Documentation menu

Examples

Example profiles

Five operation profiles, each with its definition and its configuration. Field names are real; values are examples. Select a part to see what it binds, and a role to see what that owner contributes and may receive.

Operation profile reference

1 required owner · release owner

Software release integrity

Your release agent receives a report from an approved Wasm validation function that checks the bound candidate artifact. The coding agent cannot change the accepted checks. The release agent is an authorized recipient bound through the release-owner role.

Simplified
Profile parts
Trace a role
Program

The Wasm module the profile accepts, referenced by content hash.

Select any line to see which part of the profile it belongs to.
{
"schemaVersion": "standard.space-profile-bundle.v3",
"profileId": "7c1e0a52-…",
"revision": 3,
"roles": [
{ "roleId": "release-owner", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": [] }
],
"slots": [
{ "slotId": "candidate", "kind": "dataset", "roleId": "release-owner" },
{ "slotId": "gate", "kind": "gate", "roleId": "release-owner" },
{ "slotId": "program", "kind": "program", "roleId": "release-owner" }
],
"steps": [{
"stepId": "verify-release",
"programSlotId": "program",
"inputBindings": [
{ "inputId": "artifact", "source": { "kind": "slot", "slotId": "candidate" } }
],
"candidateOutputs": ["report"]
}],
"outputContracts": [
{ "outputId": "report", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["release-owner"], "maximumBytes": 65536 }
],
"limits": {
"maximumMemoryBytes": 268435456,
"maximumWallClockMilliseconds": 60000
}
}

The definition declares the work. Declaring a role, slot or recipient grants nothing. Field names are real; values are examples.

2 required owners · customer, vendor

Vendor diagnostics

Your maintenance agent requests an approved Wasm diagnostic function for your encrypted telemetry. You receive findings; the vendor receives only a narrower service summary.

Simplified
Profile parts
Trace a role
Program

The Wasm module the profile accepts, referenced by content hash.

Select any line to see which part of the profile it belongs to.
{
"schemaVersion": "standard.space-profile-bundle.v3",
"profileId": "7c1e0a52-…",
"revision": 2,
"roles": [
{ "roleId": "customer", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["vendor"] },
{ "roleId": "vendor", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["customer"] }
],
"slots": [
{ "slotId": "gate", "kind": "gate", "roleId": "customer" },
{ "slotId": "program", "kind": "program", "roleId": "vendor" },
{ "slotId": "telemetry", "kind": "dataset", "roleId": "customer" }
],
"steps": [{
"stepId": "diagnose",
"programSlotId": "program",
"inputBindings": [
{ "inputId": "window", "source": { "kind": "slot", "slotId": "telemetry" } }
],
"candidateOutputs": ["findings", "service-summary"]
}],
"outputContracts": [
{ "outputId": "findings", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["customer"], "maximumBytes": 65536 },
{ "outputId": "service-summary", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["vendor"], "maximumBytes": 4096 }
],
"limits": {
"maximumMemoryBytes": 268435456,
"maximumWallClockMilliseconds": 60000
}
}

The definition declares the work. Declaring a role, slot or recipient grants nothing. Field names are real; values are examples.

2 required owners · buyer, supplier

Supplier software assessment

Your procurement agent requests approved Wasm checks on a supplier’s private code. You receive permitted findings; the supplier receives a summary of what was checked.

Simplified
Profile parts
Trace a role
Program

The Wasm module the profile accepts, referenced by content hash.

Select any line to see which part of the profile it belongs to.
{
"schemaVersion": "standard.space-profile-bundle.v3",
"profileId": "7c1e0a52-…",
"revision": 1,
"roles": [
{ "roleId": "buyer", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["supplier"] },
{ "roleId": "supplier", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["buyer"] }
],
"slots": [
{ "slotId": "gate", "kind": "gate", "roleId": "buyer" },
{ "slotId": "program", "kind": "program", "roleId": "buyer" },
{ "slotId": "source", "kind": "dataset", "roleId": "supplier" }
],
"steps": [{
"stepId": "assess",
"programSlotId": "program",
"inputBindings": [
{ "inputId": "code", "source": { "kind": "slot", "slotId": "source" } }
],
"candidateOutputs": ["findings", "checked-summary"]
}],
"outputContracts": [
{ "outputId": "findings", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["buyer"], "maximumBytes": 65536 },
{ "outputId": "checked-summary", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["supplier"], "maximumBytes": 4096 }
],
"limits": {
"maximumMemoryBytes": 268435456,
"maximumWallClockMilliseconds": 60000
}
}

The definition declares the work. Declaring a role, slot or recipient grants nothing. Field names are real; values are examples.

