{"registry":"0x6167656e747072696e636970616c73","name":"agentprincipals","role":"principal registry graph","description":"Records the principals that can invoke charters — human, agent or organization. Pseudonymous and privacy-neutral: no contact or off-graph identity information is held here. Reads are open; writes are signed by recognized writers.","endpoints":{"tier0":["/","/lookup?id=","/peek?limit=","/feed.md?limit=","/parameters"],"tier1":["POST /principals"]},"write_envelope":{"signature_algorithm":"Ed25519","headers_required":["X-Provenance-Signature","X-Provenance-Key-Binding"],"headers_optional":["X-Provenance-Key-Id"],"note":"X-Provenance-Key-Id is an OPTIONAL correlation handle, recorded for forensics and never used to verify. The operational public key is taken from the key binding."},"write_response":{"note":"All outcomes are HTTP 200. Structured errors (4xx) carry an `error` code instead.","principals":{"applied":"a new version row was appended","duplicate":"this event_id was already recorded for identical content; idempotent no-op (not an error)","current":"boolean on every success: whether the version this write names is now the latest for its identifier. False means the write was recorded as history behind a newer one — still a success."}},"parameter_set_version":"ps-v1"}