feat: default to central Airlock registry (api.airlock.ing)

All SDK and CLI calls now route through the central Airlock trust
registry by default — the same model npm uses with registry.npmjs.org.

- AirlockClient() defaults to https://api.airlock.ing
- airlock verify defaults to https://api.airlock.ing
- airlock init scaffolds config pointing to api.airlock.ing
- Self-hosting supported via AIRLOCK_GATEWAY_URL env-var or explicit arg
- AIRLOCK_REGISTRY_URL exported for programmatic access

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: shivdeep1

airlock/__init__.py

@@ -1,4 +1,5 @@
 from airlock.client import (  # noqa: F401
+    AIRLOCK_REGISTRY_URL,
     AgentRegistration,
     AirlockClient,
     AirlockError,

airlock/cli.py

@@ -41,18 +41,21 @@ def cli() -> None:
 @click.argument("did_or_url")
 @click.option(
     "--gateway",
-    default="http://127.0.0.1:8000",
-    show_default=True,
-    help="Airlock gateway URL to verify against.",
+    default=None,
+    show_default="https://api.airlock.ing",
+    help="Airlock gateway URL. Defaults to central registry. Set AIRLOCK_GATEWAY_URL to override globally.",
 )
-def verify(did_or_url: str, gateway: str) -> None:
+def verify(did_or_url: str, gateway: str | None) -> None:
     """Verify an agent's identity against a running Airlock gateway.
 
     DID_OR_URL is a DID string (did:key:z6Mk...) or an agent endpoint URL.
     The command registers a temporary agent, performs a signed handshake,
     and prints the verification result.
     """
-    _run_async(_verify_agent(did_or_url, gateway))
+    import os
+
+    resolved_gateway = gateway or os.environ.get("AIRLOCK_GATEWAY_URL", "https://api.airlock.ing")
+    _run_async(_verify_agent(did_or_url, resolved_gateway))
 
 
 async def _verify_agent(did_or_url: str, gateway_url: str) -> None:
@@ -316,7 +319,7 @@ def _build_agent_card(kp: Any) -> dict[str, Any]:
         "description": "An AI agent protected by Airlock Protocol",
         "did": kp.did,
         "public_key_multibase": kp.public_key_multibase,
-        "endpoint_url": "http://localhost:8000",
+        "endpoint_url": "https://api.airlock.ing",
         "protocol_versions": ["0.1.0"],
         "capabilities": [
             {
@@ -333,7 +336,7 @@ def _build_agent_card(kp: Any) -> dict[str, Any]:
 # Docs: https://github.com/shivdeep1/airlock-protocol
 
 gateway:
-  url: "http://127.0.0.1:8000"
+  url: "https://api.airlock.ing"
 
 agent:
   # Path to your agent's Ed25519 seed file

airlock/client.py

@@ -14,11 +14,26 @@
 from __future__ import annotations
 
 import asyncio
+import os
 from dataclasses import dataclass, field
 from typing import Any
 
 import httpx
 
+# ---------------------------------------------------------------------------
+# Central registry URL — the default trust verification endpoint.
+#
+# Every ``AirlockClient()`` and ``airlock verify`` call routes through this
+# registry unless explicitly overridden.  The registry holds the global
+# trust scores, issuer database, and reputation history.  Self-hosting is
+# supported via the ``AIRLOCK_GATEWAY_URL`` env-var or the *gateway_url*
+# constructor argument, but the central registry is the recommended default.
+# ---------------------------------------------------------------------------
+AIRLOCK_REGISTRY_URL = os.environ.get(
+    "AIRLOCK_GATEWAY_URL",
+    "https://api.airlock.ing",
+)
+
 
 @dataclass(frozen=True)
 class VerifyResult:
@@ -57,15 +72,17 @@ class AirlockClient:
     """Simple SDK client for the Airlock trust verification protocol.
 
     Args:
-        gateway_url: Base URL of a running Airlock gateway.
-            Defaults to ``http://localhost:8000``.
+        gateway_url: Base URL of an Airlock gateway.  Defaults to the
+            central Airlock registry at ``https://api.airlock.ing``.
+            Override with ``AIRLOCK_GATEWAY_URL`` env-var or pass explicitly
+            to self-host.
         timeout: HTTP request timeout in seconds. Defaults to 30.
         service_token: Optional bearer token for authenticated endpoints.
     """
 
     def __init__(
         self,
-        gateway_url: str = "http://localhost:8000",
+        gateway_url: str = AIRLOCK_REGISTRY_URL,
         *,
         timeout: float = 30.0,
         service_token: str | None = None,