How can an AI agent verify a company it has never dealt with?
An agent verifying an unfamiliar company needs four things a website cannot give it: what the company can actually do, which relationships a second party has confirmed, where it operates, and whether a given agent holds authority to commit it. Each is a separate primitive — a capability record, a countersigned edge, a jurisdiction claim, and a verifiable grant chain — and today the fourth is the furthest along and the third does not exist.
The question, stated exactly
Find three robotics companies that can manufacture this component, have a confirmed relationship with an approved supplier, operate in a given jurisdiction, and whose agent can be shown to hold authority to commit them to a contract of a given size.
A person answers that in three weeks with phone calls, a procurement portal and a lawyer. An agent cannot answer it at all from the public web, because every input it needs is either prose on a marketing page, locked inside one platform’s database, or simply never written down. The company website is the worst infrastructure imaginable for it: unstructured, self-asserted, undated, and unfalsifiable.
Four primitives, not one product
Capability — what an organization’s agents can be asked to do, declared in a normalized vocabulary rather than described in paragraphs, so that matching is an intersection rather than an inference. Relationship — a claim that crosses an organizational boundary, in a state that says whether the other party has confirmed it. Jurisdiction — where the organization operates and under whose law, as a field rather than a footer. Authority — a chain from a named accountable human, through a grant that may only ever narrow, to the agent presenting itself, checkable without asking the issuer.
They are genuinely separate problems, and a system that solves three of them is not three-quarters of an answer: a procurement agent that can establish capability, relationship and authority but not jurisdiction has found a supplier it may not be permitted to buy from.
Where FlashyOS actually is, primitive by primitive
Capability is real. Agent capabilities are declared in each organization’s charter, normalized to one spelling on write, and readable by an unauthenticated caller through a public endpoint — matching is an exact-set intersection today.
Relationship has the mechanism and none of the evidence. An edge crossing an organizational boundary reaches its final state only when a human at the other organization signs it, and the asserting party cannot sign its own claim about somebody else. That rule is enforced in code. The count of countersigned relationships in the live estate graph is nevertheless zero, and the count between organizations with no common owner is also zero. The mechanism has never been exercised by two independent parties.
Authority is the furthest along and lives in flashyID: a grant may only ever carry a subset of the granter’s scopes, assertions bind subject to holder, and the chain is verified rather than the signature alone. What a charter expresses is an approval threshold by impact tier — low, medium, high, critical — rather than a monetary amount, so “may commit us to a contract of this size” is not a question the current format answers. Mapping tiers onto amounts is a real piece of unbuilt work, not a detail.
Jurisdiction has no representation at all. The directory has no field for it, and organization records in the live graph carry an empty subject object where their schema.org description would go. An agent reading the estate’s own published record today cannot tell which country any of these organizations operates in.
Why the honest version of this page is the useful one
Every vendor in this category will publish a page describing this scenario as solved. It is a good scenario and it makes a good demonstration. The reason to publish which parts do not work is not modesty — it is that an integrator evaluating a format will find out within a day, and a format whose author overstated the easy part cannot be trusted about the hard one.
It also names the roadmap without a roadmap page: jurisdiction as a first-class claim, impact tiers reconciled with monetary limits, and — far more important than either — the first relationship countersigned by two organizations nobody controls.