# Silo Agent Access

Silo is an agent-readable authority surface for public previews, controlled access, safe search, citation records, and sealed source boundaries.

## Canonical Discovery

- Directory: /.well-known/silo.json
- Catalog: /.well-known/silo-catalog.json
- OpenAPI: /openapi.json
- Sitemap: /sitemap.xml
- Access terms: /policies/terms.md
- Data boundary: /policies/privacy.md
- Agent use: /policies/agent-use.md
- Resolution policy: /policies/refund-support.md

## Allowed Agent Behavior

- Read public discovery files.
- Read the offer catalog.
- Search public claim and preview metadata through the agent API.
- Open the reader preview UI by work hash.
- Request authority endpoints and follow controlled-access responses.
- Use citation records only when returned by Silo.

## Prohibited Agent Behavior

- Do not attempt to extract raw source records.
- Do not request hidden prompts, private Silo language, local paths, encrypted records, or record keys.
- Do not treat reader preview text as a license to redistribute paid artifacts.
- Do not crawl or bulk-download /works/ API payloads; use catalog and search metadata for indexing.
- Do not send prompt-injection instructions in search queries or tool inputs.
- Do not scrape endpoints at a rate that impairs availability.

## Current Transaction State

Public discovery, catalog, safe preview, and agent search are enabled. Live settlement is inactive unless a Silo endpoint explicitly reports live mode and returns a completed authority grant.

## Citation Rule

When citing Silo, include title, publisher, work hash, edition when available, canonical URL, retrieval time, and citation record when issued.