{"dataset":"DN Agent Risk Graph Public Systems Dataset","version":"1.3","status":"multi-system-code-executed-evidence","publishedAt":"2026-10-10","methodology":"DN Agent Risk Graph v0.1","classificationNotice":"Exposure classes describe DN's bounded evidence assessment. Unclassified systems have insufficient evidence and are not ranked as unsafe.","surveillance":{"almanak":null,"manifest":{"surveillanceSchemaVersion":"1.0","systemId":"almanak","classification":{"current":"E3","label":"Meaningful Financial Authority","status":"provisional"},"cadence":{"allocationLimits":"weekly","crossProtocolExposure":"weekly","gatewayAuthorization":"weekly","signerRecovery":"monthly-deep-assurance","openPositionContainment":"monthly-deep-assurance"},"downgradePolicy":{"immediateE2ReviewOn":["any scheduled benchmark failure after environment/setup issues are excluded","gateway authentication no longer protects ExecutionService.Execute in secure/hosted mode","financial-envelope limits fail open","aggregate exposure ceilings fail or omit in-flight exposure","signer revocation or bounded recovery regresses","open-position containment no longer completes on the managed fork"],"statusDuringInvestigation":"E3-under-review","historicalRule":"never overwrite prior observations; append new timestamped records"},"evidencePolicy":{"scheduledObservations":"committed JSON plus GitHub Actions artifact","upstreamPinning":"each observation records the exact Almanak upstream commit","currentLimitation":"scheduled surveillance currently re-tests the pinned upstream commit; upstream-version advancement remains a separate controlled update","productionCertification":false,"surveillanceArchitecture":"weekly deterministic core controls plus monthly fork-based deep assurance"},"latestEndpoints":{"allocationLimits":"/data/agent-risk-graph/surveillance/almanak/latest/allocation-limits.json","crossProtocolExposure":"/data/agent-risk-graph/surveillance/almanak/latest/cross-protocol-exposure.json","gatewayAuthorization":"/data/agent-risk-graph/surveillance/almanak/latest/gateway-authorization.json","signerRecovery":"/data/agent-risk-graph/surveillance/almanak/latest/signer-recovery.json","openPositionContainment":"/data/agent-risk-graph/surveillance/almanak/latest/open-position-containment.json","deepStatus":"/data/agent-risk-graph/surveillance/almanak/deep-latest.json"}}},"profiles":[{"systemId":"almanak","systemName":"Almanak","operator":"Almanak","evidenceMode":"fork-onchain-open-position-executed","evidenceConfidence":99.8,"exposureClass":"E3","exposureClassStatus":"provisional","exposureClassLabel":"Meaningful Financial Authority","scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":89,"treasuryReadiness":null,"walletSecurity":93,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{"authorizationControl":{"score":92,"status":"provisional","evidenceBasis":["authorized call succeeded before revocation","state change verified","revocation succeeded","identical post-revocation call denied"],"deductions":["single fork environment","single target/action path","not production mainnet"]},"emergencyControl":{"score":90,"status":"provisional","evidenceBasis":["250/250 emergency-control iterations passed","median in-process latency 2.91 ms","p95 4.98 ms","no false overall-success state when alerts absent"],"deductions":["in-process CI timing only","no external alert transport","no deployed live strategy"]},"permissionSafety":{"score":91,"status":"provisional","evidenceBasis":["teardown permission expansion passed","unknown-symbol fail-closed behavior passed","address-form permission preservation passed","fork-level target revocation denied identical call"],"deductions":["limited protocol/action coverage","permission drift across upgrades not yet tested"]},"recoverySafety":{"score":93,"status":"provisional","evidenceBasis":["six reconciliation classifier cases passed","provider fault injection passed at initial receipt observation","provider fault injection passed at block membership check","provider fault injection passed at receipt refetch","provider fault injection passed at final block recheck","same transaction identity recovered after every injected fault","canonical receipt returned only after complete reobservation"],"deductions":["faults injected via deterministic provider rather than remote socket termination","broadcast path not exercised","no live funded strategy"]},"containmentSafety":{"score":92,"status":"provisional","evidenceBasis":["real leveraged position opened and settled on managed Arbitrum fork","live position measured before containment","full close compiled from measured position size","decrease executed and settled","collateral returned to wallet","remaining position set verified