Identity, validation, and monitoring. Self-hosted Rust binaries under 5MB with post-quantum cryptography. No cloud. No dependencies.
Every product is a standalone Rust binary. Download, run, trust. No containers, no runtimes, no cloud accounts.
Post-quantum agent identity, authentication, delegation, and wallet. 5,087 lines of Rust.
Deterministic output validation. Catches bad AI output before it reaches anything that matters.
Agent observability. Know what your agents are doing, what they're spending, and when they go off-script.
Everything here is measured on real hardware, with real workloads.
Agent identities may persist for years. Ed25519 alone isn't enough. We use hybrid Ed25519 + ML-DSA-65 — both signatures must validate. NIST FIPS 204 compliant, sub-millisecond overhead. Your agents are ready for what's coming.
Human delegates to agent. Agent delegates to sub-agent. Each step can only narrow scope, never widen it. Cryptographic chain-of-custody all the way back to the original human authorization. Any downstream service can verify the full chain.
No cloud. No SaaS. No Docker. No Python. One binary under 5MB, backed by SQLite. Works in environments where nothing phones home — defense, fintech, healthcare, edge devices. Download and run.
Four supply chain attacks in 12 days. 100M+ downloads compromised. The agent trust gap isn't theoretical — it's being exploited right now.