SITEBORNEUNIFIED SEMANTIC SYSTEM VCMgoverned release
WHY SITEBORNE

Keep the promise.
Change the machinery.

Gateways, runtimes, identity systems, providers, and payment rails can stay excellent at their own jobs. SITEBORNE adds the contract and assurance boundary that defines what successful completion means—and how to prove it.

PUBLIC MODEL · STATUS-AUTHORITATIVE · PRIVATE MECHANICS EXCLUDED
STABLE Verification
Contract
buyer-visible meaning
IDENTITY GATEWAY RUNTIME PROVIDER RAIL
VERIFIED OUTCOME
THE OBJECTIONS, MADE TESTABLE

Strong infrastructure claims should survive hostile questions.

Each objection below has a public answer, a way to test the claim, and a place where the surrounding platform remains useful.

01 / “ISN’T THIS JUST ANOTHER AGENT GATEWAY?”

Gateways govern traffic. SITEBORNE governs the outcome contract above the traffic path.

Keep your gateway, runtime, identity system, and payment rail. SITEBORNE defines what successful completion means and checks the delivered result without taking over those systems.

HOW TO TESTCompare the same contract across MCP, A2A, and OpenAPI projections.COMPLEMENTSGateway + runtime stay in place.
02 / “GOVERNANCE ALREADY SOLVES THIS.”

Permission and outcome assurance answer different questions.

Governance determines what may proceed. Assurance checks what actually happened against the agreed outcome. Proof, result release, and settlement remain separate responsibilities.

HOW TO TESTInspect the authority boundaries →COMPLEMENTSIdentity + policy engines provide evidence.
03 / “WHY ISN’T A SUCCESSFUL EXECUTION ENOUGH?”

Execution proves that work ran. Assurance decides whether the contract was satisfied.

A workflow can complete perfectly and still return an unacceptable result. SITEBORNE lets durable runtimes do what they do best, then evaluates the outcome against the contract.

HOW TO TESTTrace execution → verification → proof →COMPLEMENTSDurable runtimes remain execution substrates.
04 / “WHY NOT LET EVERY PROTOCOL DEFINE ITS OWN SEMANTICS?”

Independent protocol meanings recreate fragmentation at the contract layer.

MCP, A2A, OpenAPI, and catalogs are different connection surfaces. They should project the same definition of success instead of forcing buyers to reinterpret the capability on every protocol.

HOW TO TESTInspect interface parity →COMPLEMENTSAPI/AI gateways keep traffic authority.
05 / “THIS IS ORCHESTRATION BY ANOTHER NAME.”

Orchestration owns the path. SITEBORNE owns the promise above the path.

A workflow can change steps, suppliers, retries, or execution environments without changing what the buyer asked for. SITEBORNE keeps the acceptance meaning outside the workflow graph.

HOW TO TESTChange an execution path; the acceptance contract must not drift.COMPLEMENTSWorkflow engines remain path authorities.
06 / “IS PCC ANOTHER AUTHORIZATION TOKEN?”

No. PCC proves what happened; it does not grant permission.

PCC can carry result and proof material, but proof does not authorize execution, result access, or settlement. Those decisions remain governed separately.

HOW TO TESTInspect the PCC model →COMPLEMENTSGeneric receipt formats can remain export targets.
07 / “PORTABILITY HIDES PLATFORM CAPABILITY.”

Portable meaning does not require lowest-common-denominator execution.

Platforms can still expose specialized capabilities. SITEBORNE only prevents those platform details from silently redefining what the buyer means by success.

HOW TO TESTVendor extensions may vary; the buyer contract must not.COMPLEMENTSPlatform-specific features remain usable.
08 / “DOES A PAYMENT RECEIPT PROVE WHO OWNS THE RESULT?”

Payment does not prove identity or authorize result access.

A valid payment says something about the economic path. It does not prove who the caller is, whether the result is acceptable, or whether a sensitive result may be retrieved.

HOW TO TESTInspect the economic boundary →COMPLEMENTSx402 / MPP / other rails move value.
09 / “STANDARDS WILL ABSORB THIS.”

That is a feature, not a threat.

SITEBORNE does not need to own identity, gateways, telemetry, registries, or payment rails. It is designed to work with standards and platforms at those layers while keeping the outcome contract coherent.

HOW TO TESTInspect the complement map ↓COMPLEMENTSStandards reduce reinvention.
10 / “WHY NOT BUILD THIS INTO EVERY PROVIDER?”

Because every provider defining success independently recreates fragmentation at the outcome layer.

Providers should compete on execution quality, capability, reliability, and economics. Buyers should not have to redefine acceptable completion every time supply changes.

HOW TO TESTSwap the qualified path; buyer-visible success criteria must remain stable.COMPLEMENTSSuppliers compete below one contract.
CURRENT-STATE RULE

These cards describe the governed model across current production and Release 3 candidate work. Candidate semantics are labeled as candidate and do not change the live v2 runtime default. Status separates live production from Release 3 candidate →

FALSIFICATION LEDGER

A claim you can falsify is stronger than a slogan.

