# DNS for AI Discovery (DNS-AID) — salat.top
#
# SVCB/HTTPS records published in the salat.top zone to enable
# DNS-based agent discovery per
#   draft-mozleywilliams-dnsop-dnsaid (DNS-AID)
#   RFC 9460 (Service Binding and Parameter Specification)
#
# Each record uses ServiceMode (target "." = the apex of the zone)
# with the protocol-specific ALPN token, the standard `port=443`,
# and the required `mandatory=alpn,port` SvcParam so that validating
# resolvers can authenticate the answer (DNSSEC) and negotiate the
# right endpoint on first contact.
#
# DNSSEC MUST be enabled on the zone so validating resolvers set
# the AD (Authenticated Data) flag. Enable via the Cloudflare
# dashboard: SSL/TLS → Edge Certificates → DNSSEC.
#
# Resource origin: https://salat.top (managed by Cloudflare).
# Target "." means "the apex of the zone" (SVCB ServiceMode).
#
# Records are created and verified by `scripts/setup-dns-aid.sh`.
#
# See: https://datatracker.ietf.org/doc/draft-mozleywilliams-dnsop-dnsaid/
#      https://www.rfc-editor.org/rfc/rfc9460

; Agent index / homepage discovery — plain HTTPS, ALPN h2 + http/1.1
_index._agents.salat.top. 3600 IN HTTPS 1 . alpn="h2,http/1.1" port="443" mandatory="alpn,port"

; A2A agent card discovery — Agent-to-Agent protocol ALPN (fallback h2, http/1.1)
_a2a._agents.salat.top. 3600 IN HTTPS 1 . alpn="a2a,h2,http/1.1" port="443" mandatory="alpn,port"

; MCP server discovery — Model Context Protocol ALPN (fallback h2, http/1.1)
_mcp._agents.salat.top. 3600 IN HTTPS 1 . alpn="mcp,h2,http/1.1" port="443" mandatory="alpn,port"

; llms.txt discovery — LLM-friendly root, plain HTTPS
_llmstxt._agents.salat.top. 3600 IN HTTPS 1 . alpn="h2,http/1.1" port="443" mandatory="alpn,port"