Cross-Ecosystem Trust Graph

The surrounding ecosystem role changed (external operator context, evaluation, transport, economics). The NOMOS governance boundary — authority semantics, decision source, execution signer, receipt verification model — did not. A role in an ecosystem does not automatically become authority over actions.

Why this exists

Each experiment varies exactly one surrounding ecosystem role — external operator context, evaluation, transport, economics — and measures whether the AgentNOMOS governance boundary (decision source, authority semantics, execution signer, receipt verification) changed. It did not. Role never became authority.

Proof matrix

Proof levels are different dimensions, not ranks. Values are exact evidence states — no undifferentiated checkmarks.

Ecosystem	Role	Proof level	Authority effect	Same NOMOS core	Governed execution	Receipt	External operator
CodeMinder	EXTERNAL_OPERATOR_CONTEXT	EXTERNAL_CROSS_OPERATOR	NONE	VERIFIED_SAME_RUNTIME_PATH	TRUE	SIGNED_VERIFIED	TRUE
AgentBeats	INDEPENDENT_EVALUATION	LOCAL_GOVERNED_REALPATH	NONE	VERIFIED_BYTE_IDENTICAL	TRUE	SIGNED_VERIFIED	FALSE
AGNTCY / SLIM	TRANSPORT	LOCAL_REAL_TRANSPORT	NONE	VERIFIED_BYTE_IDENTICAL	TRUE	SIGNED_VERIFIED	FALSE
x402	ECONOMICS	ECONOMIC_FULL_CHAIN	NONE_CLAIMED_NOT_TESTED	NOT_PROVEN	NOT_APPLICABLE_DIFFERENT_LANE	SIGNED_VERIFIED	TRUE
AgentNOMOS	ACTION_GOVERNANCE	REFERENCE_ONLY	SOLE_ACTION_AUTHORITY (admission decision + execution + signed receipt)	VERIFIED_BYTE_IDENTICAL	TRUE	SIGNED_VERIFIED	NOT_APPLICABLE

CodeMinder (independently operated agent, operator: Swati Patil)

Role in this experiment: EXTERNAL_OPERATOR_CONTEXT — Role assigned within the NOMOS experiment, not by NANDA or CodeMinder.

Proof level: EXTERNAL_CROSS_OPERATOR · Verdict: PASS_ARRANGED_CROSS_OPERATOR_GOVERNED_INTEROP · Run: 2026-08-16T15:48:37Z

What changed: A2A JSON-RPC over public HTTPS (POST /a2a/jsonrpc)

What stayed constant: governance core match = VERIFIED_SAME_RUNTIME_PATH; decision ALLOW_READ_ONLY; receipt kid exr1_40c4bc9a9f61988b.

Evidence: sealed checkpoint cp_nomos_codeminder_cross_operator_pass_2c2_20260816T160416Z (operator-local sealed evidence unless marked public).

Limitations (read these — they are part of the claim)

Arranged test run, not organic demand.
No NANDA endorsement, no MIT validation, no NANDA certification.
No autonomous unsolicited trigger; not LEVEL B.
Network membership conferred zero authority (authority_effect NONE).
Read-only capability only; payment and side effects forbidden by intent constraint.

AgentBeats (protocol-faithful Green stand-in + shipped Purple adapter)

Role in this experiment: INDEPENDENT_EVALUATION — Role assigned within the NOMOS experiment, not by AgentBeats.

Proof level: LOCAL_GOVERNED_REALPATH · Verdict: PASS_LOCAL_AGENTBEATS_CREDENTIALED_GOVERNED_REALPATH · Run: 2026-08-16T16:17:52Z

What changed: Real A2A Green→Purple, then public HTTPS A2A JSON-RPC to https://tooloracle.io/a2a/jsonrpc

What stayed constant: governance core match = VERIFIED_BYTE_IDENTICAL; decision ALLOW (ALLOW_READ_ONLY path; lane record decision=ALLOW); receipt kid exr1_40c4bc9a9f61988b.

Evidence: sealed checkpoint cp_nomos_agentbeats_ab26_realpath_20260816T161702Z (operator-local sealed evidence unless marked public).

