Production Parity Sign-off
This page tracks live production parity checks for public AgentKYC surfaces. It is intentionally operational: each row states expected behavior, observed behavior, and whether action is required.
Snapshot date: 2026-02-19 UTC
| Surface | Expected | Observed | Status |
|---|---|---|---|
| GET /api/health | 200 with healthy/degraded payload | 200 healthy | PASS |
| GET /api/status/{handle} | 200 for verified handle; 404 for unknown; cache headers present | 200 verified, 404 unknown, cache headers present | PASS |
| GET /api/registry | 200 + agents/count/limit/offset/hasMore + cache header | 200 with expected payload + cache header | PASS |
| GET /api/passport/{handle}/self-issued | Public read for verified handle | 200 public read | PASS |
| PUT /api/passport/{handle}/self-issued | 401 without token | 401 unauthorized | PASS |
| POST /api/verify | Rate limit enforced with Retry-After on 429 | 429 observed with Retry-After + rate-limit headers | PASS |
| GET /api/attestation | 200 attester/schema discovery (or paused note) | 200 with paused note | PASS |
| GET /api/attestation/{uid} | When enabled: 400/404/200 matrix; when paused: 503 | 503 in paused mode (expected for current config) | PASS |
| Legacy verification-flow visibility | No public-facing legacy verification-step copy on website surfaces | Public website copy cleaned; legacy flow language removed from public pages | PASS |
| Legacy verification endpoint mode | Align runtime mode with product decision | Can return 400 in legacy-enabled mode depending on production config If strict MVP behavior is required, set TEST_TASKS_ENABLED=false in production. | ACTION |