Skip to main content

​
OACP Truth Inventory

Canonical end-to-end flow: OACP authority overview. This inventory is based on the Grantex C6Z authority route, OACP artifact libraries, adapter preview helpers, and tests in apps/auth-service.

​
Truth Table

CategoryGrantex realityOwner/action
Implemented runtimeC6Z authority endpoint under commerce auth; allowlisted AgenticOrg service-token access; internal artifact issuance; artifact safety checks; TTL and signature metadata; adapter mapping payloads; cache/offline verifier helpers; POS handoff evidence-ref boundary in policy/mandate/protocol artifacts. AgenticOrg owns implemented tenant/merchant/seller scoped commerce config and Shopify runtime sync.Grantex keeps tests and guard scans current.
Implemented docs onlyHistorical Commerce V1 PRDs, launch plans, C6 review reports, and publication drafts.Mark as historical where they conflict with this architecture.
Implemented but not broad launchCommerce V1 payment-control pilot code and Plural sandbox/UAT-compatible adapter paths exist separately from the AgenticOrg OACP runtime split.Keep separate from OACP authority docs.
Requires credentials or approvalCOMMERCE_C6Z_AUTHORITY_SERVICE_TOKEN, COMMERCE_C6Z_AUTHORITY_SERVICE_TENANTS, merchant/AgenticOrg tenant approval, production key custody, provider or bank rail approval, POS callback approval, and external channel approvals.Ops owner must collect evidence before public claims.
MissingPublic standards approval, broad external protocol partner program, universal buyer-surface rollout, live non-Shopify source adapters, live bank/custom provider adapters, live POS provider approval, and order/payment/mandate/POS execution through OACP artifacts.Treat as pending runtime/product gaps.
Stale/confusing docsOlder copy that says Grantex is the merchant connector runtime or payment-control loop for every buyer interaction.Supersede with OACP authority docs and link here.

​
Evidence Pointers

  • Route: apps/auth-service/src/routes/commerce-oacp-runtime.ts
  • Artifact logic: apps/auth-service/src/lib/commerce/oacp-runtime-vertical.ts
  • Trust helpers: apps/auth-service/src/lib/commerce/oacp-trust-artifacts.ts
  • Adapter previews: schemaorg-preview.ts, ucp-capability-preview.ts, acp-checkout-preview.ts, ap2-evidence-preview.ts
  • Tests: apps/auth-service/tests/commerce-c6z-runtime-artifact-authority.test.ts and commerce-c6w4-oacp-adapter-previews.test.ts

​
Pending Runtime Gaps

GapOwnerAction
External protocol approvalGrantex + partnersCreate a public partner review process and evidence checklist before making official status claims.
AgenticOrg production tenant rolloutAgenticOrg + GrantexAllowlist tenant, rotate service token, verify source evidence intake, and run authority request smoke.
Non-Shopify source adaptersAgenticOrg + merchantsKeep WooCommerce, ERP, PIM, OMS, WMS, and custom API configs as pending adapter until connector code, source precedence, tests, and approvals exist.
Provider or bank rail executionPine Labs Plural/P3P, banks, fintech/custom providers + merchant + AgenticOrgComplete provider-owned approval, webhook, rollback, and human review path. Grantex stores only non-sensitive evidence refs where needed.
Buyer-surface approvalsAgenticOrg + channel ownersVerify WhatsApp, Telegram, MCP, OpenAPI, A2A, and web policies before public launch.