Submit a manifest

Publishing your BASIS-conformant implementation to the directory is a four-step process. For the MVP, submission is manual — email after you have completed steps 1–3.

1. Self-certify against BASIS conformance

Run the BASIS conformance test suite against your implementation. Publish the signed test report at a stable URL. See conformance guide for the suite and signing requirements.

2. Generate and sign your manifest

Your manifest is a canonical JSON document signed with your Ed25519 key. Schema:

{
  "schema_version": "1.0",
  "name": "My Agent",
  "version": "1.0.0",
  "publisher": {
    "name": "Acme Labs",
    "dns_domain": "acmelabs.example",
    "pubkey": "<base64 ed25519>"
  },
  "basis_version": "1.0",
  "conformance": {
    "factors_implemented": ["factor_name_1", "factor_name_2"],
    "conformance_test_report_url": "https://acmelabs.example/basis-report.json",
    "test_report_hash": "sha256:..."
  },
  "source_url": "https://github.com/acmelabs/my-agent",
  "submitted_at": "2026-04-19T12:00:00Z",
  "signature": "<base64 ed25519 signature over canonical JSON, excluding the signature field>"
}

3. Host the manifest at your domain

Place the signed manifest at a well-known URL on the domain listed in publisher.dns_domain:

https://your-domain.example/.well-known/basis-manifest.json

Also add a DNS TXT record binding your domain to your public key:

_basis-verify.your-domain.example   TXT   "pubkey-fingerprint="

4. Email us the manifest URL

Send an email to basis-directory@vorion.org with the manifest URL and a short description of your implementation. For MVP, manifests are reviewed manually — we verify signature validity and DNS binding, then publish. There is no technical audit.

What is checked

Manifest is valid canonical JSON and parses cleanly.
The signature field verifies against the publisher.pubkey.
The DNS TXT record for _basis-verify.<domain> matches the pubkey.
The conformance_test_report_url is reachable and its hash matches test_report_hash.

What is not checked

Whether your implementation actually conforms to the factors you claim.
Whether your source code is safe to run.
Whether the test report is rigorous or accurate.
Whether your claims are truthful.

You bear full responsibility for the claims in your manifest. Vorion does not audit or endorse listings. Misrepresentation may result in takedown; see Policy.

Upgrading to A3I certification

Self-certification gets you a directory listing. For audited certification — the kind that enables commercial listing on Aurais, cryptographic attestation, and enterprise use — apply to AgentAnchor.