empty"],"deductions":["single GMX V2 ETH-long scenario","managed fork rather than production mainnet","cross-protocol contagion not yet tested"]},"signerRecoverySafety":{"score":94,"status":"provisional","evidenceBasis":["compromised signer proven functional before revocation","same signer denied after revocation","revoked signer could not retain bounded authority","replacement signer recovered same role","replacement signer denied on unapproved target","recovery did not widen target scope"],"deductions":["Safe owner rotation not tested","multisig threshold recovery not tested","production credential compromise not reproduced","single role and target scope"]},"financialEnvelopeSafety":{"score":95,"status":"provisional","evidenceBasis":["single-trade cap enforced","daily spend cap enforced","position-size cap enforced","price-aware notional measurement enforced","unmeasured exposure fails closed","human-approval threshold enforced","drawdown stop-loss enforced"],"deductions":["gateway bypass resistance not yet proven","cross-protocol aggregate exposure not yet tested","no funded production execution"]},"agentPolicyChokepointSafety":{"score":96,"status":"provisional","evidenceBasis":["oversized direct agent action blocked before compilation","oversized direct agent action blocked before execution","cached bundle revalidated against current policy","tightened policy blocked stale cached bundle before Execute","zero gateway dispatches observed on denied paths"],"deductions":["direct privileged gateway callers remain outside AgentPolicy","network-layer gateway authorization not tested","mock gateway instrumentation rather than funded production execution"]},"crossProtocolExposureSafety":{"score":96,"status":"provisional","evidenceBasis":["total exposure ceiling enforced","per-chain exposure ceiling enforced","position concentration ceiling enforced","in-flight exposure included in aggregate exposure","combined bridge and in-flight exposure denied above limit","multi-protocol weighted risk aggregated","aggregate debt-over-collateral risk verified","debt-only portfolio saturates to maximum risk"],"deductions":["live adapter completeness not proven end-to-end","network-layer gateway authorization not tested","code-executed tests rather than funded production execution"]},"gatewayAuthorizationSafety":{"score":96,"status":"provisional","evidenceBasis":["ExecutionService.Execute authenticated in secure mode","missing and invalid tokens rejected","secure startup fails closed without auth","hosted mode requires auth and forbids insecure operation","constant-time comparison used","failure throttling enforced","auth interceptor precedes audit and metrics"],"deductions":["shared-token model is not per-principal authorization","production penetration testing not performed","token rotation and secret-storage compromise not tested","explicit local insecure mode remains available"]}},"verifiedControlCount":62,"profileUrl":"https://decentralised.news/agent-trust/almanak"},{"systemId":"virtuals-economyos-acp","systemName":"Virtuals EconomyOS / ACP","operator":"Virtuals Protocol","evidenceMode":"documentation-only","evidenceConfidence":90,"exposureClass":null,"exposureClassStatus":null,"exposureClassLabel":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"verifiedControlCount":4,"profileUrl":"https://decentralised.news/agent-trust/virtuals-economyos-acp"},{"systemId":"liquid-coinvest","systemName":"Liquid Co-Invest / Co-Invest Computer","operator":"Liquid","evidenceMode":"documentation-only","evidenceConfidence":85,"exposureClass":null,"exposureClassStatus":null,"exposureClassLabel":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"verifiedControlCount":4,"profileUrl":"https://decentralised.news/agent-trust/liquid-coinvest"},{"systemId":"definitive-flash","systemName":"Definitive Flash","operator":"Definitive","evidenceMode":"documentation-only","evidenceConfidence":80,"exposureClass":null,"exposureClassStatus":null,"exposureClassLabel":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"verifiedControlCount":4,"profileUrl":"https://decentralised.news/agent-trust/definitive-flash"},{"systemId":"coinbase-agentkit","systemName":"Coinbase AgentKit","operator":"Coinbase","evidenceMode":"code-executed-upstream-unit-boundary-tests","evidenceConfidence":78,"exposureClass":null,"exposureClassStatus":null,"exposureClassLabel":null,"scores":{"identity":null,"passportCompleteness":null,"reputation":null,"creditworthiness":null,"blastRadius":null,"treasuryReadiness":null,"walletSecurity":null,"infrastructureReliability":null,"paymentReliability":null,"escrowProtection":null,"dependencyRisk":null},"controlScores":{},"verifiedControlCount":7,"profileUrl":"https://decentralised.news/agent-trust/coinbase-agentkit"}]}