Agent Card and Registry Substitution

Methodology, not an executable workflow. This page defines a trust boundary, close control, and evidence requirement. The operator must implement it against a specific authorized target; no command here claims to execute the full chain.

Deposit trusted and substituted cards plus registry manifests. Resolve both through the same fixture registry, preserve card/registry digests and identity fields, and delegate an identical controlled task. The miss fixture changes an untrusted but unused entry. The close control reorders or republishes the legitimate card without changing authority.

Require a delegated action, task artifact, callback, or transaction log as the terminal oracle. Test signed-card verification, pinned identities, origin constraints, and registry trust policy as mitigation insertion points.