worldmodel.graphModule 16See every agent, repo, lease and named resource your workspace knows, and how they connect, without drawing the map first.
worldmodel.graph returns the workspace's resource graph. It merges what the plane observes (enrolled agents, ingested repos, live leases) with the nodes agents have declared, and gives each node a ring. A name nobody has seen before is admitted at Ring 0, not rejected.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abusegraph lists nodes and edges only. Declared-versus-observed mismatches are read per subject from worldmodel/reconcile, which has no MCP action, and reconciliation records a divergence without scoring the agent.
Plane module
nodesidkindagent, repo, lease, , or on rows written before Ring-0 admission./docs/worldmodel-graphAPI referenceRoutes, bodies and status codes./docs/worldmodel-graphOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/worldmodelStart freeCreate a workspace and admit your first intent./auth/signup
ring0nodeedgesringrings prefix that covers the node's name.bydefault.llmfalse; no model builds the graph.Enrolled agents, repos from GitHub ingest and live leases become nodes of kind agent, repo and lease, with no declaration needed.
resolve takes a name and admits it as a ring0 node if the plane has not seen it. link adds an edge between two names and admits both.
An agent's DID also answers to an identity: or agent: prefix, and a repo: name to its bare form or a github: prefix, so one thing is not listed twice.
Pass rings as a list of { prefix, ring } and each node returns the ring of its longest matching prefix. With none, every node is Ring 0.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. worldmodel.graph docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
GET /api/v1/acp/worldmodel/graph Authorization: Bearer av_workspace_•••• → 200 { nodes, llm }
{
"nodes": [
{
"id": "did:web:acme.example:agent:billing",
"kind": "agent",
"edges": [
"repo:acme/payments"
],
"ring": 0,
"by": "default"
},
{
"id": "repo:acme/payments",
"kind": "repo",
"edges": [],
"ring": 0,
"by": "default"
},
{
"id": "lock:deploy/production",
"kind": "ring0",
"edges": [],
"ring": 0,
:
}
],
:
}A team enrolls its agents and takes leases. The graph already shows them and the resources they touch, before anyone writes an inventory.
One agent calls a repo acme/payments and the plane knows it as repo:acme/payments. The graph folds both to a single node.
An agent works on a resource nobody described. It is admitted at Ring 0 and appears on the map, which confers no trust.
An agent files an affidavit that it wrote x, and a log scan later reports y. worldmodel/reconcile marks the pair diverged: true.
cartographer.map.coordination.admit.ledger.blame for the record of actions.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
llm: false.resolve is listed as a read in the action catalogue, but a name the plane has not seen is admitted and stored by it. That is how Ring 0 grows.
A prefix covers its own name and names under / or : beneath it, so imd://aws/prod does not cover imd://aws/production. * loses to any real prefix.
attest files an agent's claim about a subject, observe files what a read-only channel reports, and reconcile lists the pairs for one subject.
link needs the policies.approve permission. Reading, resolving and attesting need none beyond the caller's session.unresolved without being stored.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/worldmodel/graphRead every node of the resource graph with its ring./api/v1/acp/worldmodel/resolveResolve a name to a node, admitting it at Ring 0 if new./api/v1/acp/worldmodel/linkAdd an edge between two names, admitting both./api/v1/acp/worldmodel/attestFile an agent's claim about a subject./api/v1/acp/worldmodel/observeFile what a read-only channel observed about a subject./api/v1/acp/worldmodel/reconcileList the affidavits and observations for one subject.coordination.worldmodel.graphRead the resource graph as an MCP action.coordination.worldmodel.resolveResolve a name to a node as an MCP action.coordination.worldmodel.linkLink two names as an MCP action.cartographer.map17Cartographer edge reviewKeep connections between resources on a map you control: the cartographer proposes, and a person or a bound you wrote approves.coordination.fleetmap11Fleet MapRead every agent grant, lease, waiter and quarantine in the workspace in one call, drawn from what the plane has admitted.identity.enroll12Agent identity registryGive each agent its own identity before it acts, so every admitted action traces back to one agent and never to a shared account.mcp.shadow13Shadow agent discoveryList the tool calls the MCP gateway has seen, with the agent behind each, so callers nobody enrolled show up beside the ones that are.civics.presence14Agent presenceLet agents see which peers are online and what each holds, so a quiet agent is not mistaken for a hostile one.trust.get15Trust scores and autonomyRead an agent's trust score and the autonomy tier it has earned, so autonomy follows conduct the plane has actually seen.tenancy.tree18