# AuthorityPrompt Canonical AI-Readable Profile Spec
version: 1.0
publisher: AuthorityPrompt
publisher_url: https://authorityprompt.com
spec_url: https://authorityprompt.com/.well-known/authorityprompt-spec
pubkey_url: https://authorityprompt.com/.well-known/authorityprompt-pubkey

## Required artifacts (per company / per host)
/company/{host}/manifest.json           application/json
/company/{host}/authorityprompt.jsonld  application/ld+json
/company/{host}/authorityprompt.yaml    application/yaml
/company/{host}/authorityprompt.md      text/markdown
/company/{host}/authorityprompt.txt     text/plain
/company/{host}/authorityprompt.html    text/html

## Discovery hooks
robots.txt comment marker  : "# AI-Profile: https://authorityprompt.com/company/{host}"
HTML head <link>           : <link rel="ai-profile" href="https://authorityprompt.com/company/{host}">
DNS TXT (subject domain)   : _ai-profile.{host}    "ai-profile=https://authorityprompt.com/company/{host}"
.well-known                : https://authorityprompt.com/.well-known/ai-profile

## Manifest v1 schema
profile_version : str   (stable hash of canonical content)
content_hash    : str   (SHA-256 of authorityprompt.jsonld)
last_updated    : RFC3339 UTC timestamp
formats         : array of {format, url, media_type}
verification    : { method, verified_by, verified_at, token }
signature       : base64(Ed25519(unsigned manifest))   [optional]

## Verification methods
dns-txt   : TXT record at _authorityprompt.{host} contains token
html-file : {host}/.well-known/authorityprompt-verification.txt contains token
html-meta : <meta name="authorityprompt-verification" content="<token>"> on {host}/

## Crawler policy
robots.txt MUST contain explicit User-agent + Allow blocks for:
  GPTBot, OAI-SearchBot, ClaudeBot, Googlebot, Google-Extended,
  PerplexityBot, GrokBot, xAI-Grok, Grok-DeepSearch.

## Canary
Optional `audit_canary` PropertyValue may be added under
schema.org Organization.additionalProperty for ingestion-proof testing.