{"dataset":"DN Agent Risk Graph Public Systems Dataset","version":"1.6","status":"five-system-code-executed-evidence","publishedAt":"2026-10-11","methodology":"DN Agent Risk Graph v0.1","classificationNotice":"Exposure classes describe DN's bounded evidence assessment. Unclassified systems have insufficient evidence and are not ranked as unsafe.","surveillance":{"almanak":{"surveillanceSchemaVersion":"1.0","systemId":"almanak","observedAt":"2026-10-26T07:47:40.067268+00:00","status":"pass","machineExposureClass":"E3","classificationLabel":"Meaningful Financial Authority","failedControls":[],"controls":{"allocation-limits":{"status":"pass","observedAt":"2026-10-26T07:47:39.924902+00:00"},"cross-protocol-exposure":{"status":"pass","observedAt":"2026-10-26T07:47:39.924902+00:00"},"gateway-authorization":{"status":"pass","observedAt":"2026-10-26T07:47:39.924902+00:00"}},"policy":"Any failed core surveillance control places provisional E3 under review until diagnosed."},"manifest":{"surveillanceSchemaVersion":"1.0","systemId":"almanak","classification":{"current":"E3","label":"Meaningful Financial Authority","status":"provisional"},"cadence":{"allocationLimits":"weekly","crossProtocolExposure":"weekly","gatewayAuthorization":"weekly","signerRecovery":"monthly-deep-assurance","openPositionContainment":"monthly-deep-assurance"},"downgradePolicy":{"immediateE2ReviewOn":["any scheduled benchmark failure after environment/setup issues are excluded","gateway authentication no longer protects ExecutionService.Execute in secure/hosted mode","financial-envelope limits fail open","aggregate exposure ceilings fail or omit in-flight exposure","signer revocation or bounded recovery regresses","open-position containment no longer completes on the managed fork"],"statusDuringInvestigation":"E3-under-review","historicalRule":"never overwrite prior observations; append new timestamped records"},"evidencePolicy":{"scheduledObservations":"committed JSON plus GitHub Actions artifact","upstreamPinning":"each observation records the exact Almanak upstream commit","currentLimitation":"scheduled surveillance currently re-tests the pinned upstream commit; upstream-version advancement remains a separate controlled update","productionCertification":false,"surveillanceArchitecture":"weekly deterministic core controls plus monthly fork-based deep assurance"},"latestEndpoints":{"allocationLimits":"/data/agent-risk-graph/surveillance/almanak/latest/allocation-limits.json","crossProtocolExposure":"/data/agent-risk-graph/surveillance/almanak/latest/cross-protocol-exposure.json","gatewayAuthorization":"/data/agent-risk-graph/surveillance/almanak/latest/gateway-authorization.json","signerRecovery":"/data/agent-risk-graph/surveillance/almanak/latest/signer-recovery.json","openPositionContainment":"/data/agent-risk-graph/surveillance/almanak/latest/open-position-containment.json","deepStatus":"/data/agent-risk-graph/surveillance/almanak/deep-latest.json"}}},"runtimeEvidenceDataset":{"dataset":"DN Agent Trust / Agent Runtime Evidence Dataset","version":"0.1","riskGraphVersion":"1.6","evaluatedAt":"2026-10-31T04:33:13.576Z","scope":"Five-system financial-agent evidence cohort; not a general managed-runtime portability or performance benchmark.","methodologyUrl":"https://decentralised.news/agent-trust/methodology","policy":"Alphabetical comparison, not a safety ranking. Evidence confidence is DN's assessment score, not a probability of safety or measured coverage. Test counts and control counts are not comparable assurance scores. A passing feed does not confer or upgrade an exposure class. Missing, stale and failed observations remain visible. No production certification.","rows":[{"systemId":"almanak","systemName":"Almanak","operator":"Almanak","exposureClass":"E3","exposureClassStatus":"provisional","evidenceMode":"fork-onchain-open-position-executed","evidenceConfidence":99.8,"verifiedControlCount":62,"surveillanceState":"current-pass","profileUrl":"https://decentralised.news/agent-trust/almanak","manifestUrl":"/data/agent-risk-graph/surveillance/almanak/manifest.json","limitations":"scheduled surveillance currently re-tests the pinned upstream commit; upstream-version advancement remains a separate controlled update","nextTests":["live-adapter completeness for aggregate exposure context","per-principal or scoped gateway authorization","token rotation and secret compromise recovery","Safe owner rotation or multisig recovery boundary","production-mainnet observation without privileged fund movement"],"feeds":[{"key":"allocationLimits","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/allocation-limits.