Verifiable evidence infrastructure for AI agent security. Every claim we make ships as an Ed25519-signed receipt with a Bitcoin-anchored timestamp (OpenTimestamps). Don't trust β verify with one command.
| Repo | What it does |
|---|---|
correctover |
Runtime CCS verifier + guardrail provider for AI-agent tool calls (npm correctover) |
correctover-scan |
Black-box CLI scanner β MCP/tool contracts, bundle analysis, weak-RNG rules (npm correctover-scan) |
independent-reader |
Verification re-implemented from scratch, zero shared code β the independent third party in "don't trust, verify" |
correctover-guard-reference |
Reference evidence-view guard: 400 public + 200 sealed holdout vectors, 95% intercept @ 0/200 FPR |
signed-receipt-reference |
Minimal JCS + Ed25519 signed receipt β the evidence format in one file |
code-birth-certificate |
GitHub Action: Rekor-anchored code provenance with Zenodo DOI |
- CVE-2026-73567 / GHSA-vh45-f885-3848 β our Node.js impact correction is incorporated in this advisory's public text (see the advisory's PoC section); we additionally demonstrated end-to-end private-key recovery from weak SM2 entropy across five production chains (evidence under NDA). Advisory
- IETF individual submissions β draft-correctover-ccs (rev 10) and draft-correctover-gg-mcp-parameter-risk (rev 01). Individual submissions; no IETF endorsement.
- SCITT / CPB interop evidence β independent canonicalizer run against the registered
jcsvectors indraft-mih-sokolov-scitt-payload-binding: byte-identical pre-image and digest, must-fail cases rejected. Results, with a CCS-receipt β CPB-Signed-Statement mapping in the same thread. - SAMP (draft-efstathiou-samp-agent-management) cites CCS as its example external evidence-verification binding (rev -04).
- W3C public-agent-conformance community group participant.
Claims above are verifiable from the linked public records β consistent with our receipt-first policy.
| Tool | What it does | Verify it yourself |
|---|---|---|
| entropy.correctover.com | Free weak-entropy lockfile check β runs 100% in your browser, nothing uploaded. Live weak-RNG watchlist over 600 high-traffic npm packages (163 flagged). | Paste your package-lock.json, 30 seconds |
| correctover-scan (npm) | Security scanner for MCP servers & AI agents β 18 checks mapped to OWASP AISVS, incl. weak-RNG fingerprints (CVE-2026-71851 crypto-js / CVE-2026-73567 jsbn). SARIF output. | npx correctover-scan |
| ccs-verifier (npm Β· PyPI) | One-command independent verification of CCS signed receipts β Ed25519 (RFC 8032) over canonical JSON + SPKI fingerprint. Zero dependencies. | npx ccs-verifier verify receipt.json |
| ccs-conformance-vectors | 66 signed conformance test vectors β reproducible by anyone | clone & run |
- draft-correctover-ccs (rev 10, Active) β fail-closed runtime verification + per-invocation cryptographic evidence for AI agents. Individual Internet-Draft; no IETF endorsement.
- draft-correctover-gg-mcp-parameter-risk (rev 01) β byte-frozen parameter-risk baseline (benign FPR = 0 on dev split)
- W3C interop submissions Β· Zenodo DOIs for methodology (10.5281/zenodo.21783723 et al.)
- SM2 zero-entropy key recovery β private key from public key + second-level timestamp alone; 5 third-party chain SDKs, black-box, 3/3 reproduced (demo)
- AWS official MCP sandbox escape era (CVE-2026-115845): blacklist-style validation lost β runtime verification is the missing layer
- 600-package weak-entropy watchlist: 163 flagged incl. wallet SDKs at millions of monthly downloads Β· Nov re-scan (correctover-scan v3.3.1): 100 top-traffic packages β 58 flagged, 59 critical files (ccxt, walletconnect stack, node-forge 150M/mo)
Guigui Wang β wangguigui@correctover.com Β· entropy.correctover.com