docs: update README + signed_ucp_merchant example for new spec-compliant shape

README and the canonical signed_ucp_merchant example now show services /
payment_handlers as dicts keyed by reverse-DNS name (matches the
build_ucp_profile output and the live Pura Vida reference profile). README
section on profile-body signing reframed: not "UCP §6 trust-mode requires
signing" (it doesn't — Pura Vida ships unsigned in production); instead
"vendor extension for trust-mode verifiers that opt into auditable profiles".

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: vvillait88

README.md

@@ -181,9 +181,9 @@ headers = build_payment_headers(BuildPaymentHeadersInput(
 
 ```python
 from agentscore_commerce.identity import (
-    UCPService,
+    UCPServiceBinding,
     UCPSigningKey,
-    UCPPaymentHandler,
+    UCPPaymentHandlerBinding,
     A2AAgentCardCapabilities,
     build_a2a_agent_card,
     build_ucp_profile,
@@ -193,16 +193,41 @@ from agentscore_commerce.identity import (
 card = build_a2a_agent_card(name="My Service", url=base_url, capabilities=A2AAgentCardCapabilities(...), data=assess_result)
 
 # Google Universal Commerce Protocol. Publish at /.well-known/ucp.
+# Output shape: {"ucp": {"version", "services", "capabilities",
+# "payment_handlers", "name?", "supported_versions?"}, "signing_keys": [...]}
+# — services / capabilities / payment_handlers are MAPS keyed by reverse-DNS
+# service / capability / handler name. Verified against the live Pura Vida
+# reference at puravidabracelets.com/.well-known/ucp.
 profile = build_ucp_profile(
     name="My Service",
-    services=[UCPService(type="rest", url=base_url)],
-    payment_handlers=[UCPPaymentHandler(name="tempo", config={"recipient": TEMPO_ADDR})],
+    services={
+        "dev.ucp.shopping": [
+            UCPServiceBinding(
+                version="2026-04-08",
+                spec="https://ucp.dev/2026-04-08/specification/overview",
+                transport="mcp",
+                endpoint=f"{base_url}/api/ucp/mcp",
+                schema="https://ucp.dev/services/shopping/openrpc.json",
+            ),
+        ],
+    },
+    payment_handlers={
+        "sh.agentscore.payment.tempo": [
+            UCPPaymentHandlerBinding(
+                id="tempo",
+                version="2026-04-08",
+                spec="https://agentscore.sh/specification/payment-handlers/tempo",
+                schema="https://agentscore.sh/schemas/payment-handlers/tempo.json",
+                config={"recipient": TEMPO_ADDR},
+            ),
+        ],
+    },
     signing_keys=[UCPSigningKey(kid="me", kty="EC", alg="ES256")],
     data=assess_result,
 )
 ```
 
-UCP §6 trust-mode requires profiles to carry a JWS signature backed by a JWKS at `/.well-known/jwks.json`. Sign + verify via the optional `joserfc` extra (tested against joserfc v1.x; pin `joserfc>=1.0.0,<2`):
+UCP §6 doesn't mandate profile-body JWS signing — Pura Vida and other Shopify-backed UCP merchants ship unsigned. AgentScore's `agentscore-profile+jws` is a vendor extension for trust-mode verifiers (Visa AP2 pilots, regulated-commerce verifiers) that opt into auditable profiles. Sign + verify via the optional `joserfc` extra (tested against joserfc v1.x; pin `joserfc>=1.0.0,<2`):
 
 ```bash
 pip install agentscore-commerce[ucp]
@@ -222,8 +247,8 @@ from agentscore_commerce.identity import (
 key = generate_ucp_signing_key(kid="merchant-2026-05")
 profile = build_ucp_profile(
     name="My Service",
-    services=[...],
-    payment_handlers=[...],
+    services={...},
+    payment_handlers={...},
     signing_keys=[UCPSigningKey.from_jwk(key.public_jwk)],
 )
 signed = sign_ucp_profile(profile.to_dict(), signing_key=key.private_key, kid=key.public_jwk["kid"], alg="EdDSA")

examples/signed_ucp_merchant.py

@@ -34,8 +34,8 @@
 from fastapi.responses import JSONResponse
 
 from agentscore_commerce.identity import (
-    UCPPaymentHandler,
-    UCPService,
+    UCPPaymentHandlerBinding,
+    UCPServiceBinding,
     UCPSigningKey,
     UCPVerificationError,
     build_jwks_response,
@@ -105,8 +105,28 @@ async def well_known_ucp() -> JSONResponse:
     key = await load_signing_key()
     profile = build_ucp_profile(
         name="My Agent Service",
-        services=[UCPService(type="rest", url="https://agents.example.com")],
-        payment_handlers=[UCPPaymentHandler(name="tempo", config={"recipient": "0xfeedface"})],
+        services={
+            "dev.ucp.shopping": [
+                UCPServiceBinding(
+                    version="2026-04-08",
+                    spec="https://ucp.dev/2026-04-08/specification/overview",
+                    transport="mcp",
+                    endpoint="https://agents.example.com/api/ucp/mcp",
+                    schema="https://ucp.dev/services/shopping/openrpc.json",
+                ),
+            ],
+        },
+        payment_handlers={
+            "sh.agentscore.payment.tempo": [
+                UCPPaymentHandlerBinding(
+                    id="tempo",
+                    version="2026-04-08",
+                    spec="https://agentscore.sh/specification/payment-handlers/tempo",
+                    schema="https://agentscore.sh/schemas/payment-handlers/tempo.json",
+                    config={"recipient": "0xfeedface"},
+                ),
+            ],
+        },
         signing_keys=[UCPSigningKey.from_jwk(key.public_jwk)],
     )
     signed = sign_ucp_profile(