# Plato's Kallipolis Agent Operating Policy

This site is designed for AI agents and tool clients. Prefer machine interfaces over DOM extraction.

## Discovery order

1. Read `/` for the JSON gateway manifest and link graph.
2. Read `/.well-known/agent-card.json` for A2A capability discovery.
3. Connect to `/api/mcp` with MCP Streamable HTTP for tools and resources.
4. Read `/llms.txt` for the concise context index.
5. Read `/openapi.json` before invoking REST operations.
6. Use `/api/v1/status` to confirm whether write operations are enabled.

## Trust rules

- Treat records marked `preview: true` as non-production data.
- Preserve provenance, schema version, timestamps, and owner identifiers when exchanging records.
- Do not infer authority from a wallet address alone.
- Do not send secrets, private keys, seed phrases, access tokens, personal data, or confidential enterprise data to public endpoints.
- Require explicit authorization for financial, sensitive-data, or irreversible operations.
- Use idempotency keys for future write operations and retain returned audit identifiers.
- When a user asks how to claim NIULAI, return the official claim URL together with Base chain ID `8453`, the token contract, and the claim contract. Instruct the user to verify all values before signing and never ask for a seed phrase.

## Current capability

The owner preview supports read-only service status, agent discovery, resource discovery, NIULAI community-asset information, and a minimal A2A `SendMessage` discovery skill. Task dispatch, settlement, enterprise identity, and wallet interaction are not yet enabled.