These are public, inspectable failure conditions. If one occurs, the corresponding claim should not be treated as proven.

CLAIMPASS CONDITIONFAIL SIGNALINSPECT
Protocol parity

Protocol projections preserve the same governed result meaning.

MCP, A2A, OpenAPI, or SDK output changes the acceptance semantics.

Developers ↗
Replay integrity

Replay returns the persisted canonical result without semantic mutation.

Replay re-signs, invents a new result, or changes buyer-visible meaning.

Lifecycle ↗
Authority separation

Identity, payment, proof, result release, and settlement stay distinct.

A receipt, trace ID, wallet, or metadata field silently grants authority.

Trust ↗
Contract invariance

Changing a qualified path does not redefine acceptable completion.

Provider-specific success criteria overwrite the buyer's contract.

Contract ↗
Economic ownership

Retry/failover preserves one canonical economic owner and avoids duplicate completion.

Equivalent retries can independently trigger contradictory settlement effects.

Economics ↗
Release coherence

Human claims, machine projections, status, and runtime state align to governed release truth.

A public surface claims capability or state the runtime does not support.

Status ↗
BETTER TOGETHER BY DESIGN

The strongest integrations preserve each system’s authority.

SITEBORNE does not become more valuable by rebuilding mature infrastructure. It becomes more valuable when those systems remain excellent and their evidence can be composed around one outcome contract.

01Each system keeps its authorityidentity, traffic, runtime, telemetry, payments, discovery 02SITEBORNE binds the outcome contractmeaning + assurance remain stable above the stack 03One accepted result returnsproof supports the outcome without becoming authority
IDENTITY / INTENTWho is acting?

OIDC/OAuth, delegated-intent, workload identity, and related systems can supply identity or delegation evidence.

evidence source
API / AI GATEWAYWhat traffic is allowed?

Gateways can enforce authentication, policy, quotas, routing, protocol controls, and operational guardrails.

traffic authority
DURABLE RUNTIMEWill the work survive?

Workflow and agent runtimes can own retries, state, scheduling, recovery, and execution continuity.

execution substrate
OBSERVABILITYWhat happened operationally?

Telemetry can expose traces, events, latency, failures, and service behavior without becoming operation authority.

operational evidence
PAYMENT RAILHow does value move?

Economic rails can authorize and transfer value while SITEBORNE keeps outcome acceptance and settlement eligibility semantically distinct.

economic rail
DISCOVERY / PROTOCOLHow is capability exposed?

MCP, A2A, OpenAPI, registries, and catalogs can expose capability without owning the canonical meaning of success.

projection surface
SITEBORNE Verification Contract + Outcome Assurance stable buyer-visible meaning
VERIFIED OUTCOMEproof remains evidence, not authority
MCP INTERFACE PROJECTION A2A INTERFACE PROJECTION OpenAPI INTERFACE PROJECTION OAuth / OIDC IDENTITY EVIDENCE mTLS / DPoP REQUEST EVIDENCE OpenTelemetry OBSERVABILITY x402 / MPP RAIL ADAPTER SCITT / GENERIC RECEIPTS WATCH / EXPORT

Role labels describe semantic fit, not blanket support claims. Current implementation and qualification state is published on Status.

THREE REACTIONS TO THE SAME LAYER

Buyer, platform, and supplier incentives can align.

The non-obvious advantage is that SITEBORNE does not require one party to own every layer.

BUYER01

“I want the outcome to stay stable when the stack changes.”

  • Define acceptable completion once.
  • Keep providers and protocols replaceable.
  • Inspect proof and release state separately from marketing claims.

Demand as proof: public contract, parity, replay behavior, authority boundaries, current status.

PLATFORM / COMPETITOR02

“I can stay authoritative for the thing my platform actually does best.”

  • Gateway remains traffic authority.
  • Runtime remains execution substrate.
  • Identity and rails remain specialized systems rather than being reimplemented.

Demand as proof: clean projection boundaries and no silent promotion of external metadata into SITEBORNE authority.

SUPPLIER03

“I can compete on execution without forcing the buyer to adopt my definition of success.”

  • Expose differentiated capability and evidence.
  • Integrate beneath a stable buyer-facing contract.
  • Accumulate contract-specific evidence over time without publishing private scoring mechanics.

Demand as proof: explicit capability semantics, release state, and observable outcome evidence. Adaptive qualification remains status-gated.

THE SHORTCUTS WE REFUSE

Seven “almost equivalent” ideas that create expensive failures.

These boundaries are intentionally visible because autonomous systems fail when metadata, payments, signatures, and observability are allowed to masquerade as authority.

PAYER≠CALLER
WALLET≠PRINCIPAL
TRACE ID≠OPERATION IDENTITY
PAYMENT RECEIPT≠PCC
SIGNED≠CORRECT
PROOF≠RESULT AUTHORITY
HISTORICAL LIVE≠CURRENT LIVE