RunOnProof Company Capability Passport

Problem it solves

Reuse scoped capability state from already committed UK decisions without re-querying a source or pretending that one decision proves everything about a company.

Coverage and limitations

GB only; one normalized Companies House company number per Passport. Only claims supported by admitted, replay-matching, current and entity-bound committed executions are carried.

• Not a universal seal, score, good-standing certificate or portable Verifiable Credential.
• Does not independently verify caller/provider attestations.
• Does not prove bank ownership, invoice authenticity, universal solvency, complete beneficial ownership or perpetual authorization.

Freshness. Public verification re-evaluates expiry, revocation, coverage and reusable capability state without querying a source. Refresh creates a superseding immutable version from stored lifecycle facts; newly committed evidence enters through update.

Source provenance

Sources: COMMITTED_UK_EXECUTIONS

Each capability retains the admitted execution, decision digest, policy checksum, source URL/version/timestamps, parser version, evidence digest, trust boundary, coverage, conditions, limitations and reason codes.

Failure and attention states

Incompatible country, entity, execution, digest or replay state fails closed. Stale/unavailable evidence becomes UNDETERMINED or non-reusable; expiry becomes EXPIRED; invalidation creates a REVOKED immutable version. No failure path charges.

Decisions or lifecycle states: VALID VALID_WITH_LIMITATIONS EXPIRED REVOKED UNDETERMINED

Representative reason codes: LIMITED_COVERAGE SOURCE_UNAVAILABLE CAPABILITY_EXPIRED CAPABILITY_REVOKED PASSPORT_ENTITY_BINDING_MISMATCH PASSPORT_EXECUTION_REPLAY_MISMATCH

An authorised operator is required for issuance, full lookup, version history, replay, update, refresh and invalidation. Public verify is read-only and privacy-minimised. VALID_WITH_LIMITATIONS or UNDETERMINED requires human review before consequential use.

x402 and price

Passport routes reject Payment-Signature. Issuance, lookup, public verification, version lookup, update, refresh, invalidation and replay create no quote, settlement or charge.

Input fields

schema_version country company_number execution_ids idempotency_key

Complete request example

{
  "schema_version": "1.0.0",
  "country": "GB",
  "company_number": "00006400",
  "execution_ids": [
    "gbexec_documentationexample"
  ],
  "idempotency_key": "docs-uk-passport-0001"
}

Complete response example

{
  "passport_id": "ccp_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
  "passport_version": 1,
  "country": "GB",
  "subject_entity_id": "gbent_00006400",
  "jurisdictions": [
    "GB"
  ],
  "status": "ACTIVE_WITH_LIMITATIONS",
  "coverage_summary": "LIMITED",
  "source_health_summary": "HEALTHY",
  "review_required": true,
  "refresh_required": false,
  "capabilities": [
    {
      "capability_id": "LEGAL_STATUS_VERIFIED",
      "status": "VERIFIED",
      "scope": "company:00006400",
      "jurisdiction": "GB",
      "freshness_status": "CURRENT",
      "coverage_status": "LIMITED",
      "source_health_status": "HEALTHY",
      "revocation_status": "ACTIVE",
      "valid_until": "2030-01-02T13:00:00.000Z",
      "reason_codes": [
        "LIMITED_COVERAGE"
      ]
    }
  ],
  "authorizations": [],
  "evidence_refs": [
    {
      "evidence_id": "ev_docs_1",
      "source_id": "UK_COMPANIES_HOUSE",
      "source_url": "https://find-and-update.company-information.service.gov.uk/",
      "source_version": "documentation-example-1.0.0",
      "source_timestamp": "2030-01-02T11:55:00.000Z",
      "retrieved_at": "2030-01-02T12:00:00.000Z",
      "parser_version": "documented-contract-1.0.0",
      "raw_sha256": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
      "freshness": "FRESH",
      "claims": [
        "Illustrative source-scoped claim; inspect the live response"
      ]
    }
  ],
  "decision_refs": [
    "dec_gbexec_documentationexample_0"
  ],
  "passport_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
  "replay_ref": "/v1/gb/company-passports/ccp_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/replays/1",
  "economic_mutations": 0
}

Idempotency, replay and security

Idempotency. Create, update, refresh and invalidate bind a stable Idempotency-Key to the exact payload. Identical retries return the committed version; conflicting reuse returns 409. Terminal revocation cannot be bypassed with a new key.

Replay. Public verify and authenticated replay perform zero source queries, signer calls, versions, economic mutations or charges. Aggregate and change-set digests must match immutable history.

Security and privacy. Private lifecycle routes require an authorised operator. Public verify omits company name, source URLs and actor references. Append-only database guards reject mutation/deletion of versions, claims, authorisations, revocations, refresh plans and idempotency records.

Relationship to the UK V1 core

• Consumes committed results from the seven UK V1 products and five solutions without reimplementing their decisions.
• Never upgrades a LIMITED, REVIEW, stale, unavailable or attested claim into an unconditional capability.

Copyable quickstart

curl -i -sS -X POST https://api.runonproof.com/v1/gb/company-passports \
+  -H 'Content-Type: application/json' \
+  -H 'Authorization: Bearer $RUNONPROOF_OPERATOR_TOKEN' \
+  -H 'Idempotency-Key: docs-uk-passport-0001' \
+  --data '{"schema_version":"1.0.0","country":"GB","company_number":"00006400","execution_ids":["gbexec_documentationexample"],"idempotency_key":"docs-uk-passport-0001"}'

OpenAPI reference → · UK country pack → · UK manifest → · Offer catalogue →