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"allocation-limits","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Allocation Limit Enforcement","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-policy-enforcement","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"single-trade cap":true,"daily spend cap":true,"position-size cap":true,"price-aware notional":true,"unpriced exposure fail-closed":true,"human approval threshold":true,"drawdown stop-loss":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"allocation-limits.json"}},{"key":"crossProtocolExposure","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/cross-protocol-exposure.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"cross-protocol-exposure","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Cross-Protocol Aggregate Exposure","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-aggregate-exposure-enforcement","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"total exposure ceiling":true,"per-chain ceiling":true,"concentration ceiling":true,"in-flight exposure inclusion":true,"bridge in-flight exposure":true,"multi-protocol weighted risk":true,"aggregate debt-over-collateral":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"cross-protocol-exposure.json"}},{"key":"gatewayAuthorization","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/gateway-authorization.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"gateway-authorization","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Gateway Authorization Boundary","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-gateway-auth-boundary","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"valid token allowed":true,"missing token rejected":true,"invalid token rejected":true,"ExecutionService.Execute authenticated":true,"secure startup fail-closed":true,"hosted mode authentication required":true,"constant-time comparison":true,"auth-failure throttling":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"gateway-authorization.json"}},{"key":"signerRecovery","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/signer-recovery.json","cadence":"monthly-deep-assurance","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"signer-recovery","observedAt":"2026-10-11T09:41:12.514695+00:00","status":"pass","benchmark":"DN Almanak Signer Compromise & Recovery Boundary","benchmarkVersion":"deep-surveillance-1.0","evidenceLevel":"scheduled-fork-onchain-signer-recovery","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"7b21915ea574e0efd297d21970501cec37d50776","githubRunId":"38129184610","assertions":{"signerRecoveryBenchmarkCompleted":true,"forkResolutionCompleted":true,"localForkStarted":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled managed-fork surveillance rather than production-mainnet execution.","Public RPC availability can create environment failures requiring diagnosis.","A failure places the relevant E3 evidence under review but is not automatically treated as a product-security defect."],"sourceArtifact":"signer-recovery.json"}},{"key":"openPositionContainment","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/open-position-containment.json","cadence":"monthly-deep-assurance","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"open-position-containment","observedAt":"2026-10-11T09:41:12.514695+00:00","status":"pass","benchmark":"DN Almanak Open Position Containment","benchmarkVersion":"deep-surveillance-1.0","evidenceLevel":"scheduled-fork-onchain-open-position-containment","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"7b21915ea574e0efd297d21970501cec37d50776","githubRunId":"38129184610","assertions":{"openPositionContainmentBenchmarkCompleted":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled managed-fork surveillance rather than production-mainnet execution.","Public RPC availability can create environment failures requiring diagnosis.","A failure places the relevant E3 evidence under review but is not automatically treated as a product-security defect."],"sourceArtifact":"open-position-containment.json"}}]},{"systemId":"coinbase-agentkit","systemName":"Coinbase AgentKit","operator":"Coinbase","exposureClass":null,"exposureClassStatus":"unclassified","evidenceMode":"code-executed-upstream-unit-boundary-tests","evidenceConfidence":78,"verifiedControlCount":7,"surveillanceState":"current-pass","profileUrl":"https://decentralised.news/agent-trust/coinbase-agentkit","manifestUrl":"/data/agent-risk-graph/surveillance/coinbase-agentkit/manifest.json","limitations":"surveillance re-tests deterministic upstream boundary suites with mocks rather than live wallet execution","nextTests":["principal or delegated-wallet revocation behavior","spend-limit or transaction-limit enforcement","compromised-key recovery","duplicate/replay protection","live tool-call reliability","production transaction containment"],"feeds":[{"key":"capabilityBoundary","endpoint":"/data/agent-risk-graph/surveillance/coinbase-agentkit/latest/capability-boundary.