Capability brief · Evidenced · Unlisted · Not affiliated

Five facts about Sylvera's data stack, read the way an agent would

In plain words: can a machine, not a human reading marketing copy, find, verify, and use what Sylvera has already built and opened up? Credit-first, because two of these five findings are genuinely strong: an open standard with our exact field already in it, and a validation we ran ourselves and can show you the output of.

Read this first. Independent recon by EcoWealth Corporation. Not requested, produced, reviewed, or endorsed by Sylvera: no relationship of any kind exists between the two organizations. Passive reads only: public pages, the public GitHub REST API, public raw schema files, and one local run of the CDOP repo's own published validator against a record we built ourselves, no scanning, fuzzing, auth bypass, sign-up, or state-changing call against any Sylvera system. Captured 2026-07-16; every URL and command below is independently re-runnable.
Baseline, stated up front Sylvera is the market-leading independent carbon-ratings agency and, separately, co-chairs the Carbon Data Open Protocol (CDOP) with the Global Carbon Market Utility, RMI, and S&P Global Commodity Insights: a genuinely open, MIT-licensed, actively maintained standard with 52 participating organizations, including many of its peers across the ratings field. The findings below are about what an agent can and can't yet do with that openness, not a claim that the openness is missing.

The bottom line, in plain English

No jargon: here is what each gap below is worth to Sylvera in plain terms.

Make the API docs readable without running code → the developers already evaluating Sylvera's data don't bounce off a blank page

The developer front door renders empty to anything that doesn't execute JavaScript, so an integrator (or its assistant) checking whether to build on Sylvera's Assessment API gets nothing usable and can quietly move on.

Add the short machine profile agents look for → Sylvera is in the answer when a buyer's assistant asks who rates carbon

Nothing currently tells a generic AI what Sylvera's ratings or CDOP work even is, so Sylvera can be absent at the exact moment a buyer's tool is looking for exactly what it offers.

1 · Credit: CDOP's schema already has our exact field

Credit 1

Field id 141, retirement_beneficiary

CDOP's own Unit_Description.schema.json, public, MIT-licensed, in a repo pushed as recently as 2026-07-13, defines a field, id 141, named retirement_beneficiary, described verbatim as "Entity name on behalf of which the retirement occurred." That is EcoWealth's own standing law, the retire beneficiary is never the sender, expressed almost word-for-word by a standard Sylvera helped write. A sibling field, retirement_detail (id 142), holds free-text context, exactly the shape of a settlement narrative. Neither field carries an enum constraint; both accept a plain string, which is all a settled EWP retirement receipt needs to supply.

# fetched straight from the public repo — this is the real schema text, not a paraphrase curl -s https://raw.githubusercontent.com/Carbon-Data-Open-Protocol/Carbon-Data-Open-Protocol/main/json_schema/Unit_Description.schema.json \ | python3 -c "import json,sys; d=json.load(sys.stdin)['properties']['unit']['properties']; print(d['retirement_beneficiary'])" # → {'type': 'string', 'description': 'Entity name on behalf of which the retirement occurred', # 'x-cdop-field-id': 141, 'x-cdop-cardinality': '0..1', 'x-cdop-mutability': 'mutable', # 'x-cdop-public-private': 'Public', 'x-cdop-field-path': 'unit.retirement_beneficiary'}

Sources: github.com/Carbon-Data-Open-Protocol/Carbon-Data-Open-Protocol/json_schema/Unit_Description.schema.json · repo license (MIT) and last-push date confirmed via api.github.com/repos/Carbon-Data-Open-Protocol/Carbon-Data-Open-Protocol

2 · Credit: we proved the fit, not just claimed it

Credit + proof 2

Ran CDOP's own repo tooling against a real EWP-shaped record

CDOP's repo documents validation via pip install check-jsonschema or its own scripts/validate.py (7,588 bytes, present in the repo today). We built a JSON record carrying the substance of EcoWealth's real, settled EWP work packet: beneficiary, serial-equivalent identifier, quantity, retirement status, shaped to CDOP's Unit_Description schema, and validated it locally with their own tool, not a copy. Told the truth on the first try: it caught a real formatting mistake in our own draft (a bare year where the schema requires a full ISO date), we fixed it, re-ran, and it passed clean. That's what a genuine schema-conformance claim should look like: independently checkable, including the mistake.

