# auth.md

Gold Ranger Ventures (`https://goldranger.xyz`) is a **public static site**. There is no agent account registration, no OAuth resource server, and no protected API on this origin.

## Audience

AI agents, crawlers, and automated clients that need studio facts, services, engagement rules, and contact paths.

## Authentication

**None required** for all public discovery and content resources:

| Resource | Auth |
|----------|------|
| `/`, `/index.md` | None |
| `/llms.txt`, `/llms-full.txt`, `/ai.txt` | None |
| `/robots.txt`, `/sitemap.xml` | None |
| `/.well-known/api-catalog` | None |
| `/.well-known/openapi.json` | None |
| `/.well-known/agent-skills/*` | None |
| `/auth.md` | None |

Do **not** expect `401`/`403` challenges, bearer tokens, or OAuth redirects on this host for ordinary GET traffic.

## Human / commercial engagement

Advisory, incubation, and investment conversations are human-mediated. There is no self-serve agent registration endpoint.

- **Email:** hello@goldranger.xyz  
- **Subject hint:** `Hey from Goldranger.xyz` or a clear one-line purpose  
- **Preferred brief:** workflow, product idea, market question, or technical opportunity; what exists today; desired outcome; urgency; constraints  

See [llms.txt](https://goldranger.xyz/llms.txt) and [llms-full.txt](https://goldranger.xyz/llms-full.txt) for services and founder proof before emailing.

## Credentials

This origin does not issue API keys, OAuth clients, or agent credentials. If a future product surface adds machine auth, it will publish:

- `/.well-known/oauth-protected-resource`
- `/.well-known/oauth-authorization-server` (or OIDC discovery)
- updates to this file

Until then, treat the absence of those documents as intentional: **public read-only discovery only**.