GRIP 1.0-draft.2 · The files

Every GRIP file, in one place.

Read the specification, download the schemas or check a signed example. Every file includes its SHA-256 checksum so you can verify your copy.

Read the specificationPDF

Download the files.zip · 145 KB

Draft · published for review · 24 Aug 2026

Check it yourself

Download the files, check the checksum, then run the suite. It needs Python 3.10 or later and one package. The six broken chains must each fail exactly the rules they are built to break.

Run on these files on 25 Sep 2026: 7 of 7 vectors behave as specified.

TerminalmacOS or Linux

# download the files and their checksum
$curl -O https://www.foxora.ai/grip/files/spec/grip-1.0-draft.2.zip
$curl -O https://www.foxora.ai/grip/files/spec/grip-1.0-draft.2.zip.sha256
$shasum -a 256 -c grip-1.0-draft.2.zip.sha256
# run the conformance suite
$unzip grip-1.0-draft.2.zip && cd grip
$python3 -m venv .venv && .venv/bin/pip install cryptography
$.venv/bin/python conformance/run.py
7/7 vectors behave as specified.

01 · Papers

The two papers.

Both are preprints on Zenodo. Cite the DOI, not these links: 10.5281/zenodo.22078457 for GRIP and 10.5281/zenodo.22078465 for the proposal.

GRIP-1.0-draft.2.pdfSize 778 KB
GRIP: The Governed Runtime Intent Protocol. The specification, 26 pages.
SHA-2563b2416f0b5448fbaf50c70d596c39722bce4260b6e04ece741fc4d8c39e6b194
ALM-proposal-2026-08.pdfSize 233 KB
Agentic Language Models: A Proposal. The companion paper, 9 pages.
SHA-256a39968eaed33df378b693f03e17dea96072a4f9215101f058b4d21db29032638
CITATION.bibSize 1.2 KB
BibTeX entries for both papers.
SHA-2561256ab2b9a9bbaec8ffeb1645610a95bb26dd683f5ce301f91aa482b638a3ebc

02 · The download

Everything, in one file.

The zip holds the schemas, registries, verifier, suite and vectors listed below, plus README.md, LICENSE and HOSTING.md from section 03. Its copy of gripcore.py adds a clearer message when the one Python package is missing.

grip-1.0-draft.2.zipSize 145 KB
All the specification files in one download.
SHA-256f879e9ff00d781213188436b2282a42043664c534981575b99d2c1ad4c0a514c
grip-1.0-draft.2.zip.sha256Size 87 B
The zip’s SHA-256, for shasum -a 256 -c.
SHA-2561bedd6f5dfe9b0930cd905663516496e5397c329703bd979b7db26ba4f06bc07

03 · Notes

Start with the notes.

README.mdSize 4.5 KB
What each file is, a quickstart, and the known limits of the verifier.
SHA-2565ee111cfa807430a67c53c115fb80cb32c4944a851fd782d3f1382af2050cc3e
LICENSESize 635 B
The licence that comes with the files.
SHA-256ddce156d3ba96cd8c78e1b43cb21bb0fac8873e19e37901a5f76708c2005a110
HOSTING.mdSize 3.8 KB
How these files are meant to be served.
SHA-2568f6bcad4aab3417ce3f03b25ed97fe4e3a257fc962881479c24ef20c64237d82
CHECKSUMS.txtSize 15 KB
The SHA-256 list of the release tree, 24 Aug 2026.^*
SHA-2569b43de869b080aae5fb0c3d117f834897f60982c8154e8b87c0ae0c4466dab66

04 · Schemas

Six objects and their envelope.

JSON Schema, draft 2020-12. Each schema keeps the $id it was published with, an address on grip.foxora.dev.

common.schema.jsonSize 3.3 KB
GRIP common definitions
SHA-25631e1a18bbc587fe9d13115687556ad1f99788dc39f479ae5274ef84ec51f93a0
mandate.schema.jsonSize 1.9 KB
GRIP Mandate
SHA-256353ab4d743815b1ff45e6a45c14e3c7aab83c52ba62b806f6d2982227c984891
grant.schema.jsonSize 1.5 KB
GRIP Grant
SHA-2569234c993219252b9b15f70631f771109e5d05d352d8b4d0a00a2425c9c9b71ca
receipt.schema.jsonSize 4.1 KB
GRIP Receipt
SHA-2562eada9bd60acdcfbbe637db010a188d8af13644bf7029f30ada1d83356e40408
stop.schema.jsonSize 1.9 KB
GRIP Stop
SHA-2569260a64e3d133e1ac301cdbed73f10f5dd5c8869620c322ed56af3b109e6bfe5
settlement.schema.jsonSize 1.7 KB
GRIP Settlement
SHA-25678257d675b1fd913a53e587b0363a6db01a012683de3fa29c4402b87994fc73b
context.schema.jsonSize 1.7 KB
GRIP Context Envelope
SHA-2560a0837bc8a9ecf6843a79634522d80a60e641df787bc4f1bb5655f3247c73b38

05 · Registries

The words a chain may use.

