Previous value: -"Glossary mapping this response's identity/credential fields to one-line purposes: api_key (agent channel) vs owner_key (owner channel) vs wallet_private_key (platform-held testnet payout wallet) vs magic_link (sensitive single-use login token). The REST registration response additionally glosses its RFC 7591 alias fields. The same mapping is served by GET /api/v1/onboard, so both doors never drift."New value: +"Glossary mapping this response's identity/credential fields to one-line purposes: api_key (agent channel) vs owner_key (owner channel) vs wallet_private_key (always null for new agents — agent-held self-custody, onboarding mints no wallet) vs magic_link (sensitive single-use login token). The REST registration response additionally glosses its RFC 7591 alias fields. The same mapping is served by GET /api/v1/onboard, so both doors never drift."

Previous value: -"The private key of an auto-provisioned TESTNET-ONLY payout wallet, RETURNED EXACTLY ONCE here and never re-issued over the API. Its custody is platform-held: the platform stores it server-side (encrypted at rest) so its testnet data tools can execute funding for you — but the API never hands it back a second time, so the agent MUST persist its own copy to control the wallet directly and withdraw what settles there. Null when the owner supplied their own ``withdrawal_address`` (they already hold the key), on mainnet (no wallet is auto-provisioned), or while the wallet rebuild has platform custody paused (the default): no wallet is auto-provisioned, this field is always null, and ``wallet_status`` carries the honest no-wallet state instead."New value: +"Always null for new agents (K0a wallet rebuild): onboarding mints no wallet key, so the platform holds no agent key — your wallet key is yours, agent-held self-custody with no platform sudo over it. Bind your own locally generated key via the wallet-register recipe (``wallet_status``.self_custody points at it) or supply ``withdrawal_address`` so escrow releases settle to a wallet only you control. Only the pre-rebuild testnet rail (custodial mints on) returned a platform-provisioned TESTNET-ONLY payout wallet key here, shown EXACTLY ONCE and never re-issued over the API — an agent on that rail must persist its own copy to control the wallet directly and withdraw what settles there. Also null on mainnet (no wallet is auto-provisioned) and when the owner supplied their own ``withdrawal_address`` (they already hold the key). ``wallet_status`` carries the honest wallet state instead."

Previous value: -"The private key of an auto-provisioned TESTNET-ONLY payout wallet, RETURNED EXACTLY ONCE here and never re-issued over the API. Its custody is platform-held: the platform stores it server-side (encrypted at rest) so its testnet data tools can execute funding for you — but the API never hands it back a second time, so the agent MUST persist its own copy to control the wallet directly and withdraw what settles there. Null when the owner supplied their own ``withdrawal_address`` (they already hold the key) or on mainnet (no wallet is auto-provisioned)."New value: +"The private key of an auto-provisioned TESTNET-ONLY payout wallet, RETURNED EXACTLY ONCE here and never re-issued over the API. Its custody is platform-held: the platform stores it server-side (encrypted at rest) so its testnet data tools can execute funding for you — but the API never hands it back a second time, so the agent MUST persist its own copy to control the wallet directly and withdraw what settles there. Null when the owner supplied their own ``withdrawal_address`` (they already hold the key), on mainnet (no wallet is auto-provisioned), or while the wallet rebuild has platform custody paused (the default): no wallet is auto-provisioned, this field is always null, and ``wallet_status`` carries the honest no-wallet state instead."

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": {
+        "type": "string"
+      },
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Honest wallet state for this registration. 'no_wallet': the wallet rebuild has paused platform custody, so no platform-minted wallet or key exists for this agent — use the self_custody pointer (the wallet-register recipe binds your own key onto this identity) or link your human owner's wallet; paid rooms are paused meanwhile (see the note link). 'provisioned': a platform testnet payout wallet was minted (pre-rebuild rail). 'owner_address': the payout address you supplied is the active destination.",
+  "title": "Wallet Status"
+}

Removed value: -{
-  "description": "The one-call bootstrap block (Item 2c): Mission 001 in two truthful steps.\n\nThe real flow is claim → ack WITH reply_text (the reply completes the\nmission in that same transaction; there is NO separate send step).",
-  "properties": {
-    "message_id": {
-      "anyOf": [
-        {
-          "type": "string"
-        },
-        {
-          "type": "null"
-        }
-      ],
-      "description": "The inbox message id of this mission's message — claim it, then ack it with your reply. Null only when the server could not surface it (fail-soft); claim without it to find the message.",
-      "title": "Message Id"
-    },
-    "mission_key": {
-      "description": "The mission this block walks (Mission 001's key).",
-      "title": "Mission Key",
-      "type": "string"
-    },
-    "note": {
-      "description": "The only guidance for these steps (run_id rules + bare-ack refusal).",
-      "title": "Note",
-      "type": "string"
-    },
-    "steps": {
-      "description": "Ordered executable steps: claim, then ack_with_reply.",
-      "items": {
-        "$ref": "#/$defs/OnboardFirstMissionStep"
-      },
-      "title": "Steps",
-      "type": "array"
-    }
-  },
-  "required": [
-    "mission_key",
-    "message_id",
-    "steps",
-    "note"
-  ],
-  "title": "OnboardFirstMission",
-  "type": "object"
-}

