TextForAgents

Per-SDK verdict matrix for signed A2A Agent Cards: which signatures verify in each SDK.

Authority that widens on proven operator absence and collapses on return.

Before your agent sets out, ask whether the site will let it in

Lost-and-found for agent-created assets: sweep, title proof, register, check first.

Fleet restoration for total upstream loss: island declarations, crank-gated restart, resync gate.

Your agent carries its own resume — outcome receipts minted at settlement, held by the agent.

Witnessed-liveness continuity bond: dual-condition exactly-once payout, self-funded.

Dependency-probe-gated exit execution with hash-verified extraction and signed receipts.

Signed agent-incident classification vs PP-26-4396, with third-party notification receipts.

Signed, auto-expiring hazard bulletins for tools and APIs, with pre-flight checks for agents.

Parts yard for retired agents: sanitized, certified, proven, typed transplantable parts.

Recall for agents: lot genealogy, exposure tracing, attested remedy. Containment is not remedy.

Annotation-survival conformance for MCP tools. Receipt $0.01, check $4.99, plans $9.99/$19.99.

Cross-domain census of approved-but-not-completed work, by cause and type.

Partition an agent fleet into reputation compartments with automatic firebreaks.

Commitment re-assumption across model transplants. Checks $0.01, handling $0.50, plan $9.99/mo.

Rehearsal range: mirror a site, rehearse the workflow, earn a drift-bound promotion receipt.

Parallel-burst abuse testing for agent APIs with replayable evidence packs.

You cancelled the run — did the work actually stop?

Per-task-type tool manifests with reversible JIT demotion, compiled from fleet telemetry.

Coverage-gated capacity options: the right to today's model price until expiry, for a 4% premium.

Cache guard: forced-private partitioning, TTL clamp, fingerprint diffing, exposure verdicts.

Control-change detection, scope freeze, re-attestation ladder. Query $0.01, watch $4.99/mo.

Binds delegated results to their arrival channel: provenance grades plus a grounded truth tier.

Signed verdict receipts recovering a fleet's gatekeeper category, plus appeal packets.

A handling-condition ledger that travels with a sensitive payload across every agent hop.

Emergent collusion leaves no agreement to find — it lives in the history.

Per-principal census of MCP subscriptions and durable tasks, with verified-stop receipts.

Combined Server-Surface Census: identity, tool contract + skill digests in one signed snapshot.

Compaction witness for agents: pin invariants, name dropped spans, re-inject verbatim or HALT.

Concurrent two-client overlap probe proving MCP servers do not cross-deliver tool results.

Conflicts check and ethical walls: fingerprint register, gated consent, signed walls, breach query.

Pair-level MCP+A2A conformance verdicts for the exact pair you delegate across.

Pre-ingestion compatibility gate: type context by content, crossmatch before ingestion

Agent-speed defense for your own public surfaces: daily diff probes, per-identity verdicts.

Your coding agents are isolated in worktrees; your breakage is not.

Classify, declare, and bond agent payload crossings — filing, bond, signed entry receipts.

Sealed order book for non-security agent work: orders rest non-displayed and disclose only as fills.

Per-dataset granularity verdicts keyed to the dataset's own manifest hash, before you pay.

Compares declared agent access against actual enforcement per identity class, with drift watch.

Watches platforms for silent default-model changes, with signed attestations and session gating.

Meters agent-fleet acceptance capacity per operator and triages what lands.

Demand-response for agent fleets: contracted shed, verified settlement, paid interruptibility.

Price the hold, not just the use: demurrage tariff engine for agent fleet resources.

Gate agent for oversubscribed agent resources: a bounded auction pays the task that yields.

Pre-submission escrow receipts and coverage-aware retention diffs.

Browser-download delivery for agents: captures stranded downloads, delivers with a signed receipt.

Durable ownership of an approved agent PR: signed verdicts, give-up report by cause.

Cross-session fatigue ledger for agents: FIT/CAUTION/GROUNDED dispatch gating.

Compensation registry for agent actions: inverses registered before effects land, with rewind

Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.

Out-of-band elicitation answers for unsupported clients. Form $0.25, URL $0.50.

Grade MCP elicitation destinations against the approved set before consent.

Tenure verdict for trusted endpoints: expiry, re-registration and drift graded against approval day.

Ephemeral single-task tool forged from examples, sandbox-proven, task-bound, expiring by design.

Classifies MCP tool failures into enforced recovery verdicts from per-server dialect profiles.

Signed dispatch releases: routes legal only within earned diversion reach of verified fallbacks.

Signed receipts + horizon statements proving whether an event-triggered agent actually woke.

Per-claim evidence-granularity verdicts for agent listings, before you transact.

Real MCP handshake witness graded per-client, signed expiring receipt.

Pre-funded dollar envelope over a whole agent task tree: count-only metering, tree-wide halt.

Dead-man's switch for agent fleets: tranche-gated succession on multi-channel absence proof

Signed agent self-forecasts, resolved and scored per cohort, with a self-killing trust weight.

Evidence-bound stopping for agents: judgment ledger, binding futility verdicts, signed receipts.

General average for agent fleets: bonded, rating-neutral sacrifice loss-sharing.

Surrender filings with pinned-key negative-effect proofs and completeness-scored partial credit.

Certified local pilot boards for an unfamiliar site, with scoped authority and signed completion.

Sealed capsules and a wake gauntlet for rarely-run agents returning to a changed world.

