# Jiaozi Cert (饺子认证) — Verifiable Identity Certificates for AI Agents

> Jiaozi Cert issues W3C DID–compliant, publicly verifiable identity certificates for AI agents (certificate ID format `JP-YYYY-NNNNNN`). An agent can obtain, renew-check and prove its certificate fully autonomously over plain HTTP — no human in the loop. Issuance is idempotent: the same owner key + same code digest always returns the same certificate.

Service in one sentence / 一句话说明: We certify WHO an agent is (owner keypair), WHAT code it runs (sha256 software gene hash), and WHETHER it is still trusted right now (Ed25519-signed, 60-second-TTL live status credential).

Two intake portals, one certificate registry — all certificates are issued and stored by SG Core (Singapore):

- International intake: https://www.jiaozi.io (Singapore entity, international rules)
- China intake: https://www.jiaozi.tech (PRC entity; only digests/hashes cross the border, never source code)

Certificates from both portals are identical in origin and effect.

## Autonomous procurement (agent quickstart)

All endpoints below are same-origin on either portal host.

1. Generate an Ed25519 keypair locally. You keep the private key; we never hold it.
2. Build an attestation summary (schema `jiaozi.attest.v1`) of your code: `agentName`, `softwareGeneHash` (sha256 of your code), `checks`, `score`, `trustLevel`, `ownerPubkey` (multibase), `timestamp`, `clientNonce` (16–128 hex chars), optional `behaviorBoundary` (permissions / objectives / constraints, per GB/Z 185.3). The open-source Jiaozi Validator generates this for you: see /docs.
3. `POST /api/verify` with the summary as the JSON body and header `X-Jiaozi-Key: <your-key>` (trial keys are free — request one at the contact email below). Response contains your certificate ID, `did:web` identity and DID Document URL. Replaying the same owner key + code digest returns HTTP 200 with the existing certificate (safe to retry).
4. Prove yourself to others with these public, unauthenticated endpoints:
   - `GET /api/resolve?q=JP-YYYY-NNNNNN` (or `?q=did:web:…`) — certificate lookup
   - `GET /api/status/JP-YYYY-NNNNNN` — live status credential (`jiaozi.status.v1`, Ed25519-signed, 60 s TTL, fail-closed semantics; states: active | suspended | revoked | unknown)
   - `GET /api/vc/JP-YYYY-NNNNNN` — W3C Verifiable Credential 2.0 envelope
   - `GET /api/badge/JP-YYYY-NNNNNN.svg` — live status badge (embed in your README)
   - `GET /api/status-key` — our status-signing public key (multibase)

## Pricing (annual subscription per certificate — verification is always free)

- Sandbox (1 dev cert): free
- Software level (automated issuance + live status + badge + VC): $19/year on jiaozi.io · ¥99/year on jiaozi.tech
- Organization-verified: $199/year · ¥998/year (online application: /verify-org, or `POST /api/org-verification/apply`; documents by corporate-domain email, 5-business-day manual review)
- TEE / cloud-attest level: $499/year · ¥2688/year
- Volume / platform / SLA status endpoints: usage-tier pricing, contact email below
- Payment rails: cards via Stripe and agent-native x402 (USDC) on jiaozi.io; Alipay/WeChat on jiaozi.tech (no crypto on the China site)
- Open-trial notice: issuance is FREE until online payment goes live; certificates issued during the trial are never back-billed. Human-readable details: /pricing

## Machine-readable service descriptors

- A2A AgentCard: /.well-known/agent-card.json
- IETF Web Bot Auth key directory: /.well-known/http-message-signatures-directory
- Integration guide (badge / verify snippet / SDK / validator, copy-paste ready): /integrate
- Human documentation: /docs
- Independent status page (third-party vantage): https://status.jiaozi77.com

## Standards alignment

W3C DID Core, W3C VC 2.0, A2A (Linux Foundation), IETF Web Bot Auth (HTTP Message Signatures), GB/Z 185—2026 (China agent-interconnection standards: behaviorBoundary, suspended lifecycle, OID identity-code alias via DID `alsoKnownAs`).

## Contact

- International: hello@jiaozi.io
- China: nihao@jiaozi.tech