RCO-A2A

RCO-A2A serves Regulatory Compliance Objects: signed, deterministic, machine-verifiable compliance state per GTIN per jurisdiction, resolved upstream — agents consume the result of the rules, not the rules. Four read tools (resolve_compliance, get_record, list_rule_sets, list_issuers) are session-free, require no account, and return typed responses; one write tool (publish_record) is the controlled issuer path on the partner rail and requires an issuer subscription key. Every record carries its issuer, key id and verification URL; records verify from the public keyring at dpuone.ai and are receipted on Azure Confidential Ledger. Rule sets are versioned and hashed per jurisdiction (49 members + apex under SM-ECO-10060). The protocol layer — record schema, tool contract, signal vocabulary — is MIT at github.com/greencore-solutions/rco-a2a. Operated by GreenCore Solutions Corp., Microsoft AI Cloud Partner, D-U-N-S 24-336-6774, GS1 Canada licensee.