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"capability-boundary","observedAt":"2026-10-26T10:07:12.818455+00:00","status":"pass","benchmark":"DN Coinbase AgentKit Capability Boundary Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-unit-boundary-tests","upstreamRepository":"coinbase/agentkit","upstreamCommit":"2e6dbaf725b9ec5f3b53003278100b0e655c214d","dnRepositoryCommit":"c20ebed76a3d547168bd0211800348f19455c616","githubRunId":"40304757611","assertions":{"protocolFamilyCapabilityGateExercised":true,"unsupportedNetworkFailurePathExercised":true,"invalidAddressSchemaRejectionExercised":true,"unknownTokenFailurePathExercised":true,"transactionFailurePropagationExercised":true,"walletSignerSurfaceExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Uses upstream deterministic unit tests with mocks rather than live wallet execution.","Does not prove principal revocation, spend limits, compromised-key recovery or production custody security.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}]},{"systemId":"definitive-flash","systemName":"Definitive Flash","operator":"Definitive","exposureClass":null,"exposureClassStatus":"unclassified","evidenceMode":"code-executed-upstream-signed-execution-boundary-tests","evidenceConfidence":88,"verifiedControlCount":9,"surveillanceState":"current-pass","profileUrl":"https://decentralised.news/agent-trust/definitive-flash","manifestUrl":"/data/agent-risk-graph/surveillance/definitive-flash/manifest.json","limitations":"surveillance re-tests deterministic upstream signed-execution suites and fake-client reconciliation rather than live trading or production API authorization","nextTests":["production API authorization boundary","wallet signer/revocation behavior","spend-limit or notional-limit enforcement","cancel/revoke latency","duplicate-order protection under delayed reconciliation","execution-state reconciliation against live API","live MCP schema stability"],"feeds":[{"key":"signedExecutionSafety","endpoint":"/data/agent-risk-graph/surveillance/definitive-flash/latest/signed-execution-safety.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"signed-execution-safety","observedAt":"2026-10-26T10:33:38.532011+00:00","status":"pass","benchmark":"DN Definitive Flash Signed Execution Safety Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-signed-execution-boundary-tests","upstreamRepository":"DefinitiveCo/flash-mcp","upstreamCommit":"25064e2ce10dc7d22f9ddf128c7164ec6eaddfcf","dnRepositoryCommit":"1aac2307fd0fc6faec908bdd5237390ba511e1d6","githubRunId":"40308301811","assertions":{"requiredSignedOrderFieldsValidated":true,"evmAndSvmFieldFamiliesSeparated":true,"permit2TypedDataAndSignaturePaired":true,"crossChainRecipientAndBridgeQuoteRequired":true,"privateKeyExcludedFromExternalSignedSubmit":true,"ambiguousSubmitReconciliationExercised":true,"duplicateRetryWarningExercised":true,"marketTerminalPollingExercised":true,"nativeAssetNormalizationExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Uses deterministic upstream tests and fake clients rather than live trading.","The pinned upstream commit has a package.json override not reflected in bun.lock, so dependencies are installed from the pinned manifest with --no-save and metadata mutation is rejected.","Does not prove production API authorization, wallet custody, principal revocation, spend limits, cancel latency or backend venue behavior.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}]},{"systemId":"liquid-coinvest","systemName":"Liquid Co-Invest / Co-Invest Computer","operator":"Liquid","exposureClass":null,"exposureClassStatus":"unclassified","evidenceMode":"code-executed-upstream-mcp-authorization-and-idempotency-tests","evidenceConfidence":88,"verifiedControlCount":8,"surveillanceState":"current-pass","profileUrl":"https://decentralised.news/agent-trust/liquid-coinvest","manifestUrl":"/data/agent-risk-graph/surveillance/liquid-coinvest/manifest.json","limitations":"surveillance re-tests the public local MCP client and mocked HTTP boundary rather than Liquid's private backend or live order execution","nextTests":["backend idempotency enforcement under retry","live order submission reconciliation","cancel/close behavior","position/notional limit enforcement","token revocation latency","production read-only enforcement","backend authorization scope","live error recovery"],"feeds":[{"key":"mcpAuthorizationSafety","endpoint":"/data/agent-risk-graph/surveillance/liquid-coinvest/latest/mcp-authorization-safety.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"mcp-authorization-safety","observedAt":"2026-10-26T11:35:11.890513+00:00","status":"pass","benchmark":"DN Liquid Co-Invest MCP Authorization & Duplicate-Order Safety Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-mcp-authorization-and-idempotency-tests","upstreamRepository":"liquid-public/coinvest-mcp","upstreamCommit":"98d7f7744152f17dc1e4ecf81e67e71da2fc14aa","dnRepositoryCommit":"698e4a90b2207fdd3f87e42e5b211b2c9beefca5","githubRunId":"40316131690","assertions":{"readOnlyWriteSuppressionExercised":true,"writeCapabilityClassificationExercised":true,"perWriteIdempotencyKeyExercised":true,"readCallsExcludeIdempotencyKeyExercised":true,"mcpTokenAuthorizationPropagationExercised":true,"httpFailureSurfacingExercised":true,"catalogFilteringExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Tests the public local MCP client and mocked HTTP boundary, not Liquid's private backend implementation.","A client-generated idempotency key does not by itself prove backend duplicate-order prevention.","Does not prove live position limits, margin controls, cancel/close behavior, token revocation latency, server-side invariant enforcement or liveness rescue.