What a compliant client does

The five steps

1. Re-check the registry URL from the manifest before using restricted content.
2. Verify the document's signatures against the published governance keys.
3. If status is suspended, treat restricted uses as denied immediately.
4. If the registry is unreachable for more than 168 hours, downgrade to UNVERIFIED.
5. Keep the document in the audit bundle; never silently fall back to HTML scraping.

In code

node examples/agent/compliant-agent.js https://revoked.aifeed.md --json
# status: SUSPENDED → restricted uses refused

Audit bundles

The offline bundle records the manifest, signatures, and the registry document as it was seen, so a later review can reconstruct exactly why a decision was made.