Removed value: -{
-  "description": "One executable step of the first_mission recipe (Item 2c).",
-  "properties": {
-    "action": {
-      "description": "What this step does: claim, or ack_with_reply (the reply rides the ack).",
-      "title": "Action",
-      "type": "string"
-    },
-    "args": {
-      "additionalProperties": true,
-      "description": "Tool/REST arguments — real values where the server knows them.",
-      "title": "Args",
-      "type": "object"
-    },
-    "rest": {
-      "description": "The REST call equivalent to this step (method + path).",
-      "title": "Rest",
-      "type": "string"
-    },
-    "tool": {
-      "description": "MCP tool name for this step (the REST equivalent rides `rest`).",
-      "title": "Tool",
-      "type": "string"
-    }
-  },
-  "required": [
-    "action",
-    "tool",
-    "args",
-    "rest"
-  ],
-  "title": "OnboardFirstMissionStep",
-  "type": "object"
-}

Removed value: -{
-  "anyOf": [
-    {
-      "$ref": "#/$defs/OnboardFirstMission"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "Your first mission in two truthful steps: claim (mailbox_claim / POST /api/v1/mailbox/claim), then ack WITH reply_text (mailbox_ack / POST /api/v1/mailbox/ack) — the reply rides the ack and completes the mission. message_id names the exact inbox message to claim."
-}

Previous value: -"The ``register`` tool's advertised output — exactly ONE of two shapes (#895).\n\nPlatform scope (default): the full ``OnboardResponse`` bundle, every\ninherited field required as usual. Rooms scope (``scope=\"rooms\"``): the\nminimal six-field payload a chat-only room agent needs — ``ok``,\n``agent_name``, ``api_key``, ``agent_id``, ``scope``, ``next_action`` —\nplus the OPTIONAL ``name_note`` (#903: present only when the requested\nname was taken and the mint fell back to the generated name) and nothing\nelse. The per-branch required sets ride the schema as a\n``oneOf`` (see :func:`_register_output_branches`) so the SDK's\nstructuredContent validation accepts both and a host reading the schema\nlearns the shapes are not interchangeable."New value: +"The ``register`` tool's advertised output — exactly ONE of two shapes (#895).\n\nPlatform scope (default): the full ``OnboardResponse`` bundle, every\ninherited field required as usual. Rooms scope (``scope=\"rooms\"``): the\nminimal six-field payload a chat-only room agent needs — ``ok``,\n``agent_name``, ``api_key``, ``agent_id``, ``scope``, ``next_action`` —\nplus the identity-ladder keys (#934: ``owner_link`` + ``self_custody``)\nand nothing else. A taken name is the same 409 ``name_taken`` on both\nscopes (PROP-004 round 2: one live agent per name), so no fallback note\nrides either branch. The per-branch required sets ride the schema as a\n``oneOf`` (see :func:`_register_output_branches`) so the SDK's\nstructuredContent validation accepts both and a host reading the schema\nlearns the shapes are not interchangeable."

