SCRIPTMASTERLABS · CANON v1

Know what is current.

CANON resolves a simple machine question that mirrors and cached metadata often cannot answer: is this artifact still current, and what does the publisher verifiably say now?

Runtime contract Machine product card

Live registry evidence

Resolve current npm and PyPI package versions from their public registries. Registry-owned facts remain registry authority.

Signed publisher truth

Verify Ed25519 publisher manifests, expiry, key activation and monotonic sequence state before trusting publisher intent.

No silent winner

If a verified publisher version disagrees with a live registry version, CANON returns conflict. It does not invent consensus.

Mirror drift

Audit stale mirrors and held versions against live registry state. Version matches can also be checked against integrity evidence when available.

Verdicts

Verdict	Meaning
`fresh`	The held version matches the current resolved version.
`stale`	The held or mirrored version trails current resolved evidence.
`tampered`	Version matches but supplied integrity evidence conflicts with expected integrity.
`conflict`	Verified publisher and live registry disagree; CANON does not choose a winner automatically.
`superseded / withdrawn / deprecated`	Verified publisher state or registry evidence explicitly carries that condition.
`unknown`	The available evidence is insufficient for a stronger conclusion.

Use it

Free single lookup

GET https://squeezeos-api.onrender.com/api/canon/resolve?id=@scriptmasterlabs/mcp-x402&held_version=2.1.3

No subscription. No model/API key required for CANON's core registry resolver.

Free mirror audit

GET https://squeezeos-api.onrender.com/api/canon/audit-mirror?package=@scriptmasterlabs/mcp-x402&mirror_version=2.1.3

Publisher inspection

GET https://squeezeos-api.onrender.com/api/canon/manifest?domain=scriptmasterlabs.com

Checks manifest signature trust, expiry, anti-rollback sequence state and registry drift.

x402 bulk

POST https://squeezeos-api.onrender.com/api/canon/batch

Up to 100 items. 0.01 USDC per accepted bulk delivery. x402 v2 on Base mainnet. Validation and resolution preflight occur before the payment gate.

Truth boundary. CANON reports evidence, trust state and disagreement. It does not guarantee package safety, ownership, search ranking, adoption, or that a mirror is malicious. A 402 challenge or authorization is not settlement proof.

Publisher protocol

A participating publisher exposes /.well-known/canon.json and /.well-known/canon-keys.json. CANON verifies an Ed25519 signature, key validity, expiry and sequence monotonicity before publisher claims can affect the result.

Provider: SCRIPTMASTERLABS · Legal entity: Script Master Labs, LLC · Truth First. Proof Always. Pay Only for Accepted Delivery.