# Cabranet Digital SL Agent Profile

This is the Markdown backup of the structured
[`agent.json`](https://cabranetdigital.com/.well-known/agent.json) profile.

## Identity

- Legal name: Cabranet Digital SL
- Product: Saspien
- Website: https://cabranetdigital.com/
- Contact: hello@cabranetdigital.com
- Security contact: https://cabranetdigital.com/.well-known/security.txt
- Location: Santolaya de Cabranes, Asturias, Spain
- Languages: English and Spanish
- Default language: English
- Profile version: 2.2.0
- Updated: 2026-06-13

## Legal Record

- NIF: B26820449
- EU VAT: ESB26820449
- Registro Mercantil de Asturias: Hoja AS-65746, Inscripcion 1, 2026-02-26
- BORME: BORME-A-2026-44-33, anuncio 112168, 2026-03-05
- Founding date: 2026-02-19

## Founder

- Name: Tom Coleman
- Role: Founder
- Profile: https://cabranetdigital.com/team
- Profile image: https://cabranetdigital.com/tom-coleman-madeira.png
- LinkedIn: https://www.linkedin.com/in/tom-coleman-0719b049/
- GitHub: https://github.com/tom-gemini-cloud

## Product

Saspien is a vendor-neutral verification and governance layer for enterprise AI
agents. It checks external agent skills and MCP servers before execution so
organisations can collect provenance evidence and make allow, review, or deny
decisions. It is model-, runtime-, and cloud-agnostic.

The public Saspien Verifier v0 performs real but limited checks. Its output is
not a certification or guarantee of safety, security, integrity, or
trustworthiness.

## Public Capabilities

- Company and product documentation
- Live verifier web interface
- Public `POST /api/v1/verify` REST endpoint for agents and HTTP clients
- Experimental `saspien.verify-url` WebMCP tool on the open Verify page
- SASP manifest with a SHA-256 digest of the canonical WebMCP tool contract
- Read-only public Agent Skill
- English and Spanish content
- Markdown backups for all public pages and machine-readable resources

## Boundaries

- No public MCP server
- WebMCP is experimental, browser-dependent, and available only while `/verify` is open
- The public REST verifier is read-only, rate-limited, and returns untrusted target-derived evidence
- SASP verifies the published contract, not the executing browser bundle
- No public OAuth-protected account API
- No autonomous transaction capability
- No permission to submit applications or act for Cabranet Digital SL
- No credentials, private plans, financial terms, or deployment secrets

## Complete Resources

- [LLM index](https://cabranetdigital.com/llms.txt)
- [Complete public context](https://cabranetdigital.com/llms-full.txt)
- [Agent Skills index](https://cabranetdigital.com/.well-known/agent-skills/index.json)
- [Public Agent Skill](https://cabranetdigital.com/.well-known/agent-skills/cabranet-digital-sl-website/SKILL.md)
- [WebMCP experiment and limitations](https://cabranetdigital.com/webmcp/index.md)
- [Public verifier REST API](https://cabranetdigital.com/api/v1/verify)
- [SASP manifest](https://cabranetdigital.com/manifest.json)
- [WebMCP tool contract](https://cabranetdigital.com/webmcp/saspien.verify-url.json)
- [Sitemap](https://cabranetdigital.com/sitemap.xml)
- [Markdown sitemap](https://cabranetdigital.com/sitemap.md)