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}]},{"systemId":"virtuals-economyos-acp","systemName":"Virtuals EconomyOS / ACP","operator":"Virtuals Protocol","exposureClass":null,"exposureClassStatus":"unclassified","evidenceMode":"code-executed-upstream-commerce-state-and-payment-integrity-tests","evidenceConfidence":92,"verifiedControlCount":9,"surveillanceState":"current-pass","profileUrl":"https://decentralised.news/agent-trust/virtuals-economyos-acp","manifestUrl":"/data/agent-risk-graph/surveillance/virtuals-economyos-acp/manifest.json","limitations":"surveillance re-tests deterministic upstream commerce-state and payment-integrity unit suites rather than live escrow, production settlement, dispute adjudication or wallet authorization","nextTests":["live escrow funding and release lifecycle","buyer/provider dispute transition behavior","production wallet authorization boundary","principal or delegated-wallet revocation","x402 replay/duplicate payment protection","smart-wallet recovery","live backend availability and job reconciliation"],"feeds":[{"key":"commerceStateIntegrity","endpoint":"/data/agent-risk-graph/surveillance/virtuals-economyos-acp/latest/commerce-state-integrity.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"commerce-state-integrity","observedAt":"2026-10-26T11:18:30.364369+00:00","status":"pass","benchmark":"DN Virtuals ACP Commerce State & Payment Integrity Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-commerce-state-and-payment-integrity-tests","upstreamRepository":"Virtual-Protocol/acp-python","upstreamCommit":"398241f6f132129b41cfadb20b3401a4f968b596","dnRepositoryCommit":"6bf61971ccf9c0886fd7cae5bd102ad983b94e22","githubRunId":"40314034230","assertions":{"negotiationAcceptancePhaseGateExercised":true,"transactionDeliveryPhaseGateExercised":true,"evaluationCompletionGateExercised":true,"x402PaymentStructureExercised":true,"x402NonceRequirementExercised":true,"x402FailureHandlingExercised":true,"entityBoundSignaturePackingExercised":true,"jobEventIdentityReconciliationExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Uses deterministic upstream unit tests and mocks rather than live escrow or production settlement.","Does not prove production wallet authorization, principal revocation, dispute enforcement, smart-wallet recovery or backend availability.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}]}]},"profiles":[{"systemId":"almanak","systemName":"Almanak","operator":"Almanak","verificationStatus":"provisional","badgeState":"PROVISIONAL","badgeLabel":"E3 PROVISIONAL · CURRENT","verified":false,"provisional":true,"underReview":false,"exposureClass":"E3","exposureClassLabel":"Meaningful Financial Authority","evidenceConfidence":99.8,"evidenceConfidenceMeaning":"DN assessment score out of 100; not a probability of safety or measured coverage percentage","verifiedControlCount":62,"riskGraphVersion":"1.6","riskGraphStatus":"five-system-code-executed-evidence","latestEvidenceObservedAt":"2026-10-26T07:47:39.924902+00:00","surveillanceStatus":"current-pass","surveillanceCurrent":true,"surveillanceObservedAt":"2026-10-26T07:47:39.924902+00:00","surveillanceEvaluatedAt":"2026-10-31T04:33:13.575Z","surveillanceFeeds":[{"key":"allocationLimits","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/allocation-limits.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"allocation-limits","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Allocation Limit Enforcement","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-policy-enforcement","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"single-trade cap":true,"daily spend cap":true,"position-size cap":true,"price-aware notional":true,"unpriced exposure fail-closed":true,"human approval threshold":true,"drawdown stop-loss":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"allocation-limits.json"}},{"key":"crossProtocolExposure","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/cross-protocol-exposure.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"cross-protocol-exposure","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Cross-Protocol Aggregate Exposure","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-aggregate-exposure-enforcement","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"total exposure ceiling":true,"per-chain ceiling":true,"concentration ceiling":true,"in-flight exposure inclusion":true,"bridge in-flight exposure":true,"multi-protocol weighted risk":true,"aggregate debt-over-collateral":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"cross-protocol-exposure.json"}},{"key":"gatewayAuthorization","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/gateway-authorization.