acts.jsonSize 1.8 KB
Act families and consequence classes.
SHA-256ebc760bdac958b978e5435605fe3b49835056f00c48650de2d2cdc2fa13c2e7d
boundaries.jsonSize 832 B
Boundaries.
SHA-2565a21c884fef42a73a90281bd90bd4cc5006e2582a9316027223ac47cb6c55e1d
budget-axes.jsonSize 1.1 KB
Budget axes.
SHA-256a84e3c866780cbf71793fabe67059a39d52b577a64fc48205ba1f0fba53466db
conformance-levels.jsonSize 1.2 KB
Conformance levels, GRIP-0 to GRIP-3.
SHA-2563e77ef52b87936c8f7422ca6f601b95a09f90c98735c1404d80b0ffbdc77c3ea
denial-reasons.jsonSize 1.6 KB
Denial reasons.
SHA-2566a3b4f2439018118cb467191746c37b0b2e27e70bb6d44839189d216170cdef9

06 · Verifier and suite

Check a chain, rule by rule.

grip_verify.pySize 25 KB
grip-verify, the eight-rule chain verifier.
SHA-256e1b2ad56c94758a58383013b2fd9a3701ac2b42e9bac808d43da843fd129b127
gripcore.pySize 5.8 KB
Canonical form, object ids and detached signatures.
SHA-2560828a87d1c86420073dab0d001a0badf5e6be7b164fc02d94329b6c13efbf252
make_vectors.pySize 16 KB
Rebuilds every test vector, byte for byte, from seeded keys.
SHA-256427cbec31023eecc1171d92965546e26b1242ded2209b673ee3e9f72f3216df9
run.pySize 4.1 KB
Checks that each vector fails exactly the rules it should.
SHA-256c247e14712f9c792d86ff5939cd6ff06a32a661ffaa97cf21067bb818f667d87

07 · Test vectors

One good chain, six broken ones.

Each broken chain differs from the good one in exactly one way. The keys come from published seeds, so they protect nothing.

README.mdSize 747 B
How the vectors are made and what each one proves.
SHA-25656ba4d34709e280b634baec4e9d48d8af606baffcb8a28eff6685a1b06bc91ee
canonical-ids.jsonSize 945 B
The ids of the objects in the good chain.
SHA-25656a637c994da35392386dce0fc3b6664f3b7510294e8f508d2af39c591c6c7de

refund-happy-path/

All eight rules pass · 13 files

Appendix C, end to end. All eight rules pass.

expected.jsonSize 287 B
What the verifier must answer
SHA-25658f97b36e96236d4d95372904be7ae003360c73cd02f94ec9402c6120c631101
01-mandate.jsonSize 1.3 KB
A signed object in the chain
SHA-256c163330fad507dc673413719ff0b1328d4d4e75e8e4ca33b7b19b18de083dce4
02-grant.jsonSize 1.1 KB
A signed object in the chain
SHA-2565f0c8793872bcf54e6f6f0f34a8ad08ab2a0abee1f890f740167b76b12a8eaf4
03-context.jsonSize 1.1 KB
A signed object in the chain
SHA-256540377e46c24d4e04b9a1e5d98df37597fe45e42c7e120219840e637990a3173
04-receipt-model-gate.jsonSize 1.3 KB
A signed object in the chain
SHA-2560419d5822d3693379fa1691d7a802bac1549aa7a94723c745b59ff706329b65f
05-receipt-model-outcome.jsonSize 1.7 KB
A signed object in the chain
SHA-256f8ba8a4b6e7388e8d99c6f7b0aa7a26dc6aca087f6942d2fa9aefd4eb96589c3
06-receipt-denied.jsonSize 1.4 KB
A signed object in the chain
SHA-25604e8964d46be35fe40cbf25a58bb5b38d7549083cf24b69d81f73214de2039a9
07-stop.jsonSize 854 B
A signed object in the chain
SHA-2567b6e5352157940c4674de651165355a3e81da95156863d6b81bd896445f1bfe7
08-receipt-approve.jsonSize 1.2 KB
A signed object in the chain
SHA-2569e27238872899273249cfbf53401fcd1df3dfb32ca0e825509b43523ffce009d
09-receipt-refund-gate.jsonSize 1.4 KB
A signed object in the chain
SHA-2567c6c9a7c1d305607097fe7b17a1b8cb6af029ea2ddecd9c1a77e8ac5b8433a24
10-receipt-refund-outcome.jsonSize 1.7 KB
A signed object in the chain
SHA-256a526e09ffe042f3024a8ef473a310104b3a7159d79b681af8ab4c1a4ff5b40a8
11-settlement.jsonSize 1.5 KB
A signed object in the chain
SHA-2564bad0ae71c28b15f5a3affca670e40db2643fa2403dc34227efe9351bc5a264e
trust-bundle.jsonSize 1.8 KB
The keys a verifier trusts for this chain
SHA-256b6b004695ca3647e523e153f744a38c00be4095e4bc446a1ee26ed970d6589a7

^*Four files were revised after that list was made: ALM-proposal-2026-08.pdf, CITATION.bib, README.md and HOSTING.md. The checksums on this page are the files as they are served.

Found a mistake? Tell us.

GRIP is a draft, published for review. Licensed for use.

Read about GRIP

Write to hello@foxora.ai

Both papers, on Research