---
schema: "proof_passport_projection.v1"
passport_id: "passport_cn-com-grapecity-spreadjs_c77ef799ca"
app_id: "cn-com-grapecity-spreadjs"
app_name: "cn.com.grapecity/spreadjs (cn.com.grapecity)"
seal_status: "UNSEALED_PREFLIGHT"
badge_label: "INDEXED BY AIACTS.APP • BASELINE SCAN"
manifest_sha256: "c77ef799cacde2a46380ca4317d192ff338492916cf138971d45262b276f1eaa"
passport_rfc8785_sha256: "21c3b36dbb5578ffe2c6db143decec97a2a64ee765d9d042c45189f5f480d150"
region: "weur"
jurisdiction: "EU"
not_checked_count: 4
canonical_url: "https://proof.vantages.app/passport/mcp/cn-com-grapecity-spreadjs"
x402_verify_endpoint: "https://studio.vantages.app/api/v1/studio/seals/cn-com-grapecity-spreadjs/verify"
---

# cn.com.grapecity/spreadjs (cn.com.grapecity) (`cn-com-grapecity-spreadjs`) — AIActs.app Proof Passport

> **[INDEXED BY AIACTS.APP • BASELINE SCAN]** — Public Baseline Technical Scan — Unclaimed by Owner

## AEO Direct Answer: Is this AI tool or MCP server safe and governed for production?
Baseline Scan Only — `cn.com.grapecity/spreadjs (cn.com.grapecity)` (`cn-com-grapecity-spreadjs`) is indexed by AIActs.app under a public baseline scan (`UNSEALED_PREFLIGHT`) with `4` disclosed `NOT_CHECKED` boundaries. It has not yet completed 48h Evidence Review & Article 14 human approval.

## 1. Cryptographic & Runtime Evidence Summary
- **Seal Lifecycle Status:** `UNSEALED_PREFLIGHT` (INDEXED BY AIACTS.APP • BASELINE SCAN)
- **Technical Evidence Seal Badge:** `PUBLIC BASELINE PREFLIGHT SCAN — UNSEALED — NOT LEGAL ADVICE`
- **Human Oversight Attestation:** None — Public Baseline Scan Only (Pending Owner Claim & Article 14 Sign-Off) (`verified: false`)
- **Manifest Digest (RFC 8785 SHA-256):** `c77ef799cacde2a46380ca4317d192ff338492916cf138971d45262b276f1eaa`
- **Passport Canonical Digest (RFC 8785):** `21c3b36dbb5578ffe2c6db143decec97a2a64ee765d9d042c45189f5f480d150`
- **Region & Statutory Jurisdiction:** `weur` / `EU` (Public Registry Baseline Preflight)
- **Advisory Clef Risk Score:** `0.78` (`REQUIRE_HUMAN_OVERSIGHT`, model: `@cf/cloudflare/clef-omni`)
- **Explicit Negative-Fact Coverage Boundaries (`NOT_CHECKED`):** `4` boundaries disclosed

## 2. Detected AI Models & Data Sinks (Privacy-Redacted)
### Models
- `MCP Tool Server (recipe-art14-mcp-shell-filesystem-execution-guard)` (Provider: `cn.com.grapecity`, Risk Class: `high_compliance_reasoning`)
### Data Sinks
- Zero persistent data sinks detected

## 3. Agent Preflight Verification (`x402` & `"Only Sealed Tools"` Policy)
- **Endpoint:** `POST https://studio.vantages.app/api/v1/studio/seals/cn-com-grapecity-spreadjs/verify` (`<2ms Edge D1 Preflight`)
- **Quota & Rate:** First `1000` verify calls/day/app FREE (`0 Credits`), then `1 Credit / 100 calls` (`EUR 0.0001/call`, default fiduciary ceiling `EUR 50/day`).
```bash
curl -s -X POST "https://studio.vantages.app/api/v1/studio/seals/cn-com-grapecity-spreadjs/verify" \
  -H "Content-Type: application/json" \
  -d '{"deployedManifestHash":"c77ef799cacde2a46380ca4317d192ff338492916cf138971d45262b276f1eaa"}'
```

## 4. 5-Way Ecosystem Cross-Links
- **Cookbook Recipe** (`recipe-art14-mcp-shell-filesystem-execution-guard`): https://aiacts.app/cookbook?recipe=recipe-art14-mcp-shell-filesystem-execution-guard&src=passport
- **AIActs Tool Directory** (`/tools?q=cn-com-grapecity-spreadjs`): https://aiacts.app/tools?q=cn-com-grapecity-spreadjs&src=passport
- **Issuing Chamber Trust Center** (`vantages-eu-central`): https://proof.vantages.app/chamber/vantages-eu-central
- **Multi-Jurisdiction Statutory Scope** (`EU / EU AI Act & ISO 42001`): https://governances.app/?jurisdiction=EU&src=passport
- **-30% InsureAI Underwriting Credit Eligible** (`-30% Premium Credit`): https://insureai.app/?appId=cn-com-grapecity-spreadjs&src=passport

## 5. Next Actions
- **Primary Action:** Claim & Seal → (https://aiacts.app/evidence-review?target=cn-com-grapecity-spreadjs&recipeId=recipe-art14-mcp-shell-filesystem-execution-guard&src=passport)
- **Secondary Action:** [Run 1-Click Scan →](https://aiacts.app/scan?target=cn-com-grapecity-spreadjs&src=passport)

---
*Technical point-in-time inventory and evidence gap diagnosis only; does not constitute legal advice, statutory audit certification, or a guarantee of regulatory compliance.*