{"service":"assurance","how":"POST {\"record\": <record>, \"integrity\": <integrity>} — recomputes the canonical hash and verifies assurance-v2 Ed25519 signatures from /.well-known/assurance-jwks.json; legacy HMAC is accepted during migration.","free":true,"attestEndpoint":"/api/agent-services/assurance/attest"}