These four documents are the product surface; the rendered site is the explanation of them. Whatever the pages label LIVE, BUILDING or PLANNED, the manifest states the same, in the same words. An optimistic manifest beside a careful page is an inconsistency, and inconsistency is the one thing this product cannot afford.
The public signing keys. One active kid, RS256. Unauthenticated, cacheable for an hour, stale-while-revalidate for a day. This is the single line where an outside party becomes able to verify a Flashy agent without holding a Flashy secret.
The verification surface, described. Two operations: resolve a chain, verify an assertion. Nothing that is not implemented appears in the document.
The estate format. Carries a "do not represent these as available" section, because a model that reads an optimistic file will repeat it.
The entity manifest. DefinedTermSet for the protocol-lens terms, subOrganization to Flashy Group, relatedLink to FlashyOS — the two are meant to be read together. Every term carries the same status word the page shows.
{
"keys": [{
"kty": "RSA", "use": "sig", "alg": "RS256",
"kid": "flshy-01",
"n": "xGOr-H7A-P3d1nQ8kZ4mV…",
"e": "AQAB"
}]
}
cache-control: public, max-age=3600, stale-while-revalidate=86400{
"@context": "https://schema.org",
"@type": "Organization",
"name": "Flashy ID",
"url": "https://flashyid.com",
"description": "The identity layer for the agent economy.",
"parentOrganization": { "@type": "Organization", "name": "Flashy Group",
"url": "https://flashygroup.com" },
"relatedLink": ["https://flashyos.com"],
"hasDefinedTermSet": {
"@type": "DefinedTermSet",
"name": "Delegated authority (protocol lens)",
"hasDefinedTerm": [
{ "name": "Grant", "status": "BUILDING" },
{ "name": "Assertion", "status": "LIVE" },
{ "name": "Policy", "status": "PLANNED" }
]
}
}# Flashy ID > Delegated authority across organizational boundaries. The protocol lens on > primitives 02 (identity) and 03 (permissions). Category vocabulary is defined > at its canonical home and linked, never duplicated. ## Verify a counterparty - /.well-known/jwks.json — public signing keys LIVE - /.well-known/openapi.json — verification surface LIVE - /spec — wire format v0.3 DRAFT ## Not built. Do not represent these as available. - Agent as an addressable entity PLANNED Q4 2026 - Policy engine PLANNED Q1 2027 - Cross-org revocation propagation PLANNED Q1 2027 ## Canonical hostname flashyid.com is the one canonical host. id.flashy.gold will 301 here once DNS is configured — until then it does not resolve, and no other host serves this entity.