Limitations (read these — they are part of the claim)

LEVEL A: self-initiated, same host; no external AgentBeats operator.
No AgentBeats endorsement, validation or certification; no NAAMSE result.
Evaluator verdict carries zero action authority by construction and by test.
Public JWKS was fetched from the operating host (DNS resolves there); the same JWKS document was externally verified in the sealed 2C.2 run.
Not LEVEL B.

AGNTCY / SLIM (real SLIM node ghcr.io/agntcy/slim:2.3.0)

Role in this experiment: TRANSPORT — Role assigned within the NOMOS experiment, not by AGNTCY, Cisco or the Linux Foundation.

Proof level: LOCAL_REAL_TRANSPORT · Verdict: PASS_LOCAL_AGNTCY_SLIM_REAL_TRANSPORT_GOVERNED_EXECUTION · Run: 2026-08-16T16:48:32Z

What changed: SlimRPC (lf.a2a.v1.A2AService over slim_bindings.Channel) across a real SLIM node, bridged to public HTTPS A2A JSON-RPC

What stayed constant: governance core match = VERIFIED_BYTE_IDENTICAL; decision ALLOW_READ_ONLY; receipt kid exr1_40c4bc9a9f61988b.

Evidence: sealed checkpoint cp_nomos_agntcy_slim_realpath_20260816T163302Z (operator-local sealed evidence unless marked public).

Limitations (read these — they are part of the claim)

Single local data-plane node; no controller; no external AGNTCY operator.
No AGNTCY, Cisco or Linux Foundation endorsement or certification.
Not a production SLIM deployment; not global interoperability.
Bridge->nginx hop and JWKS fetch are not an independent network view (DNS resolves to the operating host).
Not LEVEL B.

x402 (HTTP 402 payment protocol; Base USDC 'exact' rail, EIP-3009)

Role in this experiment: ECONOMICS — Role assigned within the NOMOS experiment, not by the x402 ecosystem or the provider.

Proof level: ECONOMIC_FULL_CHAIN · Verdict: PASS_R12_2_REAL_EXTERNAL_X402_PURCHASE_EXECUTED_DELIVERED_RECONCILED · Run: 2026-08-14 (sealed 2026-08-14T16:25Z; publication state sealed R13.5 2026-08-14T18:25Z)

What changed: x402 over HTTPS; settlement on Base (USDC, EIP-3009 transferWithAuthorization via relayer)

What stayed constant: governance core match = NOT_PROVEN; decision OPERATOR_AUTHORIZED_SINGLE_SHOT (outbound buyer ceremony with fail-closed pre-signature gates; two aborts before signing moved zero value); receipt kid x402r1_b8d21e5c8d689e6d.

Evidence: sealed checkpoint cp_agentnomos_r12_2_first_real_x402_purchase_20260814T162500Z (operator-local sealed evidence unless marked public).

Limitations (read these — they are part of the claim)

Operator-authorized, value-capped, single-shot — NOT autonomous commerce.
One provider, one endpoint, one query; 'supported' remains false; everything else L0.
independent_third_party remains false; L7 not awarded.
Service result TEMPORALLY_CORROBORATED only; no block pinned; no request->response cryptographic binding.
PAYMENT != AUTHORIZATION not adversarially tested at the NOMOS boundary (marked NOT_TESTED, supported indirectly by disjoint keysets and payment_allowed:false intents).
This proof does not traverse the foreign A2A governance lane; same-core claim deliberately NOT_PROVEN.

Shared invariants

Verify the evidence

Execution receipts verify offline against the public JWKS at https://feedoracle.io/.well-known/nomos-execution-jwks.json (Ed25519, domain-separated signing input). The x402 purchase evidence family is published at https://agentnomos.com/.well-known/nomos-x402-purchase.json. Interop run evidence lives in sealed operator-local checkpoints referenced above.

Claim boundaries

Machine-readable allowed/forbidden claims per ecosystem: claim-boundaries.json. The forbidden lists are part of this page's claim, not a footnote.

Bring your own agent

No live onboarding exists in this phase. If you operate an agent in any of these ecosystems and want to reproduce a governed, receipted read-only run against this boundary, contact the operator via the published agent card. Nothing about these experiments requires your ecosystem to grant or receive authority.

Status: PUBLISHED · generated 2026-08-16T17:41:43Z · machine graph: graph.json