Appendix: Quick Reference

Release Boundaries

Surface	Status
Core specification	VCP v3.1 source baseline; immutable normative release remains open
v3.2 adaptation amendments and VEP-0004	Pre-release or experimental
Python, Rust, and WebMCP packages	SDK release 4.2.0
Demo Site	Educational application, not conformance evidence

Tools

Tool	Location	Purpose
VCP Inspector	inspector.valuecontextprotocol.org	Hosted protocol inspection tool
Token Playground	valuecontextprotocol.org/playground	Demo-local context and token experimentation
Interactive Demos	valuecontextprotocol.org/demos	Illustrative scenarios, not third-party integration claims
Source repositories	github.com/Creed-Space	Specification, SDK, examples, conformance vectors, and Demo source

Package and API Cheat Sheet

These are source-tree commands for an immutable VCP-SDK checkout. No registry release is currently claimed.

Operation	Maintained form
Install Python	`python -m pip install ./python`
Parse Python identity	`Token.parse("family.safe.guide@1.2.0")`
Parse Python CSM-1	`CSM1Code.parse("N5+F+E")`
Verify Python bundle	`Orchestrator(trust).verify(bundle)`
Enforce Python policy	`PDPEnforcer(fail_closed=True).evaluate(...)`
Install WebMCP	`npm install ./webmcp`
Register browser tools	`await registerVCPTools(config)`
Install Rust	`cargo build --manifest-path ./rust/Cargo.toml -p vcp-core`
Parse Rust identity	`VcpToken::parse("family.safe.guide@1.2.0")`

Enforcement Decisions

Decision	Meaning	Application responsibility
`ALLOW`	Registered plugins did not block the action	Continue only if all other security and business gates also pass
`BLOCK`	Policy rejects the action	Stop the action and expose only a safe, useful reason
`MODIFY`	A plugin requests a constrained change	Apply only a reviewed transformation and re-evaluate when required
`ESCALATE`	A plugin requests a higher-authority decision	Route through an application-owned human process. The current enforcer blocks an unhandled escalation.

Verification Outcomes

Category	Outcomes	Default response
Success	`VALID`	Continue to local enforcement
Security	`SIZE_EXCEEDED`, `INVALID_SIGNATURE`, `INVALID_ATTESTATION`, `HASH_MISMATCH`, `FUTURE_TIMESTAMP`, `REPLAY_DETECTED`, `TOKEN_MISMATCH`, `REVOKED`	Reject and investigate as appropriate
Trust and configuration	`INVALID_SCHEMA`, `UNTRUSTED_ISSUER`, `UNTRUSTED_AUDITOR`, `BUDGET_EXCEEDED`, `SCOPE_MISMATCH`	Reject and repair configuration or inputs
Temporal	`NOT_YET_VALID`, `EXPIRED`	Reject; obtain an appropriate current bundle
Transient	`FETCH_FAILED`	Apply the documented degraded-operation policy

CSM-1 Quick Reference

Format: {persona}{level}[+scopes][:namespace][@version]

Personas: N(anny), Z(sentinel), G(odparent), A(mbassador), M(use), D(mediator), C(ustom)

Levels: 0 (disabled) to 5 (maximum)

Scopes: F(amily), W(ork), E(ducation), H(ealth), I(nance), L(egal), P(rivacy), S(afety), A(ccessibility), V(environment), G(eneral)

Personal State Dimensions

Dimension	Example values	Intensity
Cognitive State	`focused`, `distracted`, `overloaded`, `foggy`, `reflective`	Optional 1 to 5
Emotional Tone	`calm`, `tense`, `frustrated`, `neutral`, `uplifted`	Optional 1 to 5
Energy Level	`rested`, `low_energy`, `fatigued`, `wired`, `depleted`	Optional 1 to 5
Perceived Urgency	`unhurried`, `time_aware`, `pressured`, `critical`	Optional 1 to 5
Body Signals	`neutral`, `discomfort`, `pain`, `unwell`, `recovering`	Optional 1 to 5

Attestation Types

Type	Claim boundary
`INJECTION_SAFE`	An authorised auditor asserts the defined injection-safety review was completed
`CONTENT_SAFE`	An authorised auditor asserts the defined content-safety review was completed
`FULL_AUDIT`	An authorised auditor asserts the organisation's defined full-audit evidence exists
`COMPETENCE_CALIBRATION`	An authorised auditor asserts the defined competence-calibration review was completed

Attestation proves a signed claim relative to configured trust anchors. It does not independently prove the quality, legality, or completeness of the underlying review.