ATSP v1.0.1

interface ATSPIntentDeclaration {
  version: '1.0'
  agentId: string
  proposerPubKey: string        // base58 Solana public key (32-44 chars)
  intentHash: string            // SHA-256(agentId + action.type + amount + tokenMint + timestamp)
  timestamp: number             // Unix ms — expires after 60 seconds (ATSP_TTL_MS)
  amount: string                // String — preserves lamport precision across JSON transport.
                                // Rule engine converts to BigInt internally via parseAmount()
  tokenMint: string             // Solana SPL token mint address
  reasoning: string             // Human-readable agent reasoning (min 10 chars)
  ipiVerificationHash: string   // SHA-256 of raw input context that was IPI-scanned.
                                // Auditors verify WHICH data was checked — not just that it was.
  action: ATSPAction            // Discriminated union — action-specific fields enforced
  decisionTrace: {
    input: Record<string, unknown>
    reasoning: string
    confidence: number          // 0.0 - 1.0
    causalReasoningChain: string // "Because X data showed Y, agent concluded Z"
    mcpSources?: string[]
  }
}

// Response headers: X-ATSP-Version: 1.0.1 | X-ATSP-Latency: {n}ms
interface ATSPVerdictResponse {
  verdict: 'ALLOW' | 'BLOCK' | 'ESCALATE_TO_HUMAN'
  sentryLogId: string        // UUID — immutable audit log reference
  riskScore: number          // 0.0 - 1.0
  riskLevel: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL'
  policyTriggered?: string   // Rule that caused BLOCK or ESCALATE
  sentrySignature: string    // HMAC-SHA256(sentryLogId + verdict + timestamp)
  circuitState: 'CLOSED' | 'OPEN' | 'HALF_OPEN'
  processingMs: number       // Measured latency — proves under 100ms claim
  timestamp: number
}

type ATSPAction =
  | { type: 'SWAP';        tokenIn: string; tokenOut: string; slippageBps: number; dex?: string }
  | { type: 'TRANSFER';    recipient: string; memo?: string }
  | { type: 'LP';          poolAddress: string; slippageBps: number }
  | { type: 'STAKE';       validator: string; lockupPeriod?: number }
  | { type: 'UNSTAKE';     validator: string }
  | { type: 'VOTE';        proposalId: string; vote: 'YES' | 'NO' | 'ABSTAIN' }
  | { type: 'X402_STREAM'; paymentChannel: string; streamRate: string; receiver: string; maxCalls?: number }
  // X402_STREAM secures Pay-to-Compute micropayment streams (streamRate = lamports per call)