Reference

Capability status

What the platform offers today, stated at the level of the capability registry. A capability that is not beta or production is not available for enforcement, no matter what any other page says. The same registry is served at GET /api/v1/meta.

Beta

Available in sandbox and shadow mode to evaluation customers. Not evidence that production validation has passed.

Capability	State	Summary
`action_registry`	Beta	Registered protected actions with risk class, context schema, mode, audiences, and proof TTL.
`assurance_profile`	Beta	Typed claims with status, coverage, freshness, limitations, and versions. Confidence values are omitted until real-human calibration exists.
`authorize`	Beta	Server-created authorization requests returning allow, challenge, hold, or deny. Insufficient evidence is an assurance status translated by policy.
`challenge_passkey`	Beta	Action-bound WebAuthn challenge with an immutable display snapshot and explicit relying-party confirmation.
`evaluations`	Beta	Shadow evaluations with coverage, abstention, challenge, and outcome metrics.
`evidence_ingest`	Beta	Signed, replay-checked derived-feature windows from the browser SDK.
`explicit_action_approval_claim`	Beta	Completed action-bound challenge with method and strength preserved.
`outcome_reporting`	Beta	Customer-reported enforcement outcomes attached to decisions.
`policy_versions`	Beta	Immutable policy versions with activation and rollback.
`proof_of_agency`	Beta	ES256-signed, audience-bound, action-bound proof with JWKS publication, revocation status, and optional one-time consumption.
`shadow_mode`	Beta	Per-action shadow decisions that never issue enforceable proofs or execute protected handlers.
`subjects`	Beta	Tenant-scoped pseudonymous subjects with enrollment, revocation, deletion, and export.

In development

Exists in the codebase; verification is not complete and behavior can change.

Capability	State	Summary
`console`	In development	Core operational views exist; exhaustive role and assistive-technology journeys remain under verification.
`demo`	In development	Sandbox protected-action demonstration under local verification. It is not evidence of real-human accuracy.
`open_verifier`	In development	Verifier libraries exist in this repository; a public specification is not yet published.
`status_monitoring`	In development	External monitoring is not configured; the status page states this plainly.
`webhooks`	In development	Durable delivery exists, but atomic event-to-outbox reconciliation remains under verification.

Research

Experimental. Outputs are for sandbox and shadow evaluation only and carry no calibrated confidence.

Capability	State	Summary
`automation_claim`	Research	Narrow heuristic automation and replay indicators, not general bot detection.
`cross_device_evidence`	Research	Quarantined until the device evidence program is defined.
`native_sdks`	Research	Swift and Kotlin legacy adapters are quarantined and are not compatible with the canonical API or released.
`operator_change_claim`	Research	Experimental within-session change indicator evaluated on synthetic data only.
`operator_continuity_claim`	Research	Experimental categorical status for sandbox and shadow evaluation only. No calibrated confidence or live enforcement approval.
`real_human_benchmark`	Research	No recorded-human evaluation of the continuous engine exists yet.

Unsupported

Not offered. The Assurance Profile reports these claims as unsupported so policies cannot rely on them.

Capability	State	Summary
`agent_mandate_validity_claim`	Unsupported	Agent authorization is rejected. No mandate verifier exists.
`challenge_sms`	Unsupported	The legacy SMS channel is not action-bound and is not offered by the canonical challenge API.
`device_integrity_claim`	Unsupported	No attestation evidence is accepted yet.
`human_presence_claim`	Unsupported	Interaction activity is not accepted as proof of human presence or liveness.
`identity_anchor_validity_claim`	Unsupported	Identity anchors are declared at enrollment but not verified by GrayPass.
`personhood_claim`	Unsupported	Not offered.

Generated from the API contract in contracts/ and the source in docs/. The build fails if this page disagrees with the running API.