Twin3 雙端共生架構四泳道全景圖 v7.0

Swimlane 1

外部標準協議 (Standards)

6 Standards

全球開放規範，定義系統互操作性與密碼學邊界

WebMCP 與 A2A 自主商務協議

🟢 Verified

WebMCP & A2A Protocol

定義 Agent 雙向自主商務通訊標準，涵蓋公開卡片暴露、意圖交換與非執行封包護欄

規範依據: Anthropic / Google A2A Standard

信任邊界: Public Agent Discovery Endpoint (No authority granted by submission)

測試證據: Spec §2.1; 114/114 inbox contract tests passing

W3C WebAuthn Level 3 (Passkey)

🟢 Verified

W3C WebAuthn Level 3

生物識別零助記詞無私鑰負擔驗證，嚴格強制憑證綁定與原子 Sign Count 防重放

規範依據: W3C Recommendation 2026

信任邊界: Hardware Secure Enclave / FIDO2 Authenticator

測試證據: Passkey challenge & assertion verification suite; atomic sign_count store

RFC 8785 規範化 JSON 序列化 (JCS)

🟢 Verified

RFC 8785 (JCS)

消除 Python / Node.js 跨語言浮點數與指數序列化漂移，保證簽章驗證零誤差

規範依據: IETF RFC 8785

信任邊界: Deterministic Cross-Runtime Byte-Exact Parity

測試證據: Shared cross-language conformance vectors: integers, floats, exponent boundaries (1e-7, 1e21)

x402 微支付清算規範 v2

🟢 Verified

x402 Micropayment Clearing v2

HTTP 402 原生微支付清算，強制接收方比對、付款簽章核驗與鏈上最終性檢查

規範依據: x402 Foundation Specification v2

信任邊界: Cryptographic Nonce & Payment Recipient Enforcement

測試證據: Mandatory recipient validation, cryptographic signature check, txHash on-chain audit

W3C 去中心化身分 (did:web / did:key)

🟢 Verified

W3C Decentralized Identifiers (DID)

透過網域名稱直接解析 Ed25519 公鑰，無需第三方中心化金鑰分發機構

規範依據: W3C DID v1.0

信任邊界: DNS / Web-anchored Cryptographic Public Key Authority

測試證據: did:web resolver net_guard; multibase z-base58btc & JsonWebKey2020

GLEIF LEI 與鄧白氏 (D-U-N-S) 法人標準

🟢 Verified

GLEIF LEI & Dun & Bradstreet

全球法人機構身分代碼標準，為自主商務交易提供真實世界法律實體徵信背書

規範依據: ISO 17442 & D-U-N-S

信任邊界: Global Legal Entity Identifier Regulatory Framework

測試證據: LEI checksum validation, D-U-N-S 9-digit format & API contract

Swimlane 2

SDK 核心能力母板 (twin3-sdk)

7 Capabilities

七層共生架構共享底座，提供確定性、不可篡改原語

SDK-DISCOVERY 雙端發現規範

🟢 Verified

SDK-DISCOVERY (Discovery Specification)

提供 AgentCard 與 SovereignCard 標準資料結構與 SHA-256 規範化摘要生成

原生套件: twin3.discovery · commit 7b1f34f

信任邊界: Tamper-evident Canonical Metadata Digest

測試證據: AgentCard and SovereignCard canonical JCS digest tests green in Python & Node

SDK-TRUST 密碼學信任與身分

🟢 Verified

SDK-TRUST (Cryptographic Trust & Identity)

雙向 KYA 握手協定、強制 Owner/Passkey 公鑰簽章核驗、原子條件更新防重放

原生套件: twin3.trust · commit 7b1f34f

信任邊界: Ed25519 Signature & Multi-Replica Replay-Resistant Nonce Store

測試證據: KYA mutual challenge/answer, atomic nonce store, mandatory owner verification, WebAuthn Level 3

SDK-COMM 規範封包與對象表

🟢 Verified

SDK-COMM (Canonical Envelope & Counterparty)

安全封包建立、防偽來源追蹤 (Provenance)、嚴禁可執行關鍵字 (exec/run/tool_call)

原生套件: twin3.comm · commit 7b1f34f

信任邊界: Constant Authority: None (Envelopes cannot carry execution authority)

測試證據: EnvelopeLimits, executable key rejection (INV-1), provenance validation, signature verification

SDK-SHIELD 橫跨全局安全護欄

🟢 Verified

SDK-SHIELD (Cross-Cutting Defense Guardrail)

確定性文字正規化、提示詞注入攔截、隱形控制字元過濾、3次違規凍結狀態機

原生套件: twin3.shield · commit 7b1f34f

信任邊界: Deterministic Input Normalization & Fail-Closed Gate

測試證據: Prompt injection regex scanner, BIDI/zero-width sanitization, strike & freeze guardrails

