{
  "tool_id": "art-564-ucp-checkout-payload-lint",
  "kernel_id": "art-564-ucp-checkout-payload-lint",
  "display_name": "UCP Checkout Payload Lint",
  "tool_version": "1.0.0",
  "mandate_type": "compliance_mandate",
  "purpose": "Deterministic, verify-only structural lint of a caller-supplied Universal Commerce Protocol (UCP; Google + Shopify, announced NRF 2026-01-11, Apache-2.0 spec on GitHub) checkout resource against the schema pinned at tag v2026-04-08 of github.com/Universal-Commerce-Protocol/ucp. Checks the resource-level required[] field set, the status enum, ISO 4217 currency form, integer minor-unit amounts, and the exactly-one-subtotal / exactly-one-total cardinality rule on totals[]. Verdict CONFORMANT | NONCONFORMANT | UNKNOWN_VERSION: a payload declaring a UCP version outside the pinned allowlist is capped at UNKNOWN_VERSION regardless of otherwise-clean structure, never upgraded to CONFORMANT for a version this kernel has no pinned rules for. Never contacts a UCP or ACP endpoint and never fetches a live spec version -- the caller supplies the payload. UCP composes with AP2 rather than competing with it; part of the agentic-commerce-convergence chain alongside art-12 (ACP checkout conformance) and art-01 (AP2 mandate-chain validator).",
  "control_description": "Deterministic, verify-only structural lint of a caller-supplied Universal Commerce Protocol (UCP; Google + Shopify, announced NRF 2026-01-11, Apache-2.0 spec on GitHub) checkout resource against the schema pinned at tag v2026-04-08 of github.com/Universal-Commerce-Protocol/ucp. Checks the resource-level required[] field set, the status enum, ISO 4217 currency form, integer minor-unit amounts, and the exactly-one-subtotal / exactly-one-total cardinality rule on totals[]. Verdict CONFORMANT | NONCONFORMANT | UNKNOWN_VERSION: a payload declaring a UCP version outside the pinned allowlist is capped at UNKNOWN_VERSION regardless of otherwise-clean structure, never upgraded to CONFORMANT for a version this kernel has no pinned rules for. Never contacts a UCP or ACP endpoint and never fetches a live spec version -- the caller supplies the payload. UCP composes with AP2 rather than competing with it; part of the agentic-commerce-convergence chain alongside art-12 (ACP checkout conformance) and art-01 (AP2 mandate-chain validator).",
  "declared_inputs": [],
  "declared_outputs": [],
  "kernel_digest": "sha256:828c4890e7f551a049a00ccacf21c33350300f9b10d047e2d05904d0f97e5c62",
  "trust_label": "independently verified: zkVM execution proof (risc0/groth16-bn254)",
  "data_vintage": "2026-08-07",
  "last_validated": "2026-08-07",
  "conformance_fixtures_vendored": true,
  "compute_proof_ready": "ready",
  "wave": 92,
  "source_url": "https://ainumbers.co/chaingraph/art-564-ucp-checkout-payload-lint.html",
  "generated_at": "2026-08-15T11:12:17.704Z"
}