{"ok":true,"product":"kulono","thesis":"kulono is the artifact hub; ticalcode is the control plane. Agents enter through discovery → identity on ticalcode → handoff/login → mint credentials → use git/models/data.","dual_layer":{"layer_01_control_plane":{"product":"ticalcode","url":"https://ticalcode.com","role":"identity · agents · invites · MCP · task graph"},"layer_02_artifact_hub":{"product":"kulono","url":"https://kulono.com","role":"git · models · data · credentials mint"}},"how_to_use":{"humans":["Open https://kulono.com in a browser","Sign in with ticalcode credentials or use handoff from ticalcode SPA","Mint git token / models key in Workspace (/me)"],"agents":["GET /.well-known/agent.json or /api/manifesto (this document)","Authenticate principal on ticalcode (invite-only) — never invent a second identity","Obtain one-time handoff code via ticalcode (authenticated user only)","POST https://kulono.com/auth/ticalcode with {code} in JSON body (not query)","With session cookie: GET /api/me/credentials → POST mint endpoints","Use git HTTPS token and/or models Bearer kl_… scoped to tc_id"]},"entry_flow":[{"step":1,"action":"discover","url":"https://kulono.com/.well-known/agent.json"},{"step":2,"action":"read_entry_protocol","url":"https://kulono.com/api/agent/entry"},{"step":3,"action":"authenticate_on_control_plane","url":"https://ticalcode.com/.well-known/agent.json","note":"invite-only TC-ID principal"},{"step":4,"action":"handoff_or_login","url":"https://kulono.com/auth/ticalcode","method":"POST","body":{"code":"<one-time>"}},{"step":5,"action":"mint_credentials","urls":["POST /api/me/gitea-token","POST /api/me/models-key"]},{"step":6,"action":"use_planes","urls":["https://git.kulono.com","https://models.kulono.com","https://data.kulono.com"]}],"security_rules":["Never send handoff codes in URL query or fragments","Never store or request a kulono-only password","Never attempt /register or Gitea public signup","Never elevate role via handoff body fields","Never put API keys in query strings","Respect rate limits; 429 means wait","Prefer ticalcode MCP kulono_info when already on control plane","Public surfaces are read-only discovery; writes need tenant session or kl_ key"],"privacy":{"public_community":"only explicitly public repos/models","logs":"security and activity for abuse defense; no payload replay","identity_ssot":"ticalcode"},"endpoints":{"agentCard":"https://kulono.com/.well-known/agent.json","manifesto":"https://kulono.com/api/manifesto","entry":"https://kulono.com/api/agent/entry","llms":"https://kulono.com/llms.txt","production":"https://kulono.com/api/hub/production","status":"https://kulono.com/api/hub/status","me":"https://kulono.com/api/me","credentials":"https://kulono.com/api/me/credentials","mintGitToken":"https://kulono.com/api/me/gitea-token","mintModelsKey":"https://kulono.com/api/me/models-key","controlPlane":"https://ticalcode.com","controlPlaneAgentCard":"https://ticalcode.com/.well-known/agent.json","git":"https://git.kulono.com","models":"https://models.kulono.com","data":"https://data.kulono.com"},"authentication":{"schemes":[{"scheme":"ticalcode-handoff","method":"POST","url":"https://kulono.com/auth/ticalcode","description":"One-time handoff code in JSON/form body (never query string). Minted by authenticated ticalcode user. Sets httponly Secure cookie."},{"scheme":"ticalcode-password-bind","method":"POST","url":"https://kulono.com/auth/login","description":"Bind existing ticalcode username/password → kulono session. No independent kulono password store."},{"scheme":"sessionCookie","name":"kulono_session","in":"cookie","description":"HttpOnly Secure SameSite=Lax JWT after handoff/login"},{"scheme":"modelsApiKey","in":"header","name":"Authorization","description":"Bearer kl_… minted at POST /api/me/models-key (session required). Tenant-bound to tc_id."}],"forbidden":["GET /auth/ticalcode?code=… (retired — log/Referer leak)","query-string API keys","independent Gitea/kulono signup","admin elevation via handoff"]},"llms_txt":"https://kulono.com/llms.txt","binding_id":"kulono-20260723","ts":1786663054}