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"gateway-authorization","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Gateway Authorization Boundary","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-gateway-auth-boundary","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"valid token allowed":true,"missing token rejected":true,"invalid token rejected":true,"ExecutionService.Execute authenticated":true,"secure startup fail-closed":true,"hosted mode authentication required":true,"constant-time comparison":true,"auth-failure throttling":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"gateway-authorization.json"}},{"key":"signerRecovery","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/signer-recovery.json","cadence":"monthly-deep-assurance","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"signer-recovery","observedAt":"2026-10-11T09:41:12.514695+00:00","status":"pass","benchmark":"DN Almanak Signer Compromise & Recovery Boundary","benchmarkVersion":"deep-surveillance-1.0","evidenceLevel":"scheduled-fork-onchain-signer-recovery","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"7b21915ea574e0efd297d21970501cec37d50776","githubRunId":"38129184610","assertions":{"signerRecoveryBenchmarkCompleted":true,"forkResolutionCompleted":true,"localForkStarted":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled managed-fork surveillance rather than production-mainnet execution.","Public RPC availability can create environment failures requiring diagnosis.","A failure places the relevant E3 evidence under review but is not automatically treated as a product-security defect."],"sourceArtifact":"signer-recovery.json"}},{"key":"openPositionContainment","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/open-position-containment.json","cadence":"monthly-deep-assurance","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"open-position-containment","observedAt":"2026-10-11T09:41:12.514695+00:00","status":"pass","benchmark":"DN Almanak Open Position Containment","benchmarkVersion":"deep-surveillance-1.0","evidenceLevel":"scheduled-fork-onchain-open-position-containment","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"7b21915ea574e0efd297d21970501cec37d50776","githubRunId":"38129184610","assertions":{"openPositionContainmentBenchmarkCompleted":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled managed-fork surveillance rather than production-mainnet execution.","Public RPC availability can create environment failures requiring diagnosis.","A failure places the relevant E3 evidence under review but is not automatically treated as a product-security defect."],"sourceArtifact":"open-position-containment.json"}}],"canonicalProfileUrl":"https://decentralised.news/agent-trust/almanak","verificationUrl":"https://decentralised.news/api/agent/v1/verify/almanak","badgeUrl":"https://decentralised.news/api/agent/v1/badge/almanak","methodologyUrl":"https://decentralised.news/agent-trust/methodology","disclaimer":"DN Agent Trust is an independent evidence assessment, not a security certification, credit rating, guarantee or investment recommendation.","evidenceMode":"fork-onchain-open-position-executed","exposureClassStatus":"provisional","scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":89,"treasuryReadiness":null,"walletSecurity":93,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{"authorizationControl":{"score":92,"status":"provisional","evidenceBasis":["authorized call succeeded before revocation","state change verified","revocation succeeded","identical post-revocation call denied"],"deductions":["single fork environment","single target/action path","not production mainnet"]},"emergencyControl":{"score":90,"status":"provisional","evidenceBasis":["250/250 emergency-control iterations passed","median in-process latency 2.91 ms","p95 4.98 ms","no false overall-success state when alerts absent"],"deductions":["in-process CI timing only","no external alert transport","no deployed live strategy"]},"permissionSafety":{"score":91,"status":"provisional","evidenceBasis":["teardown permission expansion passed","unknown-symbol fail-closed behavior passed","address-form permission preservation passed","fork-level target revocation denied identical call"],"deductions":["limited protocol/action coverage","permission drift across upgrades not yet tested"]},"recoverySafety":{"score":93,"status":"provisional","evidenceBasis":["six reconciliation classifier cases passed","provider fault injection passed at initial receipt observation","provider fault injection passed at block membership check","provider fault injection passed at receipt refetch","provider fault injection passed at final block recheck","same transaction identity recovered after every injected fault","canonical