SDK-MATRIX 256維向量與公差

🟢 Verified

SDK-MATRIX (256D Topological Matrix & Tolerance)

拒絕 NaN/Infinity，限定 [0, 255] 整數區間，複合公差拒絕同向振幅漂移匹配

原生套件: twin3.matrix · commit 7b1f34f

信任邊界: Mathematical Bounded Metric Space & Amplitude Discrimination

測試證據: Finite [0, 255] rejection of NaN/Inf, composite tolerance distance rejecting collinear divergence

SDK-SETTLEMENT x402微支付清算

🟢 Verified

SDK-SETTLEMENT (x402 Micropayment Clearing)

驗證支付憑據收款人、付款簽章、金額幣別與區塊鏈交易哈希有效性

原生套件: twin3.settlement · commit 7b1f34f

信任邊界: Cryptographic Settlement Nonce & Recipient Whitelisting

測試證據: Mandatory recipient match, Ed25519 signature over digest, txHash format validation

SDK-GOVERNANCE 存證與仲裁護欄

🟢 Verified

SDK-GOVERNANCE (Audit Trail & Evidence Chain)

雜湊前向鏈接存證、不可篡改審計鏈條、單項修改即刻破壞驗證鏈

原生套件: twin3.governance · commit 7b1f34f

信任邊界: Cryptographically Verifiable Append-Only Log

測試證據: SHA-256 hash chaining, prev pointer verification, tamper detection test suite

Swimlane 3

雙端應用適配層 (Adapters)

2 Adapters

將通用 SDK 原語與企業 AI 業務收件箱及個人主權名片深度對齊

Agent ID 企業端自主商務適配器

🟢 Verified

Agent ID Enterprise Adapter

企業收件箱狀態機、G0~G3 階層躍遷、T1 威脅情報與 T4 語意防禦集成、did:web 解析

模組封裝: agent_id.inbox (Python) · commit facd8a5

信任邊界: Enterprise Tenant Isolation & Scope-Gated Authorization (inbox:read, inbox:write)

測試證據: 114/114 inbox tests green; requirements.txt pinned twin3-sdk==0.1.1a0; 23/23 repository contract passing

Human ID 個人主權數據適配器

🟢 Verified

Human ID Sovereignty Adapter

個人主權名片封裝、手機端 Passkey 刷臉驗證、5美元付費門檻驗證與14萬人特徵比對

模組封裝: XHuman_ID/shared/twin3_bridge.mjs (Node.js) · commit 55e332c

信任邊界: Zero-Knowledge Local Client Execution & Direct Passkey Signature

測試證據: 10/10 tests green (Sovereign Card, Passkey, Envelope, Shield, 140k Match, $5 x402, Audit)

Swimlane 4

生產資料與結算系統 (Production)

4 Systems

線上運行之商務登記冊、14萬個人特徵資產庫與區塊鏈清算網關

Agent Passport 企業代理人登記冊

🟢 Verified

Agent Passport & Commercial Registry

已正式商用部署之企業 AI Agent 門戶，支援公開發現、合約授權與商業進件

系統位置: Production API / DNS Gateway · commit facd8a5

信任邊界: Enterprise DNS TXT/CNAME Public Attestation

測試證據: Live DNS claim, agents.json broadcast, 30-second domain verification

14萬自然人真實特徵數據資產

🟢 Verified

140,000 Human Personality Data Assets

包含14萬真實個人認知與性格特徵向量資產，支撐高精度人機協同與個人數據主權

系統位置: XHuman_ID Production Cohort Vault · commit 55e332c

信任邊界: Cryptographic Hash Digest & Differential Privacy Shield

測試證據: 1,000 synthetic cohort shadow replay runs; zero false positives; missingness invariant proven

x402 微支付結算網關 (Base / BNB Chain)

🟢 Verified

x402 Micropayment Clearing Gateway

即時鏈上交易確認與離線帳本雙軌清算，確保每一筆 A2A 商業詢價與任務交付即時結算

系統位置: On-Chain / Off-Chain Hybrid Settlement · commit 7b1f34f

信任邊界: Blockchain Finality & Escrow Smart Contracts

測試證據: Smart contract txHash validation, off-chain ledger reconciliation, refund tracking

不可篡改審計存證帳本

🟢 Verified

Immutable Evidence & Audit Ledger

所有階層躍遷、金鑰輪換、付款確認與申訴判決均寫入具備不可篡改證明之證據鏈

系統位置: Enterprise Governance Engine · commit facd8a5

信任邊界: Tamper-Evident SHA-256 Merkle Chain & Incident Ledger

測試證據: Automated cryptographic chain audit on every state transition; tamper detection active