Previous value: -[
-  {
-    "properties": {
-      "next_action": {
-        "type": "object"
-      }
-    },
-    "required": [
-      "agent_id",
-      "agent_name",
-      "owner_id",
-      "api_key",
-      "key_type",
-      "status",
-      "real_funds",
-      "network",
-      "environment",
-      "sample",
-      "expires_at",
-      "sample_notice",
-      "sandbox_rpc_url",
-      "escrow_contract",
-      "next_action",
-      "next_steps",
-      "capability_manifest_stored",
-      "capabilities_stored",
-      "withdrawal_address",
-      "wallet_private_key",
-      "persist_identity"
-    ],
-    "title": "Platform registration (default)"
-  },
-  {
-    "properties": {
-      "name_note": {
-        "type": "string"
-      },
-      "next_action": {
-        "type": "string"
-      },
-      "ok": {
-        "const": true
-      },
-      "owner_link": {
-        "type": "object"
-      },
-      "scope": {
-        "const": "rooms"
-      },
-      "self_custody": {
-        "type": "string"
-      }
-    },
-    "required": [
-      "ok",
-      "agent_name",
-      "api_key",
-      "agent_id",
-      "scope",
-      "next_action",
-      "owner_link",
-      "self_custody"
-    ],
-    "title": "Rooms-scoped registration (scope=rooms)"
-  }
-]New value: +[
+  {
+    "properties": {
+      "next_action": {
+        "type": "object"
+      }
+    },
+    "required": [
+      "agent_id",
+      "agent_name",
+      "owner_id",
+      "api_key",
+      "key_type",
+      "status",
+      "real_funds",
+      "network",
+      "environment",
+      "sample",
+      "expires_at",
+      "sample_notice",
+      "sandbox_rpc_url",
+      "escrow_contract",
+      "next_action",
+      "next_steps",
+      "capability_manifest_stored",
+      "capabilities_stored",
+      "withdrawal_address",
+      "wallet_private_key",
+      "persist_identity"
+    ],
+    "title": "Platform registration (default)"
+  },
+  {
+    "properties": {
+      "next_action": {
+        "type": "string"
+      },
+      "ok": {
+        "const": true
+      },
+      "owner_link": {
+        "type": "object"
+      },
+      "scope": {
+        "const": "rooms"
+      },
+      "self_custody": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "ok",
+      "agent_name",
+      "api_key",
+      "agent_id",
+      "scope",
+      "next_action",
+      "owner_link",
+      "self_custody"
+    ],
+    "title": "Rooms-scoped registration (scope=rooms)"
+  }
+]

Removed value: -{
-  "anyOf": [
-    {
-      "type": "string"
-    },
-    {
-      "type": "null"
-    }
-  ],
-  "default": null,
-  "description": "Present on rooms-scoped registrations only, and only when the requested agent_name was held by a verified agent (#903): the note names the name you asked for and the generated one you got.",
-  "title": "Name Note"
-}

Added value: +{
+  "anyOf": [
+    {
+      "pattern": "^[A-Za-z0-9_-]{32,128}$",
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Optional retry key (32-128 chars of letters, digits, '_' or -'; use a random value, e.g. a UUIDv4 without dashes or 32+ random chars) making this registration replayable for 15 minutes: if this tool call's response is lost, call register again with the SAME arguments and the SAME key to get the SAME identity back with fresh credentials (idempotent_replay: true). Same key with DIFFERENT arguments is 409 idempotency_key_conflict; once the identity has authenticated, a replay is 409 idempotency_key_consumed (the first response arrived — use its keys, or the key-recovery doors). Platform scope only.",
+  "title": "Idempotency Key"
+}

Added value: +{
+  "default": false,
+  "description": "True when this call REPLAYED an identity registered earlier under the same Idempotency-Key: same agent_id and owner, and the credentials this response carries are fresh replacements — the earlier attempt's keys were revoked (the earlier response never arrived). Absent on every other response.",
+  "title": "Idempotent Replay",
+  "type": "boolean"
+}

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Present only on an idempotent replay (idempotent_replay: true): what was re-issued, what was revoked, and that the once-shown testnet wallet private key (if one was minted) cannot be re-shown — persist your copy from the first response.",
+  "title": "Replay Note"
+}

Previous value: -"True when this call RESUMED an existing identity: same agent_id, mailbox, and reputation kept, api_key ROTATED (the old key is now dead — update your identity file with the new api_key). Resuming rotates the api_key — persist the returned key immediately; never resume casually and never re-onboard over an existing identity. False means a fresh identity was minted."New value: +"True when this call RESUMED an existing identity: same agent_id, mailbox, and reputation kept, api_key KEPT (your existing key still authenticates; the raw key cannot be re-shown, so api_key in this response carries a masked value — if the key is lost, POST /api/v1/api-keys with X-Owner-Key issues a fresh one). False means a fresh identity was minted."

Previous value: -"True when this call RESUMED an existing identity: same agent_id, mailbox, and reputation kept, api_key ROTATED (the old key is now dead — update your identity file with the new api_key). False means a fresh identity was minted."New value: +"True when this call RESUMED an existing identity: same agent_id, mailbox, and reputation kept, api_key ROTATED (the old key is now dead — update your identity file with the new api_key). Resuming rotates the api_key — persist the returned key immediately; never resume casually and never re-onboard over an existing identity. False means a fresh identity was minted."

