{"schema_version":"contentdividend.rsl-olp-conformance-matrix.v2","version":"15.60.0","rsl_specification":"RSL-SPEC-1.0","profile":"Phase D frozen implementation self-profile","summary":{"checks":22,"pass":18,"partial":1,"extensions":1,"not_implemented":1,"not_claimed":1},"checks":[{"id":"rsl_namespace","area":"RSL","reference":"RSL-SPEC-1.0","status":"pass","detail":"Published RSL documents use the permanent RSL 1.0 namespace."},{"id":"rsl_media_type","area":"RSL","reference":"application/rsl+xml","status":"pass","detail":"Published RSL documents are served as application/rsl+xml."},{"id":"https_license_server","area":"OLP","reference":"5.1","status":"pass","detail":"The ContentDividend OLP server is HTTPS."},{"id":"client_http_basic","area":"OLP","reference":"5.3","status":"pass","detail":"OLP clients authenticate with HTTP Basic client_id:client_secret."},{"id":"token_endpoint","area":"OLP","reference":"5.4","status":"pass","detail":"POST /rsl/olp/token is implemented."},{"id":"grant_type_client_credentials","area":"OLP","reference":"5.4","status":"pass","detail":"The normative advertised token grant is client_credentials."},{"id":"grant_type_rsl_alias","area":"ContentDividend extension","reference":"compatibility","status":"extension","detail":"The rsl alias is accepted only for backwards compatibility and is not advertised as normative RSL 1.0."},{"id":"license_xml_required","area":"OLP","reference":"5.4","status":"pass","detail":"Token acquisition requires a license payload and application/rsl+xml profile."},{"id":"resource_required_for_token","area":"OLP","reference":"5.4","status":"pass","detail":"Token acquisition requires a resource."},{"id":"license_token_type","area":"OLP","reference":"5.4","status":"pass","detail":"Issued OLP tokens use the ContentDividend License-token profile."},{"id":"introspection_endpoint","area":"OLP","reference":"5.5","status":"pass","detail":"POST /rsl/olp/introspect validates token state and resource permission."},{"id":"active_semantics","area":"OLP","reference":"5.5","status":"pass","detail":"Token validity is reported separately from exact-resource permission."},{"id":"permitted_semantics","area":"OLP","reference":"5.5","status":"pass","detail":"Exact requested-resource permission is returned independently."},{"id":"exact_resource_recheck","area":"ContentDividend security","reference":"live rights","status":"pass","detail":"Authorization rechecks the current exact publisher-authorized resource."},{"id":"publisher_controlled_server_attribute","area":"RSL","reference":"server attribute","status":"pass","detail":"ContentDividend OLP advertisement requires explicit publisher opt-in."},{"id":"resource_server_authorize","area":"OLP Resource Server","reference":"enforcement","status":"pass","detail":"The D12 authorization endpoint returns allow only when active and permitted are both true."},{"id":"machine_license_credential","area":"ContentDividend extension","reference":"D8/D9","status":"pass","detail":"OLP can link to machine-verifiable ContentDividend license credentials."},{"id":"signed_agent_receipt","area":"ContentDividend extension","reference":"D10","status":"pass","detail":"Short-lived Ed25519 agent verification receipts are available."},{"id":"agent_procurement_manifest","area":"ContentDividend extension","reference":"D13","status":"pass","detail":"Machine discovery routes into private procurement without granting rights."},{"id":"ems_key_endpoint_presence","area":"OLP","reference":"5.2","status":"partial","detail":"The /key endpoint is visible for capability detection."},{"id":"ems_key_delivery","area":"EMS","reference":"optional encrypted-media capability","status":"not_implemented","detail":"ContentDividend does not currently provision or release EMS decryption keys."},{"id":"third_party_certification","area":"Certification","reference":"external","status":"not_claimed","detail":"No RSL Collective or other third-party certification is claimed."}],"certification":{"third_party_certified":false,"self_profile_only":true},"rights_boundary":{"discovery_grants_rights":false,"negotiation_grants_rights":false,"payment_alone_grants_rights":false,"rsl_publication_grants_rights":false,"olp_advertisement_grants_rights":false,"credential_signature_grants_rights":false,"agent_receipt_grants_rights":false,"publisher_exact_resource_authorization_required":true,"live_license_state_authoritative":true,"human_final_authority_preserved":true},"audit_manifest":"https://app.contentdividend.com/.well-known/contentdividend-phase-d.json"}