Integration Guide

// Recursively sort object keys (RFC 8785 / JCS — I-JSON subset)
function cgCanon(v) {
  if (Array.isArray(v)) return v.map(cgCanon);
  if (v && typeof v === 'object')
    return Object.keys(v).sort().reduce((o, k) => { o[k] = cgCanon(v[k]); return o; }, {});
  return v;
}

// The canonical string that gets hashed
function canonicalPreimage(policy_parameters, output_payload) {
  return JSON.stringify(cgCanon({ policy_parameters, output_payload }));
}

// Returns lowercase hex (64 chars) — no prefix
async function executionHash(policy_parameters, output_payload) {
  const bytes = new TextEncoder().encode(canonicalPreimage(policy_parameters, output_payload));
  const digest = await globalThis.crypto.subtle.digest('SHA-256', bytes);
  return Array.from(new Uint8Array(digest))
    .map(b => b.toString(16).padStart(2, '0')).join('');
}

// Usage
const hash = await executionHash(policy_parameters, output_payload);
artifact.execution_hash = `sha256:${hash}`;

// my-kyc-checker.kernel.mjs
export function compute(pp) {
  const score = (pp.pep ? 30 : 0) + (pp.sanctions_hit ? 50 : 0)
              + (pp.high_risk_jurisdiction ? 20 : 0);
  const tier = score >= 50 ? 'high' : score >= 20 ? 'medium' : 'low';
  return {
    output_payload: { risk_score: score, risk_tier: tier },
    compliance_flags: [`KYC_TIER_${tier.toUpperCase()}`],
  };
}

import { compute } from './my-kyc-checker.kernel.mjs';
import { executionHash } from './chaingraph/kernels/_hash.mjs';

const pp = {
  entity_name: 'ACME Corp',
  pep: false,
  sanctions_hit: false,
  high_risk_jurisdiction: true,
};

const { output_payload, compliance_flags } = compute(pp);
const hash = await executionHash(pp, output_payload);

const artifact = {
  '@context':         'https://ainumbers.co/chaingraph/context/v0.3/context.jsonld',
  chaingraph_version: '0.4.0',
  tool_id:           'my-kyc-checker',
  mandate_type:      'compliance_mandate',
  generated_at:      new Date().toISOString(),
  execution_hash:    `sha256:${hash}`,
  chain:             { parent_hashes: [], parent_tool_ids: [], chain_depth: 0 },
  policy_parameters: pp,
  output_payload,
  compliance_flags,
};

{
  "@context":         "https://ainumbers.co/chaingraph/context/v0.3/context.jsonld",
  "chaingraph_version": "0.4.0",
  "tool_id":           "my-kyc-checker",
  "mandate_type":      "compliance_mandate",
  "generated_at":      "2026-06-19T12:00:00.000Z",
  "execution_hash":    "sha256:<64-hex-chars>",
  "chain":             { "parent_hashes": [], "parent_tool_ids": [], "chain_depth": 0 },
  "policy_parameters": {
    "entity_name": "ACME Corp", "pep": false,
    "sanctions_hit": false, "high_risk_jurisdiction": true
  },
  "output_payload":   { "risk_score": 20, "risk_tier": "medium" },
  "compliance_flags": ["KYC_TIER_MEDIUM"]
}