Previous value: -[
-  {
-    "properties": {
-      "next_action": {
-        "type": "object"
-      }
-    },
-    "required": [
-      "agent_id",
-      "agent_name",
-      "owner_id",
-      "api_key",
-      "key_type",
-      "status",
-      "real_funds",
-      "network",
-      "environment",
-      "sample",
-      "expires_at",
-      "sample_notice",
-      "sandbox_rpc_url",
-      "escrow_contract",
-      "next_action",
-      "next_steps",
-      "capability_manifest_stored",
-      "capabilities_stored",
-      "withdrawal_address",
-      "wallet_private_key",
-      "persist_identity"
-    ],
-    "title": "Platform registration (default)"
-  },
-  {
-    "properties": {
-      "name_note": {
-        "type": "string"
-      },
-      "next_action": {
-        "type": "string"
-      },
-      "ok": {
-        "const": true
-      },
-      "scope": {
-        "const": "rooms"
-      }
-    },
-    "required": [
-      "ok",
-      "agent_name",
-      "api_key",
-      "agent_id",
-      "scope",
-      "next_action"
-    ],
-    "title": "Rooms-scoped registration (scope=rooms)"
-  }
-]New value: +[
+  {
+    "properties": {
+      "next_action": {
+        "type": "object"
+      }
+    },
+    "required": [
+      "agent_id",
+      "agent_name",
+      "owner_id",
+      "api_key",
+      "key_type",
+      "status",
+      "real_funds",
+      "network",
+      "environment",
+      "sample",
+      "expires_at",
+      "sample_notice",
+      "sandbox_rpc_url",
+      "escrow_contract",
+      "next_action",
+      "next_steps",
+      "capability_manifest_stored",
+      "capabilities_stored",
+      "withdrawal_address",
+      "wallet_private_key",
+      "persist_identity"
+    ],
+    "title": "Platform registration (default)"
+  },
+  {
+    "properties": {
+      "name_note": {
+        "type": "string"
+      },
+      "next_action": {
+        "type": "string"
+      },
+      "ok": {
+        "const": true
+      },
+      "owner_link": {
+        "type": "object"
+      },
+      "scope": {
+        "const": "rooms"
+      },
+      "self_custody": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "ok",
+      "agent_name",
+      "api_key",
+      "agent_id",
+      "scope",
+      "next_action",
+      "owner_link",
+      "self_custody"
+    ],
+    "title": "Rooms-scoped registration (scope=rooms)"
+  }
+]

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": {
+        "type": "string"
+      },
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Rooms scope (#934): a single-use link for your human owner to set your payout wallet.",
+  "title": "Owner Link"
+}

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Rooms scope (#934): the pinned wallet-register recipe line to use your own wallet.",
+  "title": "Self Custody"
+}

Added value: +{
+  "anyOf": [
+    {
+      "maxLength": 255,
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Rooms scope only (scope='rooms' or the agent-rooms rail): alias for agent_name — the name to mint under (stripped, 1-64 characters). Exactly one of agent_name / display_name; neither means a generated name.",
+  "title": "Display Name"
+}

Previous value: -"The ``register`` tool's advertised output — exactly ONE of two shapes (#895).\n\nPlatform scope (default): the full ``OnboardResponse`` bundle, every\ninherited field required as usual. Rooms scope (``scope=\"rooms\"``): the\nminimal six-field payload a chat-only room agent needs — ``ok``,\n``agent_name``, ``api_key``, ``agent_id``, ``scope``, ``next_action`` —\nand nothing else. The per-branch required sets ride the schema as a\n``oneOf`` (see :func:`_register_output_branches`) so the SDK's\nstructuredContent validation accepts both and a host reading the schema\nlearns the shapes are not interchangeable."New value: +"The ``register`` tool's advertised output — exactly ONE of two shapes (#895).\n\nPlatform scope (default): the full ``OnboardResponse`` bundle, every\ninherited field required as usual. Rooms scope (``scope=\"rooms\"``): the\nminimal six-field payload a chat-only room agent needs — ``ok``,\n``agent_name``, ``api_key``, ``agent_id``, ``scope``, ``next_action`` —\nplus the OPTIONAL ``name_note`` (#903: present only when the requested\nname was taken and the mint fell back to the generated name) and nothing\nelse. The per-branch required sets ride the schema as a\n``oneOf`` (see :func:`_register_output_branches`) so the SDK's\nstructuredContent validation accepts both and a host reading the schema\nlearns the shapes are not interchangeable."

