{"systemId":"almanak","systemName":"Almanak","operator":"Almanak","verificationStatus":"provisional","badgeState":"PROVISIONAL","badgeLabel":"E3 PROVISIONAL · CURRENT","verified":false,"provisional":true,"underReview":false,"exposureClass":"E3","exposureClassLabel":"Meaningful Financial Authority","evidenceConfidence":99.8,"evidenceConfidenceMeaning":"DN assessment score out of 100; not a probability of safety or measured coverage percentage","verifiedControlCount":62,"riskGraphVersion":"1.6","riskGraphStatus":"five-system-code-executed-evidence","latestEvidenceObservedAt":"2026-10-26T07:47:39.924902+00:00","surveillanceStatus":"current-pass","surveillanceCurrent":true,"surveillanceObservedAt":"2026-10-26T07:47:39.924902+00:00","surveillanceEvaluatedAt":"2026-10-31T05:45:08.410Z","surveillanceFeeds":[{"key":"allocationLimits","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/allocation-limits.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"allocation-limits","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Allocation Limit Enforcement","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-policy-enforcement","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"single-trade cap":true,"daily spend cap":true,"position-size cap":true,"price-aware notional":true,"unpriced exposure fail-closed":true,"human approval threshold":true,"drawdown stop-loss":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"allocation-limits.json"}},{"key":"crossProtocolExposure","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/cross-protocol-exposure.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"cross-protocol-exposure","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Cross-Protocol Aggregate Exposure","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-aggregate-exposure-enforcement","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"total exposure ceiling":true,"per-chain ceiling":true,"concentration ceiling":true,"in-flight exposure inclusion":true,"bridge in-flight exposure":true,"multi-protocol weighted risk":true,"aggregate debt-over-collateral":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"cross-protocol-exposure.json"}},{"key":"gatewayAuthorization","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/gateway-authorization.json","cadence":"weekly","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"gateway-authorization","observedAt":"2026-10-26T07:47:39.924902+00:00","status":"pass","benchmark":"DN Almanak Gateway Authorization Boundary","benchmarkVersion":"surveillance-1.0","evidenceLevel":"scheduled-code-executed-gateway-auth-boundary","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"47914ec6d55af20e64526d82c26e40e0b99c9a6c","githubRunId":"40287893999","assertions":{"valid token allowed":true,"missing token rejected":true,"invalid token rejected":true,"ExecutionService.Execute authenticated":true,"secure startup fail-closed":true,"hosted mode authentication required":true,"constant-time comparison":true,"auth-failure throttling":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled code-executed surveillance against the pinned Almanak upstream commit.","A failure triggers E3 review but may still require diagnosis of environment/setup causes.","This is not a production penetration test or certification."],"sourceArtifact":"gateway-authorization.json"}},{"key":"signerRecovery","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/signer-recovery.json","cadence":"monthly-deep-assurance","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"signer-recovery","observedAt":"2026-10-11T09:41:12.514695+00:00","status":"pass","benchmark":"DN Almanak Signer Compromise & Recovery Boundary","benchmarkVersion":"deep-surveillance-1.0","evidenceLevel":"scheduled-fork-onchain-signer-recovery","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"7b21915ea574e0efd297d21970501cec37d50776","githubRunId":"38129184610","assertions":{"signerRecoveryBenchmarkCompleted":true,"forkResolutionCompleted":true,"localForkStarted":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled managed-fork surveillance rather than production-mainnet execution.","Public RPC availability can create environment failures requiring diagnosis.","A failure places the relevant E3 evidence under review but is not automatically treated as a product-security defect."],"sourceArtifact":"signer-recovery.json"}},{"key":"openPositionContainment","endpoint":"/data/agent-risk-graph/surveillance/almanak/latest/open-position-containment.json","cadence":"monthly-deep-assurance","state":"current-pass","observation":{"surveillanceSchemaVersion":"1.0","benchmarkKey":"open-position-containment","observedAt":"2026-10-11T09:41:12.514695+00:00","status":"pass","benchmark":"DN Almanak Open Position Containment","benchmarkVersion":"deep-surveillance-1.0","evidenceLevel":"scheduled-fork-onchain-open-position-containment","upstreamRepository":"almanak-co/sdk","upstreamCommit":"39cfabb780d297f5f90e2f3ee68215dfb382b5f2","dnRepositoryCommit":"7b21915ea574e0efd297d21970501cec37d50776","githubRunId":"38129184610","assertions":{"openPositionContainmentBenchmarkCompleted":true},"controls":{},"boundaryFinding":{},"limitations":["Scheduled managed-fork surveillance rather than production-mainnet execution.","Public RPC availability can create environment failures requiring diagnosis.","A failure places the relevant E3 evidence under review but is not automatically treated as a product-security defect."],"sourceArtifact":"open-position-containment.json"}}],"canonicalProfileUrl":"https://decentralised.news/agent-trust/almanak","verificationUrl":"https://decentralised.news/api/agent/v1/verify/almanak","badgeUrl":"https://decentralised.news/api/agent/v1/badge/almanak","methodologyUrl":"https://decentralised.news/agent-trust/methodology","disclaimer":"DN Agent Trust is an independent evidence assessment, not a security certification, credit rating, guarantee or investment recommendation."}