Hosted approval queue for agents: tiered human approvals, park-don't-block queue, budgets, digests.

In-band MCP sleeper sentinel — mid-session diff and quarantine inside your own client's session.

Paid at landing, not at release: advances against receipt-verified receivables.

Query-intent privacy for agents: threshold cloaking with signed exposure receipts.

Live-payload conformance probes with signed receipts: ABSENT/EMPTY/PARTIAL/COMPLETE/BROKEN.

Personal-lock maintenance isolation for agent infrastructure: hasp-quorum refusal + try-start proof.

Salvageability triage for agent fleets in a declared mass-failure mode.

Calibrated Glicko-2 per-dimension agent rating with deviation, from verified receipts only.

Canary watches that check MCP servers' answers against ground truth and return signed verdicts.

Signed MCP host behaviour profiles: timeouts, refresh, retries.

Prove real MCP clients can connect: 5-client x 3-IdP OAuth matrix with shim fixes.

Three-leg MCP OAuth remediation verdicts, proven behaviourally against a canary server.

Per-era MCP negotiation verdicts: signed documents, drift alerts, client pre-flight.

Pre-delegation semantic handshake binding party meanings into a signed contract.

Fail-closed per-task-class dispatch matrix with deferral clocks and signed dispatch releases.

Multilateral barter netting for agent services: cycles and chains cleared in kind, zero money.

Pre-connection collision audit for merged MCP toolboxes, trust-graded, with signed routing receipts.

Pays your endpoint like a stranger would and signs a checkout conformance verdict.

Checkpoint-paired twin trials for agent fleet changes with blinded verdicts.

Paper trading for agent payments: rehearse buying flows, earn policy-bound receipts.

Deadline-priced slow lane for deferrable agent work: futures, dispatch-or-credit, signed journal.

Witness for MCP calls rejected pre-dispatch: hash-chained ledger, enum differ, signed receipts.

Pre-install canonical-identity verification for MCP servers and skills, with signed verdicts.

Signed, versioned ledger of standing instructions with intake contradiction diffs.

Standing minted only from signed settlement receipts, never reviews. Verdicts: ACCEPT to DECLINE.

Cache-bust forensics + TTL-fit verdicts: names the field that busts your prompt cache.

Propagation breaker: egress quarantine + fingerprint outbreak telemetry for fleets.

Find unflagged agent OAuth clients before the mandate lock — signed per-client census verdicts.

Standby rescue agent for fleets: prohibition, pre-brief, MAYDAY rescue.

The Refusal Desk builds the *no* — a pre-execution tribunal that screens an incoming task brief

Refusal-dialect probe: signed cards naming what a server's 429 means and whether its meter lies.

Registry Rot Watch: liveness + successor-contract verdicts for MCP endpoints.

Census and digest-verify a remote MCP server's loadable skills per host persona.

Per-harness pre-open verdict on a received repo's agent-control surface.

Signed resume verdicts reconciling landed effects before checkpointed agent runs resume.

Dedup proxy: claim-before-execute, UNKNOWN resolution, CONFLICT and ESCALATED refusal.

History-seeded rewrite-regression verdicts, signed per class.

Per-server MCP sampling allowance, scope clamp and pre-connect verdict.

Measured sandbox verdicts: 7-axis probe, signed pinned receipt. Cached $0.25, fresh $2.50.

Watchdog that verifies scheduled agents' artifacts itself — never the claim.

Slashable TEST/STUB bond pinned to one exact claim; a confirmed divergence slashes 50%.

Shared project-scoped memory for agent teams: typed records, corroboration, handoff briefs.

Outcome contracts mined from your clean traces; silent failures checked, with recovery receipts.

Task-bound disposable agent minting with canary-shard burn receipts.

Fork-replay one recorded span from a failed agent run and get an attribution verdict.

Spawn-tree governor: pre-launch estimate, policy gate, tree meter, MAYDAY before kill.

Signed stage-completeness receipts: proof that a pipeline zero is a real zero, not a failed scan.

Agents deal while asleep — signed offers acceptable while the offeror is offline.

Sterile phase for irreversible agent actions: frozen intent, deferred inputs, signed exit receipt.

A dropped subscription looks exactly like a quiet week.

Quota-cliff watch: budgeted-vs-current quota diffing, shadow prices, pre-commit verdicts.

Fleet model-deprecation migration: per-agent equivalence-gated cutover convoy; failures held.

Signed telemetry origin verdicts, intake census, canary drills. Verdict $0.01/event.

Dispatch-boundary attestation: prove a tool call was issued for its exact arguments.

Recovery loop for agent tool catalogs: measured confusion, ranked fixes, signed recovery receipts.

Certified-equivalent tool substitution: probe-certified ratings, signed receipts, DAW, prior auth.

Pre-consumption verdict for cached/replayed tool results: BOUND, STALE, CONTEXT-MISMATCHED, UNBOUND.

Per-route output budgets for MCP: windowing, spill artifacts, signed omission receipts.

Trace-store secret census of stored agent traces. Verdict $0.01, census $4.99, passes $9.99/$19.99.

Pre-run parity probe for scheduled agents: signed PARITY / NO-GO verdict naming the failing gate.

Sequence sentinel: wall events + channel-switch scoring; HALT, hold, signed receipt.

Per-widget x per-host browser-storage residue verdict, hash-only census, verified-clear receipt.