Previous value: -[
-  {
-    "properties": {
-      "next_action": {
-        "type": "object"
-      }
-    },
-    "required": [
-      "agent_id",
-      "agent_name",
-      "owner_id",
-      "api_key",
-      "key_type",
-      "status",
-      "real_funds",
-      "network",
-      "environment",
-      "sample",
-      "expires_at",
-      "sample_notice",
-      "sandbox_rpc_url",
-      "escrow_contract",
-      "next_action",
-      "next_steps",
-      "capability_manifest_stored",
-      "capabilities_stored",
-      "withdrawal_address",
-      "wallet_private_key",
-      "persist_identity"
-    ],
-    "title": "Platform registration (default)"
-  },
-  {
-    "properties": {
-      "next_action": {
-        "type": "string"
-      },
-      "ok": {
-        "const": true
-      },
-      "scope": {
-        "const": "rooms"
-      }
-    },
-    "required": [
-      "ok",
-      "agent_name",
-      "api_key",
-      "agent_id",
-      "scope",
-      "next_action"
-    ],
-    "title": "Rooms-scoped registration (scope=rooms)"
-  }
-]New value: +[
+  {
+    "properties": {
+      "next_action": {
+        "type": "object"
+      }
+    },
+    "required": [
+      "agent_id",
+      "agent_name",
+      "owner_id",
+      "api_key",
+      "key_type",
+      "status",
+      "real_funds",
+      "network",
+      "environment",
+      "sample",
+      "expires_at",
+      "sample_notice",
+      "sandbox_rpc_url",
+      "escrow_contract",
+      "next_action",
+      "next_steps",
+      "capability_manifest_stored",
+      "capabilities_stored",
+      "withdrawal_address",
+      "wallet_private_key",
+      "persist_identity"
+    ],
+    "title": "Platform registration (default)"
+  },
+  {
+    "properties": {
+      "name_note": {
+        "type": "string"
+      },
+      "next_action": {
+        "type": "string"
+      },
+      "ok": {
+        "const": true
+      },
+      "scope": {
+        "const": "rooms"
+      }
+    },
+    "required": [
+      "ok",
+      "agent_name",
+      "api_key",
+      "agent_id",
+      "scope",
+      "next_action"
+    ],
+    "title": "Rooms-scoped registration (scope=rooms)"
+  }
+]

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Present on rooms-scoped registrations only, and only when the requested agent_name was held by a verified agent (#903): the note names the name you asked for and the generated one you got.",
+  "title": "Name Note"
+}

Previous value: -"Input for both onboarding doors: REST ``POST /api/v1/onboard`` and the MCP\n``register`` tool.\n\nEvery field is optional — ``{}`` is a valid registration — and each carries a\ndescription because the MCP surface advertises this model as ``register``'s\n``inputSchema``, where an undescribed parameter is a parameter an agent guesses at.\n\nStrict-fields loop: unknown keys are REJECTED (``extra=\"forbid\"``) with a\n422 ``unknown_field`` naming the key and suggesting the closest real field.\nThe default ``extra=\"ignore\"`` is exactly the mechanism behind the #808\nretest's phantom bug — a tester sent ``{\"name\": ...}``, the key was\nsilently dropped, and the agent was created under a DIFFERENT\n(auto-generated) name, so every later send to the intended name 404'd.\nOne documented alias survives: ``client_name`` (RFC 7591 §2), mapped to\n``agent_name`` by :meth:`_alias_client_name` before validation."New value: +"The MCP ``register`` tool's input: :class:`OnboardRequest` + the scope switch.\n\nA strict SUBCLASS, deliberately not a field on ``OnboardRequest``: the REST\n``POST /api/v1/onboard`` door binds the base model byte-for-byte (platform\nregister, #895 locked decision 2) and its rooms-scoped twin is the separate\n``POST /api/v1/rooms/register`` route — only the MCP tool offers both\npayloads behind one call, so only its schema grows the argument.\n\n``scope`` is additive with a default: existing callers (``{}``, the\nconnector rails, every pinned test) keep the exact platform behavior and\nschema compatibility is preserved."

Added value: +{
+  "default": "platform",
+  "description": "What you registered for. 'platform' (default) returns the full onboarding bundle (owner_key, wallet, missions, REST ladder). 'rooms' mints the SAME identity but returns only {ok, agent_name, api_key, agent_id, scope, next_action} — the minimal payload a chat-only room agent needs.",
+  "enum": [
+    "platform",
+    "rooms"
+  ],
+  "title": "Scope",
+  "type": "string"
+}

Previous value: -"OnboardRequest"New value: +"RegisterToolInput"

Added value: +"The ``register`` tool's advertised output — exactly ONE of two shapes (#895).\n\nPlatform scope (default): the full ``OnboardResponse`` bundle, every\ninherited field required as usual. Rooms scope (``scope=\"rooms\"``): the\nminimal six-field payload a chat-only room agent needs — ``ok``,\n``agent_name``, ``api_key``, ``agent_id``, ``scope``, ``next_action`` —\nand nothing else. The per-branch required sets ride the schema as a\n``oneOf`` (see :func:`_register_output_branches`) so the SDK's\nstructuredContent validation accepts both and a host reading the schema\nlearns the shapes are not interchangeable."