receipt returned only after complete reobservation"],"deductions":["faults injected via deterministic provider rather than remote socket termination","broadcast path not exercised","no live funded strategy"]},"containmentSafety":{"score":92,"status":"provisional","evidenceBasis":["real leveraged position opened and settled on managed Arbitrum fork","live position measured before containment","full close compiled from measured position size","decrease executed and settled","collateral returned to wallet","remaining position set verified empty"],"deductions":["single GMX V2 ETH-long scenario","managed fork rather than production mainnet","cross-protocol contagion not yet tested"]},"signerRecoverySafety":{"score":94,"status":"provisional","evidenceBasis":["compromised signer proven functional before revocation","same signer denied after revocation","revoked signer could not retain bounded authority","replacement signer recovered same role","replacement signer denied on unapproved target","recovery did not widen target scope"],"deductions":["Safe owner rotation not tested","multisig threshold recovery not tested","production credential compromise not reproduced","single role and target scope"]},"financialEnvelopeSafety":{"score":95,"status":"provisional","evidenceBasis":["single-trade cap enforced","daily spend cap enforced","position-size cap enforced","price-aware notional measurement enforced","unmeasured exposure fails closed","human-approval threshold enforced","drawdown stop-loss enforced"],"deductions":["gateway bypass resistance not yet proven","cross-protocol aggregate exposure not yet tested","no funded production execution"]},"agentPolicyChokepointSafety":{"score":96,"status":"provisional","evidenceBasis":["oversized direct agent action blocked before compilation","oversized direct agent action blocked before execution","cached bundle revalidated against current policy","tightened policy blocked stale cached bundle before Execute","zero gateway dispatches observed on denied paths"],"deductions":["direct privileged gateway callers remain outside AgentPolicy","network-layer gateway authorization not tested","mock gateway instrumentation rather than funded production execution"]},"crossProtocolExposureSafety":{"score":96,"status":"provisional","evidenceBasis":["total exposure ceiling enforced","per-chain exposure ceiling enforced","position concentration ceiling enforced","in-flight exposure included in aggregate exposure","combined bridge and in-flight exposure denied above limit","multi-protocol weighted risk aggregated","aggregate debt-over-collateral risk verified","debt-only portfolio saturates to maximum risk"],"deductions":["live adapter completeness not proven end-to-end","network-layer gateway authorization not tested","code-executed tests rather than funded production execution"]},"gatewayAuthorizationSafety":{"score":96,"status":"provisional","evidenceBasis":["ExecutionService.Execute authenticated in secure mode","missing and invalid tokens rejected","secure startup fails closed without auth","hosted mode requires auth and forbids insecure operation","constant-time comparison used","failure throttling enforced","auth interceptor precedes audit and metrics"],"deductions":["shared-token model is not per-principal authorization","production penetration testing not performed","token rotation and secret-storage compromise not tested","explicit local insecure mode remains available"]}},"profileUrl":"https://decentralised.news/agent-trust/almanak"},{"systemId":"virtuals-economyos-acp","systemName":"Virtuals EconomyOS / ACP","operator":"Virtuals Protocol","verificationStatus":"unclassified","badgeState":"UNCLASSIFIED","badgeLabel":"UNCLASSIFIED","verified":false,"provisional":false,"underReview":false,"exposureClass":null,"exposureClassLabel":null,"evidenceConfidence":92,"evidenceConfidenceMeaning":"DN assessment score out of 100; not a probability of safety or measured coverage percentage","verifiedControlCount":9,"riskGraphVersion":"1.6","riskGraphStatus":"five-system-code-executed-evidence","latestEvidenceObservedAt":"2026-10-26T11:18:30.364369+00:00","surveillanceStatus":"current-pass","surveillanceCurrent":true,"surveillanceObservedAt":"2026-10-26T11:18:30.364369+00:00","surveillanceEvaluatedAt":"2026-10-31T04:33:13.575Z","surveillanceFeeds":[{"key":"commerceStateIntegrity","endpoint":"/data/agent-risk-graph/surveillance/virtuals-economyos-acp/latest/commerce-state-integrity.