2 required owners · evaluator, model vendor

Private model evaluation

Your evaluation agent requests an approved Wasm scoring function for a compatible model and private dataset. Each owner receives only the agreed metrics.

Simplified
Profile parts
Trace a role
Program

The Wasm module the profile accepts, referenced by content hash.

Select any line to see which part of the profile it belongs to.
{
"schemaVersion": "standard.space-profile-bundle.v3",
"profileId": "7c1e0a52-…",
"revision": 1,
"roles": [
{ "roleId": "evaluator", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["model-vendor"] },
{ "roleId": "model-vendor", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["evaluator"] }
],
"slots": [
{ "slotId": "eval-set", "kind": "dataset", "roleId": "evaluator" },
{ "slotId": "gate", "kind": "gate", "roleId": "evaluator" },
{ "slotId": "model", "kind": "dataset", "roleId": "model-vendor" },
{ "slotId": "program", "kind": "program", "roleId": "evaluator" }
],
"steps": [{
"stepId": "evaluate",
"programSlotId": "program",
"inputBindings": [
{ "inputId": "dataset", "source": { "kind": "slot", "slotId": "eval-set" } },
{ "inputId": "weights", "source": { "kind": "slot", "slotId": "model" } }
],
"candidateOutputs": ["metrics"]
}],
"outputContracts": [
{ "outputId": "metrics", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["evaluator", "model-vendor"], "maximumBytes": 8192 }
],
"limits": {
"maximumMemoryBytes": 268435456,
"maximumWallClockMilliseconds": 60000
}
}

The definition declares the work. Declaring a role, slot or recipient grants nothing. Field names are real; values are examples.

3 required owners · retailer, two media partners

Joint partner analytics

Your analytics agent requests campaign metrics that need two partners’ exposure logs. No participant is a permitted recipient of another’s rows; each receives the agreed aggregates.

Simplified
Profile parts
Trace a role
Program

The Wasm module the profile accepts, referenced by content hash.

Select any line to see which part of the profile it belongs to.
{
"schemaVersion": "standard.space-profile-bundle.v3",
"profileId": "7c1e0a52-…",
"revision": 1,
"roles": [
{ "roleId": "partner-a", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["partner-b", "retailer"] },
{ "roleId": "partner-b", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["partner-a", "retailer"] },
{ "roleId": "retailer", "minimumPrincipals": 1, "maximumPrincipals": 4,
"distinctFromRoleIds": ["partner-a", "partner-b"] }
],
"slots": [
{ "slotId": "exposure-a", "kind": "dataset", "roleId": "partner-a" },
{ "slotId": "exposure-b", "kind": "dataset", "roleId": "partner-b" },
{ "slotId": "gate", "kind": "gate", "roleId": "retailer" },
{ "slotId": "program", "kind": "program", "roleId": "retailer" },
{ "slotId": "sales", "kind": "dataset", "roleId": "retailer" }
],
"steps": [{
"stepId": "measure",
"programSlotId": "program",
"inputBindings": [
{ "inputId": "exposures-a", "source": { "kind": "slot", "slotId": "exposure-a" } },
{ "inputId": "exposures-b", "source": { "kind": "slot", "slotId": "exposure-b" } },
{ "inputId": "sales", "source": { "kind": "slot", "slotId": "sales" } }
],
"candidateOutputs": ["partner-a-metrics", "partner-b-metrics", "retailer-metrics"]
}],
"outputContracts": [
{ "outputId": "partner-a-metrics", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["partner-a"], "maximumBytes": 8192 },
{ "outputId": "partner-b-metrics", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["partner-b"], "maximumBytes": 8192 },
{ "outputId": "retailer-metrics", "gateSlotId": "gate",
"assuranceClass": "restricted-disclosure",
"recipientRoleIds": ["retailer"], "maximumBytes": 8192 }
],
"limits": {
"maximumMemoryBytes": 268435456,
"maximumWallClockMilliseconds": 60000
}
}

The definition declares the work. Declaring a role, slot or recipient grants nothing. Field names are real; values are examples.