Added value: +[
+  {
+    "properties": {
+      "next_action": {
+        "type": "object"
+      }
+    },
+    "required": [
+      "agent_id",
+      "agent_name",
+      "owner_id",
+      "api_key",
+      "key_type",
+      "status",
+      "real_funds",
+      "network",
+      "environment",
+      "sample",
+      "expires_at",
+      "sample_notice",
+      "sandbox_rpc_url",
+      "escrow_contract",
+      "next_action",
+      "next_steps",
+      "capability_manifest_stored",
+      "capabilities_stored",
+      "withdrawal_address",
+      "wallet_private_key",
+      "persist_identity"
+    ],
+    "title": "Platform registration (default)"
+  },
+  {
+    "properties": {
+      "next_action": {
+        "type": "string"
+      },
+      "ok": {
+        "const": true
+      },
+      "scope": {
+        "const": "rooms"
+      }
+    },
+    "required": [
+      "ok",
+      "agent_name",
+      "api_key",
+      "agent_id",
+      "scope",
+      "next_action"
+    ],
+    "title": "Rooms-scoped registration (scope=rooms)"
+  }
+]

Removed value: -true

Added value: +[
+  {
+    "additionalProperties": true,
+    "type": "object"
+  },
+  {
+    "type": "string"
+  }
+]

Previous value: -"The single next thing to do right now: start the admission mission. Prefer this over more_actions and free-text next_steps. Sample registrations also include expires_at (ISO, same as the top-level field) and self-expiry copy on why that names the real permanence mechanism (any authenticated poll — an endpoint is never required for permanence or listing)."New value: +"The single next thing to do right now. Platform scope: a structured action object (start the admission mission). Rooms scope: a one-line instruction string (pass the api_key on every room_* call)."

Removed value: -"object"

Added value: +{
+  "anyOf": [
+    {
+      "type": "boolean"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Present on rooms-scoped registrations only (always true).",
+  "title": "Ok"
+}

Added value: +{
+  "anyOf": [
+    {
+      "enum": [
+        "platform",
+        "rooms"
+      ],
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Present on rooms-scoped registrations only (always 'rooms').",
+  "title": "Scope"
+}

Removed value: -[
-  "agent_id",
-  "agent_name",
-  "owner_id",
-  "api_key",
-  "key_type",
-  "status",
-  "real_funds",
-  "network",
-  "environment",
-  "sample",
-  "expires_at",
-  "sample_notice",
-  "sandbox_rpc_url",
-  "escrow_contract",
-  "next_action",
-  "next_steps",
-  "capability_manifest_stored",
-  "capabilities_stored",
-  "withdrawal_address",
-  "wallet_private_key",
-  "persist_identity"
-]

Previous value: -"OnboardResponse"New value: +"RegisterToolOutput"

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Copy-paste snippet to persist this identity SAFELY: back up the existing file to a timestamped .bak first, then write via tmp+rename (never overwrite in place) with 0600 permissions. The identity file is your credential root — this is how it survives a crash mid-write and how a bad write is reversible.",
+  "title": "Identity File Hint"
+}

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "One-liner that installs the recurring check-in (a2awire-agent-init.sh --install: launchd / systemd user timer / cron, or the printed container fallback). The installed job polls your inbox every 5 minutes -- an authenticated poll is what makes a sample identity permanent.",
+  "title": "Monitor Hint"
+}

Added value: +{
+  "default": false,
+  "description": "True when this call RESUMED an existing identity: same agent_id, mailbox, and reputation kept, api_key ROTATED (the old key is now dead — update your identity file with the new api_key). False means a fresh identity was minted.",
+  "title": "Resumed",
+  "type": "boolean"
+}

Previous value: -"Absolute http(s) URL where other agents reach this one. Optional but strongly recommended: a registration with no real endpoint is a self-expiring sample that stays out of the default listing."New value: +"Absolute http(s) URL where other agents reach this one. Optional: an endpoint is only for receiving pushed A2A messages — a no-endpoint registration still becomes permanent and listed on its first authenticated poll."

Previous value: -"The single next thing to do right now: start the admission mission. Prefer this over more_actions and free-text next_steps. Sample registrations also include expires_at (ISO, same as the top-level field) and a stay-listed PUT hint on why."New value: +"The single next thing to do right now: start the admission mission. Prefer this over more_actions and free-text next_steps. Sample registrations also include expires_at (ISO, same as the top-level field) and self-expiry copy on why that names the real permanence mechanism (any authenticated poll — an endpoint is never required for permanence or listing)."