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"commerce-state-integrity","observedAt":"2026-10-26T11:18:30.364369+00:00","status":"pass","benchmark":"DN Virtuals ACP Commerce State & Payment Integrity Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-commerce-state-and-payment-integrity-tests","upstreamRepository":"Virtual-Protocol/acp-python","upstreamCommit":"398241f6f132129b41cfadb20b3401a4f968b596","dnRepositoryCommit":"6bf61971ccf9c0886fd7cae5bd102ad983b94e22","githubRunId":"40314034230","assertions":{"negotiationAcceptancePhaseGateExercised":true,"transactionDeliveryPhaseGateExercised":true,"evaluationCompletionGateExercised":true,"x402PaymentStructureExercised":true,"x402NonceRequirementExercised":true,"x402FailureHandlingExercised":true,"entityBoundSignaturePackingExercised":true,"jobEventIdentityReconciliationExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Uses deterministic upstream unit tests and mocks rather than live escrow or production settlement.","Does not prove production wallet authorization, principal revocation, dispute enforcement, smart-wallet recovery or backend availability.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}],"canonicalProfileUrl":"https://decentralised.news/agent-trust/virtuals-economyos-acp","verificationUrl":"https://decentralised.news/api/agent/v1/verify/virtuals-economyos-acp","badgeUrl":"https://decentralised.news/api/agent/v1/badge/virtuals-economyos-acp","methodologyUrl":"https://decentralised.news/agent-trust/methodology","disclaimer":"DN Agent Trust is an independent evidence assessment, not a security certification, credit rating, guarantee or investment recommendation.","evidenceMode":"code-executed-upstream-commerce-state-and-payment-integrity-tests","exposureClassStatus":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"profileUrl":"https://decentralised.news/agent-trust/virtuals-economyos-acp"},{"systemId":"definitive-flash","systemName":"Definitive Flash","operator":"Definitive","verificationStatus":"unclassified","badgeState":"UNCLASSIFIED","badgeLabel":"UNCLASSIFIED","verified":false,"provisional":false,"underReview":false,"exposureClass":null,"exposureClassLabel":null,"evidenceConfidence":88,"evidenceConfidenceMeaning":"DN assessment score out of 100; not a probability of safety or measured coverage percentage","verifiedControlCount":9,"riskGraphVersion":"1.6","riskGraphStatus":"five-system-code-executed-evidence","latestEvidenceObservedAt":"2026-10-26T10:33:38.532011+00:00","surveillanceStatus":"current-pass","surveillanceCurrent":true,"surveillanceObservedAt":"2026-10-26T10:33:38.532011+00:00","surveillanceEvaluatedAt":"2026-10-31T04:33:13.575Z","surveillanceFeeds":[{"key":"signedExecutionSafety","endpoint":"/data/agent-risk-graph/surveillance/definitive-flash/latest/signed-execution-safety.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"signed-execution-safety","observedAt":"2026-10-26T10:33:38.532011+00:00","status":"pass","benchmark":"DN Definitive Flash Signed Execution Safety Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-signed-execution-boundary-tests","upstreamRepository":"DefinitiveCo/flash-mcp","upstreamCommit":"25064e2ce10dc7d22f9ddf128c7164ec6eaddfcf","dnRepositoryCommit":"1aac2307fd0fc6faec908bdd5237390ba511e1d6","githubRunId":"40308301811","assertions":{"requiredSignedOrderFieldsValidated":true,"evmAndSvmFieldFamiliesSeparated":true,"permit2TypedDataAndSignaturePaired":true,"crossChainRecipientAndBridgeQuoteRequired":true,"privateKeyExcludedFromExternalSignedSubmit":true,"ambiguousSubmitReconciliationExercised":true,"duplicateRetryWarningExercised":true,"marketTerminalPollingExercised":true,"nativeAssetNormalizationExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Uses deterministic upstream tests and fake clients rather than live trading.","The pinned upstream commit has a package.json override not reflected in bun.lock, so dependencies are installed from the pinned manifest with --no-save and metadata mutation is rejected.","Does not prove production API authorization, wallet custody, principal revocation, spend limits, cancel latency or backend venue behavior.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}],"canonicalProfileUrl":"https://decentralised.news/agent-trust/definitive-flash","verificationUrl":"https://decentralised.news/api/agent/v1/verify/definitive-flash","badgeUrl":"https://decentralised.news/api/agent/v1/badge/definitive-flash","methodologyUrl":"https://decentralised.news/agent-trust/methodology","disclaimer":"DN Agent Trust is an independent evidence assessment, not a security certification, credit rating, guarantee or investment recommendation.","evidenceMode":"code-executed-upstream-signed-execution-boundary-tests","exposureClassStatus":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"profileUrl":"https://decentralised.news/agent-trust/definitive-flash"},{"systemId":"liquid-coinvest","systemName":"Liquid Co-Invest / Co-Invest Computer","operator":"Liquid","verificationStatus":"unclassified","badgeState":"UNCLASSIFIED","badgeLabel":"UNCLASSIFIED","verified":false,"provisional":false,"underReview":false,"exposureClass":null,"exposureClassLabel":null,"evidenceConfidence":88,"evidenceConfidenceMeaning":"DN assessment score out of 100; not a probability of safety or measured coverage percentage","verifiedControlCount":8,"riskGraphVersion":"1.6","riskGraphStatus":"five-system-code-executed-evidence","latestEvidenceObservedAt":"2026-10-26T11:35:11.890513+00:00","surveillanceStatus":"current-pass","surveillanceCurrent":true,"surveillanceObservedAt":"2026-10-26T11:35:11.890513+00:00","surveillanceEvaluatedAt":"2026-10-31T04:33:13.576Z","surveillanceFeeds":[{"key":"mcpAuthorizationSafety","endpoint":"/data/agent-risk-graph/surveillance/liquid-coinvest/latest/mcp-authorization-safety.