> ## Documentation Index
> Fetch the complete documentation index at: https://docs.grantex.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# OACP Truth Inventory

> Evidence-backed inventory of what is implemented, gated, missing, or stale across the current OACP split.

# OACP Truth Inventory

Canonical end-to-end flow: [OACP authority overview](./overview).

This inventory is based on the Grantex C6Z authority route, OACP artifact libraries, adapter preview helpers, and tests in `apps/auth-service`.

## Truth Table

| Category                         | Grantex reality                                                                                                                                                                                                                                                                                                                                                                                                | Owner/action                                                   |
| -------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------- |
| Implemented runtime              | C6Z authority endpoint under commerce auth; allowlisted AgenticOrg service-token access; internal artifact issuance; artifact safety checks; TTL and signature metadata; adapter mapping payloads; cache/offline verifier helpers; POS handoff evidence-ref boundary in policy/mandate/protocol artifacts. AgenticOrg owns implemented tenant/merchant/seller scoped commerce config and Shopify runtime sync. | Grantex keeps tests and guard scans current.                   |
| Implemented docs only            | Historical Commerce V1 PRDs, launch plans, C6 review reports, and publication drafts.                                                                                                                                                                                                                                                                                                                          | Mark as historical where they conflict with this architecture. |
| Implemented but not broad launch | Commerce V1 payment-control pilot code and Plural sandbox/UAT-compatible adapter paths exist separately from the AgenticOrg OACP runtime split.                                                                                                                                                                                                                                                                | Keep separate from OACP authority docs.                        |
| Requires credentials or approval | `COMMERCE_C6Z_AUTHORITY_SERVICE_TOKEN`, `COMMERCE_C6Z_AUTHORITY_SERVICE_TENANTS`, merchant/AgenticOrg tenant approval, production key custody, provider or bank rail approval, POS callback approval, and external channel approvals.                                                                                                                                                                          | Ops owner must collect evidence before public claims.          |
| Missing                          | Public standards approval, broad external protocol partner program, universal buyer-surface rollout, live non-Shopify source adapters, live bank/custom provider adapters, live POS provider approval, and order/payment/mandate/POS execution through OACP artifacts.                                                                                                                                         | Treat as pending runtime/product gaps.                         |
| Stale/confusing docs             | Older copy that says Grantex is the merchant connector runtime or payment-control loop for every buyer interaction.                                                                                                                                                                                                                                                                                            | Supersede with OACP authority docs and link here.              |

## Evidence Pointers

* Route: `apps/auth-service/src/routes/commerce-oacp-runtime.ts`
* Artifact logic: `apps/auth-service/src/lib/commerce/oacp-runtime-vertical.ts`
* Trust helpers: `apps/auth-service/src/lib/commerce/oacp-trust-artifacts.ts`
* Adapter previews: `schemaorg-preview.ts`, `ucp-capability-preview.ts`, `acp-checkout-preview.ts`, `ap2-evidence-preview.ts`
* Tests: `apps/auth-service/tests/commerce-c6z-runtime-artifact-authority.test.ts` and `commerce-c6w4-oacp-adapter-previews.test.ts`

## Pending Runtime Gaps

| Gap                                  | Owner                                                                         | Action                                                                                                                                               |
| ------------------------------------ | ----------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
| External protocol approval           | Grantex + partners                                                            | Create a public partner review process and evidence checklist before making official status claims.                                                  |
| AgenticOrg production tenant rollout | AgenticOrg + Grantex                                                          | Allowlist tenant, rotate service token, verify source evidence intake, and run authority request smoke.                                              |
| Non-Shopify source adapters          | AgenticOrg + merchants                                                        | Keep WooCommerce, ERP, PIM, OMS, WMS, and custom API configs as pending adapter until connector code, source precedence, tests, and approvals exist. |
| Provider or bank rail execution      | Pine Labs Plural/P3P, banks, fintech/custom providers + merchant + AgenticOrg | Complete provider-owned approval, webhook, rollback, and human review path. Grantex stores only non-sensitive evidence refs where needed.            |
| Buyer-surface approvals              | AgenticOrg + channel owners                                                   | Verify WhatsApp, Telegram, MCP, OpenAPI, A2A, and web policies before public launch.                                                                 |