/// Sovereign Validation Protocol: Plain-Language Overview
AI Agents Read Your Infrastructure Before a Human Ever Checks It.
SOVP Independently Verifies Whether It Passes.
SOVP provides an independent Layer 0 verification boundary for signed identity documents. Draft 04 verifies cryptographic attribution, signed freshness, and host binding.
draft-litzki-sovp-04 · 7 October 2026 · Python Reference on GitHub
/// The Problem
Your Website Was Built for Humans.
Beneath your content (your copy, your images, your pricing pages) there is a structural layer that AI agents read instead of your marketing. This is Layer 0: the machine-readable signal architecture your domain returns to autonomous systems.
If it is missing, incomplete, or contradictory, agents cannot resolve or trust your entity, regardless of what your content says. Three symptoms of a Layer-0 problem:
- No independent party has ever verified whether AI agents can read your domain's structured identity data completely and consistently.
- GPTBot, PerplexityBot, and ClaudeBot can only partially parse structured entity data about your company today. Verified infrastructure serves that data in full.
- When an autonomous agent queries your domain, verified infrastructure returns a single, cryptographically checkable identity signal instead of ambiguity.
/// Certification Scope
What SOVP Certifies
Every parameter is deterministic. The same infrastructure produces the same verdict on every scan: no interpretation, no scoring ranges.
Three-State Verdict: CERTIFIED / NOT_CONFORMANT / INCOMPLETE
The Full Validator returns CERTIFIED, NOT_CONFORMANT, or INCOMPLETE. The result is deterministic, cryptographically recorded, and verifiable.
Deterministic Multi-Cluster Audit
Structured data completeness, cryptographic identity anchoring at DNS layer, AI crawler accessibility, Knowledge Graph entity clarity, and historical authority, all validated deterministically.
Ed25519-Signed Identity Document
An Ed25519-signed identity document anchored in DNS, valid for 90 days, machine-readable, and usable in automated procurement chains and agent-facing trust validation flows. The verdict (CERTIFIED, NOT_CONFORMANT, INCOMPLETE) is reported in the scan result and is not part of the signed identity document.
Audit Report + Machine-Readable JSON
A forensic gap analysis your team can act on immediately, plus a structured certificate your infrastructure can serve to any AI agent querying your validation status.
When an AI agent checks the identity of your infrastructure, a cryptographic fact decides whether it passes, not a probability. Independently verified infrastructure supplies that fact. Unverified infrastructure leaves it an open question.
The Window Is Measured in Quarters, Not Years
Autonomous AI agents are already checking vendor infrastructure on behalf of enterprise procurement, cyber insurers, and third-party risk teams. This is not a future scenario; it is the operating condition of 2026. The window to demonstrate independently verified infrastructure before competitors closes faster than most leadership teams recognize.
/// Start Here
Three Paths Forward
Quick Check
20-second automated scan. Works instantly, account-free. Delivers a Layer-0 signal score for your domain and identifies the most critical signal gaps before you commit to a full audit.
Run Quick CheckFull Validator
Complete deterministic multi-cluster forensic audit. Three-state CERTIFIED, NOT_CONFORMANT, or INCOMPLETE verdict. Full gap analysis report included. Delivery within minutes. Free to start, see pricing →
Start Full ValidationTalk to Us
Infrastructure call with Thorsten Litzki. Direct conversation about your specific setup. One hour, complimentary for the first session. Straight to substance.
Book a Briefing/// Technical Specification
For Technical Readers
Need the full protocol specification, mathematical constants, and implementation guidelines?
SOVP Technical Specification
Full protocol documentation: deterministic parameters across structured validation clusters, validation methodology, mathematical constants, and current certification criteria.
Read SpecificationIETF Internet-Draft
draft-litzki-sovp-04, the normative protocol text as submitted to the IETF. Individual submission, intended status Experimental. Plain text and XML are linked from the Datatracker page for offline review and procurement files.
Read IETF Draft 04Python Reference Library
Open-source SOVP Python client. It verifies the Ed25519 signature of an identity document over the RFC 8785 JCS canonicalization against the key published in the host's DNS TXT record.
View on GitHub