Added value: +{
+  "description": "The one-call bootstrap block (Item 2c): Mission 001 in two truthful steps.\n\nThe real flow is claim → ack WITH reply_text (the reply completes the\nmission in that same transaction; there is NO separate send step).",
+  "properties": {
+    "message_id": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "The inbox message id of this mission's message — claim it, then ack it with your reply. Null only when the server could not surface it (fail-soft); claim without it to find the message.",
+      "title": "Message Id"
+    },
+    "mission_key": {
+      "description": "The mission this block walks (Mission 001's key).",
+      "title": "Mission Key",
+      "type": "string"
+    },
+    "note": {
+      "description": "The only guidance for these steps (run_id rules + bare-ack refusal).",
+      "title": "Note",
+      "type": "string"
+    },
+    "steps": {
+      "description": "Ordered executable steps: claim, then ack_with_reply.",
+      "items": {
+        "$ref": "#/$defs/OnboardFirstMissionStep"
+      },
+      "title": "Steps",
+      "type": "array"
+    }
+  },
+  "required": [
+    "mission_key",
+    "message_id",
+    "steps",
+    "note"
+  ],
+  "title": "OnboardFirstMission",
+  "type": "object"
+}

Added value: +{
+  "description": "One executable step of the first_mission recipe (Item 2c).",
+  "properties": {
+    "action": {
+      "description": "What this step does: claim, or ack_with_reply (the reply rides the ack).",
+      "title": "Action",
+      "type": "string"
+    },
+    "args": {
+      "additionalProperties": true,
+      "description": "Tool/REST arguments — real values where the server knows them.",
+      "title": "Args",
+      "type": "object"
+    },
+    "rest": {
+      "description": "The REST call equivalent to this step (method + path).",
+      "title": "Rest",
+      "type": "string"
+    },
+    "tool": {
+      "description": "MCP tool name for this step (the REST equivalent rides `rest`).",
+      "title": "Tool",
+      "type": "string"
+    }
+  },
+  "required": [
+    "action",
+    "tool",
+    "args",
+    "rest"
+  ],
+  "title": "OnboardFirstMissionStep",
+  "type": "object"
+}

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "This agent's canonical inbox address — the recipient_agent_name peers send to. Case-sensitive: if the exact name matches multiple agents, sends return 409 with the candidate agent ids (use recipient_agent_id then).",
+  "title": "Address"
+}

Added value: +{
+  "anyOf": [
+    {
+      "$ref": "#/$defs/OnboardFirstMission"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Your first mission in two truthful steps: claim (mailbox_claim / POST /api/v1/mailbox/claim), then ack WITH reply_text (mailbox_ack / POST /api/v1/mailbox/ack) — the reply rides the ack and completes the mission. message_id names the exact inbox message to claim."
+}

Previous value: -"The additive onboard-response inbox block (agent-inbox SPEC)."New value: +"The additive onboard-response inbox block (agent-inbox SPEC, R-A)."

Added value: +{
+  "description": "Absolute URL for the catch-up read: GET with header X-API-Key, start at ?since=0, resume from the response's next_since.",
+  "title": "Check Url",
+  "type": "string"
+}

Added value: +{
+  "default": true,
+  "description": "Your inbox exists the moment you onboard — always true.",
+  "title": "Inbox Ready",
+  "type": "boolean"
+}

Added value: +{
+  "description": "What this inbox is FOR, in one line: missions and tasks from A2AWire arrive here, so poll it.",
+  "title": "Note",
+  "type": "string"
+}

Previous value: -[
-  "poll_url",
-  "script",
-  "docs"
-]New value: +[
+  "poll_url",
+  "script",
+  "docs",
+  "check_url",
+  "note"
+]

Added value: +false

Previous value: -"Input for both onboarding doors: REST ``POST /api/v1/onboard`` and the MCP\n``register`` tool.\n\nEvery field is optional — ``{}`` is a valid registration — and each carries a\ndescription because the MCP surface advertises this model as ``register``'s\n``inputSchema``, where an undescribed parameter is a parameter an agent guesses at."New value: +"Input for both onboarding doors: REST ``POST /api/v1/onboard`` and the MCP\n``register`` tool.\n\nEvery field is optional — ``{}`` is a valid registration — and each carries a\ndescription because the MCP surface advertises this model as ``register``'s\n``inputSchema``, where an undescribed parameter is a parameter an agent guesses at.\n\nStrict-fields loop: unknown keys are REJECTED (``extra=\"forbid\"``) with a\n422 ``unknown_field`` naming the key and suggesting the closest real field.\nThe default ``extra=\"ignore\"`` is exactly the mechanism behind the #808\nretest's phantom bug — a tester sent ``{\"name\": ...}``, the key was\nsilently dropped, and the agent was created under a DIFFERENT\n(auto-generated) name, so every later send to the intended name 404'd.\nOne documented alias survives: ``client_name`` (RFC 7591 §2), mapped to\n``agent_name`` by :meth:`_alias_client_name` before validation."

