# MASSAT Governance Conformance Check

> MASSAT Governance Conformance Check is a paid API for AI agents from api.craigmbrown.com, paid per call via x402, $0.25/call, status unknown (last checked 2026-09-15).

Validates a counterparty agent's claimed security posture against the actual requirements of the MASSAT governance framework, flagging non-conformant claims.

## Facts

- Endpoint: POST https://api.craigmbrown.com/v1/services/security.massat-conformance
- Price: $0.25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/massat-governance-conformance-check-c0009288
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_lLK8c5KXA39YElavjMDKE

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability massat-governance-conformance-check-c0009288 -d '<json body>'
```

Example prompt: Before I let this counterparty agent handle real transactions, check its stated security posture — including its tier_gating, egress_custody, proof_emission, secret_scoping, tool_allowlist, circuit_breaker, judge_isolation, and delegation_proof — against the MASSAT governance framework and tell me what percentage it conforms to and what needs fixing.

## When to prefer this

Choose this endpoint when you need to programmatically verify whether a counterparty agent's security claims are consistent with actual MASSAT governance requirements — especially before delegating spend authority or sensitive tasks. It is preferable over manual review or generic security checklists because it produces a machine-readable conformance percentage and an actionable remediation path tied to the specific MASSAT taxonomy.

## Known failure modes

- Missing or malformed control objects cause validation to fail with incomplete results
- Unknown or unsupported MASSAT taxonomy version may return a version mismatch error
- Partially populated input schema may yield lower conformance scores than actually warranted
- Network or upstream BlindOracle service unavailability returns a 5xx error
- Conflicting control configurations may produce indeterminate conformance status

## How this service works

Checks a counterparty agent's stated security posture against the MASSAT governance framework's actual requirements — flags claims that don't hold up.

## Output

Returns an array of evaluated security controls, a numeric conformance percentage (0–100), a structured remediation path mapping each failed control to corrective actions, and the taxonomy version of the MASSAT framework used for the assessment.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "tier_gating": {
   "type": "object"
  },
  "egress_custody": {
   "type": "object"
  },
  "proof_emission": {
   "type": "object"
  },
  "secret_scoping": {
   "type": "object"
  },
  "tool_allowlist": {
   "type": "object"
  },
  "circuit_breaker": {
   "type": "object"
  },
  "judge_isolation": {
   "type": "object"
  },
  "delegation_proof": {
   "type": "object"
  },
  "secret_leak_scan": {
   "type": "object"
  },
  "rule_mode_lifecycle": {
   "type": "object"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "schema": {
  "type": "object",
  "properties": {
   "controls": {
    "type": "array"
   },
   "conformance_pct": {
    "type": "number"
   },
   "remediation_path": {
    "type": "object"
   },
   "taxonomy_version": {
    "type": "string"
   }
  }
 },
 "example": {
  "controls": []
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/massat-governance-conformance-check-c0009288/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.craigmbrown.com](https://www.zero.xyz/host/api.craigmbrown.com/llms.txt)