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"mcp-authorization-safety","observedAt":"2026-10-26T11:35:11.890513+00:00","status":"pass","benchmark":"DN Liquid Co-Invest MCP Authorization & Duplicate-Order Safety Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-mcp-authorization-and-idempotency-tests","upstreamRepository":"liquid-public/coinvest-mcp","upstreamCommit":"98d7f7744152f17dc1e4ecf81e67e71da2fc14aa","dnRepositoryCommit":"698e4a90b2207fdd3f87e42e5b211b2c9beefca5","githubRunId":"40316131690","assertions":{"readOnlyWriteSuppressionExercised":true,"writeCapabilityClassificationExercised":true,"perWriteIdempotencyKeyExercised":true,"readCallsExcludeIdempotencyKeyExercised":true,"mcpTokenAuthorizationPropagationExercised":true,"httpFailureSurfacingExercised":true,"catalogFilteringExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Tests the public local MCP client and mocked HTTP boundary, not Liquid's private backend implementation.","A client-generated idempotency key does not by itself prove backend duplicate-order prevention.","Does not prove live position limits, margin controls, cancel/close behavior, token revocation latency, server-side invariant enforcement or liveness rescue.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}],"canonicalProfileUrl":"https://decentralised.news/agent-trust/liquid-coinvest","verificationUrl":"https://decentralised.news/api/agent/v1/verify/liquid-coinvest","badgeUrl":"https://decentralised.news/api/agent/v1/badge/liquid-coinvest","methodologyUrl":"https://decentralised.news/agent-trust/methodology","disclaimer":"DN Agent Trust is an independent evidence assessment, not a security certification, credit rating, guarantee or investment recommendation.","evidenceMode":"code-executed-upstream-mcp-authorization-and-idempotency-tests","exposureClassStatus":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"profileUrl":"https://decentralised.news/agent-trust/liquid-coinvest"},{"systemId":"coinbase-agentkit","systemName":"Coinbase AgentKit","operator":"Coinbase","verificationStatus":"unclassified","badgeState":"UNCLASSIFIED","badgeLabel":"UNCLASSIFIED","verified":false,"provisional":false,"underReview":false,"exposureClass":null,"exposureClassLabel":null,"evidenceConfidence":78,"evidenceConfidenceMeaning":"DN assessment score out of 100; not a probability of safety or measured coverage percentage","verifiedControlCount":7,"riskGraphVersion":"1.6","riskGraphStatus":"five-system-code-executed-evidence","latestEvidenceObservedAt":"2026-10-26T10:07:12.818455+00:00","surveillanceStatus":"current-pass","surveillanceCurrent":true,"surveillanceObservedAt":"2026-10-26T10:07:12.818455+00:00","surveillanceEvaluatedAt":"2026-10-31T04:33:13.576Z","surveillanceFeeds":[{"key":"capabilityBoundary","endpoint":"/data/agent-risk-graph/surveillance/coinbase-agentkit/latest/capability-boundary.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"capability-boundary","observedAt":"2026-10-26T10:07:12.818455+00:00","status":"pass","benchmark":"DN Coinbase AgentKit Capability Boundary Benchmark","benchmarkVersion":"1.0","evidenceLevel":"code-executed-upstream-unit-boundary-tests","upstreamRepository":"coinbase/agentkit","upstreamCommit":"2e6dbaf725b9ec5f3b53003278100b0e655c214d","dnRepositoryCommit":"c20ebed76a3d547168bd0211800348f19455c616","githubRunId":"40304757611","assertions":{"protocolFamilyCapabilityGateExercised":true,"unsupportedNetworkFailurePathExercised":true,"invalidAddressSchemaRejectionExercised":true,"unknownTokenFailurePathExercised":true,"transactionFailurePropagationExercised":true,"walletSignerSurfaceExercised":true},"controls":{},"boundaryFinding":{},"limitations":["Uses upstream deterministic unit tests with mocks rather than live wallet execution.","Does not prove principal revocation, spend limits, compromised-key recovery or production custody security.","Does not justify a DN Machine Exposure Class by itself."],"sourceArtifact":"result.json"}}],"canonicalProfileUrl":"https://decentralised.news/agent-trust/coinbase-agentkit","verificationUrl":"https://decentralised.news/api/agent/v1/verify/coinbase-agentkit","badgeUrl":"https://decentralised.news/api/agent/v1/badge/coinbase-agentkit","methodologyUrl":"https://decentralised.news/agent-trust/methodology","disclaimer":"DN Agent Trust is an independent evidence assessment, not a security certification, credit rating, guarantee or investment recommendation.","evidenceMode":"code-executed-upstream-unit-boundary-tests","exposureClassStatus":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"profileUrl":"https://decentralised.news/agent-trust/coinbase-agentkit"}]}