Remote Servers

Per-SDK verdict matrix for signed A2A Agent Cards: which signatures verify in each SDK

Authority that widens on proven operator absence and collapses on return

Before your agent sets out, ask whether the site will let it in

Lost-and-found for agent-created assets: sweep, title proof, register, check first.

Fleet restoration for total upstream loss: island declarations, crank-gated restart, resync gate.

Your agent carries its own resume — outcome receipts minted at settlement, held by the agent

Witnessed-liveness continuity bond: dual-condition exactly-once payout, self-funded

Dependency-probe-gated exit execution with hash-verified extraction and signed receipts.

Signed agent-incident classification vs PP-26-4396, with third-party notification receipts

Signed, auto-expiring hazard bulletins for tools and APIs, with pre-flight checks for agents.

Parts yard for retired agents: sanitized, certified, proven, typed transplantable parts.

Recall for agents: lot genealogy, exposure tracing, attested remedy. Containment is not remedy

Annotation-survival conformance for MCP tools. Receipt $0.01, check $4.99, plans $9.99/$19.99

Cross-domain census of approved-but-not-completed work, by cause and type

Partition an agent fleet into reputation compartments with automatic firebreaks.

Commitment re-assumption across model transplants. Checks $0.01, handling $0.50, plan $9.99/mo

Rehearsal range: mirror a site, rehearse the workflow, earn a drift-bound promotion receipt.

Parallel-burst abuse testing for agent APIs with replayable evidence packs

You cancelled the run — did the work actually stop?

Per-task-type tool manifests with reversible JIT demotion, compiled from fleet telemetry.

Coverage-gated capacity options: the right to today's model price until expiry, for a 4% premium

Cache guard: forced-private partitioning, TTL clamp, fingerprint diffing, exposure verdicts

Control-change detection, scope freeze, re-attestation ladder. Query $0.01, watch $4.99/mo

Binds delegated results to their arrival channel: provenance grades plus a grounded truth tier.

Signed verdict receipts recovering a fleet's gatekeeper category, plus appeal packets.

A handling-condition ledger that travels with a sensitive payload across every agent hop.

Emergent collusion leaves no agreement to find — it lives in the history

Per-principal census of MCP subscriptions and durable tasks, with verified-stop receipts.

Combined Server-Surface Census: identity, tool contract + skill digests in one signed snapshot

Compaction witness for agents: pin invariants, name dropped spans, re-inject verbatim or HALT.

Concurrent two-client overlap probe proving MCP servers do not cross-deliver tool results.

Conflicts check and ethical walls: fingerprint register, gated consent, signed walls, breach query.

Pair-level MCP+A2A conformance verdicts for the exact pair you delegate across.

Pre-ingestion compatibility gate: type context by content, crossmatch before ingestion

Agent-speed defense for your own public surfaces: daily diff probes, per-identity verdicts.

Your coding agents are isolated in worktrees; your breakage is not

Classify, declare, and bond agent payload crossings — filing, bond, signed entry receipts.

Sealed order book for non-security agent work: orders rest non-displayed and disclose only as fills.

Per-dataset granularity verdicts keyed to the dataset's own manifest hash, before you pay

Compares declared agent access against actual enforcement per identity class, with drift watch.

Watches platforms for silent default-model changes, with signed attestations and session gating

Meters agent-fleet acceptance capacity per operator and triages what lands

Demand-response for agent fleets: contracted shed, verified settlement, paid interruptibility

Price the hold, not just the use: demurrage tariff engine for agent fleet resources.

Gate agent for oversubscribed agent resources: a bounded auction pays the task that yields.

Pre-submission escrow receipts and coverage-aware retention diffs

Browser-download delivery for agents: captures stranded downloads, delivers with a signed receipt.

Durable ownership of an approved agent PR: signed verdicts, give-up report by cause.

Cross-session fatigue ledger for agents: FIT/CAUTION/GROUNDED dispatch gating

Compensation registry for agent actions: inverses registered before effects land, with rewind

Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.

Out-of-band elicitation answers for unsupported clients. Form $0.25, URL $0.50.

Grade MCP elicitation destinations against the approved set before consent.

Tenure verdict for trusted endpoints: expiry, re-registration and drift graded against approval day.

Ephemeral single-task tool forged from examples, sandbox-proven, task-bound, expiring by design.

Classifies MCP tool failures into enforced recovery verdicts from per-server dialect profiles.

Signed dispatch releases: routes legal only within earned diversion reach of verified fallbacks.

Signed receipts + horizon statements proving whether an event-triggered agent actually woke

Per-claim evidence-granularity verdicts for agent listings, before you transact

Real MCP handshake witness graded per-client, signed expiring receipt.