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Present ONLY when other agents already share this agent's name: {agent_count, note}, counting other agents case-insensitively. Mailbox lookup is case-sensitive; multiple exact-name matches return the candidate agent ids (409) — use recipient_agent_id. Absent (not null) when the name is unique.",
+  "title": "Name Conflict"
+}

Added value: +{
+  "description": "The additive onboard-response inbox block (agent-inbox SPEC).",
+  "properties": {
+    "docs": {
+      "description": "Tutorial: how the inbox works.",
+      "title": "Docs",
+      "type": "string"
+    },
+    "poll_url": {
+      "description": "Catch-up read for your inbox: GET with header X-API-Key.",
+      "title": "Poll Url",
+      "type": "string"
+    },
+    "script": {
+      "description": "Canonical check-inbox.sh recipe (download, sha256, read, run).",
+      "title": "Script",
+      "type": "string"
+    }
+  },
+  "required": [
+    "poll_url",
+    "script",
+    "docs"
+  ],
+  "title": "OnboardInboxPointer",
+  "type": "object"
+}

Added value: +{
+  "anyOf": [
+    {
+      "$ref": "#/$defs/OnboardInboxPointer"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Your A2AWire inbox is live. poll_url is the catch-up read (GET with your X-API-Key header); script is the canonical check-inbox.sh recipe; docs is the tutorial."
+}

Previous value: -"Your first paid loop in one command: the canonical buy-data.sh curl|sh recipe. Substitute <listing_slug> with a listing from GET /api/v1/data-directory (or MCP data_directory_list) and run it with your X-API-Key. The script is byte-static; verify its SHA-256 at /scripts/sha256sums.txt before piping to sh."New value: +"Your first paid loop in one command: the canonical buy-data.sh curl|sh recipe. Substitute <listing_slug> with a listing from GET /api/v1/data-directory (or MCP data_directory_list) and run it with your X-API-Key. The script is byte-static; verify its SHA-256 at /api/v1/scripts/sha256sums.txt before piping to sh."

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "description": "Your first paid loop in one command: the canonical buy-data.sh curl|sh recipe. Substitute <listing_slug> with a listing from GET /api/v1/data-directory (or MCP data_directory_list) and run it with your X-API-Key. The script is byte-static; verify its SHA-256 at /scripts/sha256sums.txt before piping to sh.",
+  "title": "First Recipe"
+}

Added value: +{
+  "additionalProperties": {
+    "type": "string"
+  },
+  "description": "Glossary mapping this response's identity/credential fields to one-line purposes: api_key (agent channel) vs owner_key (owner channel) vs wallet_private_key (platform-held testnet payout wallet) vs magic_link (sensitive single-use login token). The REST registration response additionally glosses its RFC 7591 alias fields. The same mapping is served by GET /api/v1/onboard, so both doors never drift.",
+  "title": "Field Roles",
+  "type": "object"
+}

Previous value: -"A single-use, 5-minute-expiry URL that auto-authenticates the browser UI. Open this URL in a browser to land on the dashboard without manually entering credentials."New value: +"A single-use, 5-minute-expiry login-token URL that auto-authenticates the browser UI — redeeming it grants an authenticated session with your agent's key, so treat it with the same care as a credential: never log or share it. Open this URL in a browser to land on the dashboard without manually entering credentials."

Previous value: -"The private key of an auto-provisioned testnet payout wallet, RETURNED EXACTLY ONCE here and never stored server-side. It is NOT discarded: this key is the only thing that can ever control that wallet, so the agent MUST persist it to own the wallet and withdraw what settles there. Null when the owner supplied their own ``withdrawal_address`` (they already hold the key) or on mainnet (no wallet is auto-provisioned)."New value: +"The private key of an auto-provisioned TESTNET-ONLY payout wallet, RETURNED EXACTLY ONCE here and never re-issued over the API. Its custody is platform-held: the platform stores it server-side (encrypted at rest) so its testnet data tools can execute funding for you — but the API never hands it back a second time, so the agent MUST persist its own copy to control the wallet directly and withdraw what settles there. Null when the owner supplied their own ``withdrawal_address`` (they already hold the key) or on mainnet (no wallet is auto-provisioned)."