."},{"mode":"API_ONLY","state":"SUPPORTED","sandbox":true,"customerExecution":true,"publication":true,"reason":"Headless agents use Vintraa-owned generic surfaces and the invocation gateway."},{"mode":"EXTERNAL_WEB","state":"SUPPORTED","sandbox":true,"customerExecution":true,"publication":true,"reason":"Top-level developer UIs receive a single-use HTTPS POST handoff and invoke through a scoped Vintraa gateway session."},{"mode":"PLATFORM_NATIVE","state":"SUPPORTED","sandbox":true,"customerExecution":true,"publication":true,"reason":"Vintraa renders a bounded declarative surface whose components can invoke only reviewed release actions through the gateway."}]}