# first attempt — check-jsonschema (CDOP's own documented validator) catches a real error check-jsonschema --schemafile Unit_Description.schema.json ewp-work14-as-cdop-unit.json # → ewp-work14-as-cdop-unit.json::$.vintage.vintage: '2024' is not a 'date' # fixed: vintage.vintage changed from "2024" to "2024-01-01" (schema requires format:"date") check-jsonschema --schemafile Unit_Description.schema.json ewp-work14-as-cdop-unit.json # → ok -- validation done

Sources: github.com/…/scripts/validate.py (existence confirmed via GitHub contents API) · full record + commands in evidence.json and the demo page

3 · Mixed: no agent-discovery layer, but an honest one

Gap, credited precisely 3

Real 404s across the board, not soft-200 traps

On www.sylvera.com, every standard agent-discovery path, llms.txt (the file AI assistants read first), ai.txt, .well-known/agent-card.json, .well-known/ai-plugin.json, .well-known/security.txt, .well-known/x402, returns HTTP 404. That's a real gap: nothing tells a generic agent what Sylvera's Assessment API or CDOP participation even is. But it deserves a more precise read than "broken": llms.txt/ai.txt and a nonsense-path control all return the SAME ~22 KB branded Webflow 404 page (true 404, not faked), while every .well-known/* path returns an even more honest, distinct 88-byte body, {"Invalid .well-known request"}-shaped text, rather than pretending to be content. Klima Protocol and Oimpact, two other targets we've reviewed, found soft-200/soft-400 catch-alls that lie about existence; Sylvera's platform (Webflow) does not do that here. robots.txt is real, clean, and points to a real sitemap.

# every agent-shaped path — real 404, control-matched for p in llms.txt ai.txt .well-known/agent-card.json .well-known/ai-plugin.json .well-known/security.txt .well-known/x402 this-nonsense-control-sylv9182.txt; do curl -s -o /dev/null -w "%{http_code}:%{size_download} " https://www.sylvera.com/$p done # → 404:21978 404:21966 404:88 404:88 404:88 404:88 404:22134 # byte diff: agent-card.json vs a fresh nonsense-path control — .well-known/* gets its OWN distinct honest body diff <(curl -s https://www.sylvera.com/.well-known/agent-card.json) <(curl -s https://www.sylvera.com/this-nonsense-control-zzq7731.html) # → completely different bodies: 88-byte "Invalid .well-known request" vs the 22KB branded 404 page curl -s https://www.sylvera.com/robots.txt # → User-agent: * / Sitemap: https://www.sylvera.com/sitemap.xml (real, clean)

Sources: www.sylvera.com/.well-known/agent-card.json · www.sylvera.com/llms.txt · www.sylvera.com/robots.txt · nonsense-path control

4 · Gap: the Assessment API's docs don't render without JavaScript

Gap 4

docs.sylvera.com is a client-only shell

Sylvera's product copy describes an "Assessment API" for programmatic ratings retrieval, hosted at a real, separately-deployed documentation site (docs.sylvera.com, title "Sylvera API Documentation"). A plain GET returns a Vite-built single-page app shell, a nearly-empty <div id="root"> and two bundled asset files, with zero endpoint, schema, or auth-scheme text in the raw response. No public OpenAPI spec, Postman collection, or machine-readable schema for this API was found anywhere without an account. An agent (or a human skimming curl output) gets nothing usable from the one URL that's supposed to be the developer front door.

curl -s https://docs.sylvera.com/ | head -c 600 # → <title>Sylvera API Documentation</title> ... <script type="module" crossorigin src="./assets/index-BmxZ1AYa.js"></script> # <body><div id="root"></div></body> — no rendered content, JS required

Sources: docs.sylvera.com/ (root HTML)

5 · Context: pricing opacity, and one design credit

Context 5

Freemium → "contact sales," with one thing genuinely worth crediting

Sylvera's /pricing page names three tiers, Freemium, Essentials, Enterprise, but the rendered page text contains no numeric price anywhere above the free tier: every call-to-action above Freemium reads "Request a demo" or "Get a quote." That's a gentle contrast, not a criticism: EcoWealth's own x402 endpoints publish an exact USD-per-call price with no signup, which is simply a different model suited to a different kind of product. Worth crediting in the same breath: Sylvera explicitly ring-fences its Ratings analysts from its commercial Methodology Toolkit / Assessment Services teams, "ratings are produced independently of commercial outcomes", a structural answer to the industry's standing "Rating the Raters" critique that's a genuinely thoughtful trust design, independent of pricing.

curl -s https://www.sylvera.com/pricing | python3 -c " import re,sys html = sys.stdin.read() text = re.sub(r'<[^>]+>', ' ', html) for m in re.finditer(r'Freemium|Essentials|Enterprise|Request a demo|Get a quote|\\\$[0-9]', text): print(m.group(0))" | sort | uniq -c # → Freemium / Essentials / Enterprise / "Request a demo" / "Get a quote" — zero numeric $ matches anywhere

Sources: www.sylvera.com/pricing · independence framing from www.sylvera.com/governance and /research (recon session, 2026-07-16)

What this adds up to

Nothing here is a security problem or a broken product. Sylvera is genuinely strong on the thing that matters most for this brief: an open, well-governed, actively-maintained data standard with a field-for-field match to how EcoWealth already thinks about retirement, and it's honest where it has gaps (real 404s, not fake ones). The concrete, low-effort next step lives entirely on EcoWealth's side: file the mapping doc as a real pull request against CDOP's own open repo. No Sylvera action, account, or contact required.

→ See the EWP receipt fitted into CDOP's schema, validated live

← Back to the hub
Provisioned by EcoWealth · Digital Provisioning Protocol · provenance‑sealed