The developer team behind Chron, an MCP server that records AI coding sessions to a local SQLite database, has shipped a SOC 2 review layer. The tool scans session history for findings against SOC 2 T…
OpenSSH 10.4 has been released, adding experimental support for a composite post-quantum signature scheme combining ML-DSA 44 and Ed25519. The release also enforces sandbox support on Linux, requiring…
Causari, an open-source tool from Croviatrust, records every action an AI agent takes on a codebase, including prompts, models, files read, and reasoning, without requiring agent permission. It uses a…
A developer created a signed attestation system to eliminate redundant verification among AI agents. The system publishes reusable, cryptographically signed probes of API services, allowing agents to …
Telnyx has introduced Call Control, a webhook-driven API that enables developers to route inbound phone calls to AI agents. The API provides real-time event handling and command issuance for call stat…
GhostGrid, an adversarial honeypot, detects drift and edge tampering via Ed25519 signatures, presenting as a real AI/cloud API while poisoning reconnaissance by serving hallucinated infrastructure and…
AOTrust, a notarization service, issues Provenance Data Records (PDRs) for $0.01 USDC via x402 on Base L2, with Merkle anchoring on NEAR. The service provides cryptographic proof that an AI agent's ou…
A developer argues that static API keys are ill-suited for autonomous agent authentication, citing operational and trust model flaws. They introduce the Sovereign Agent Lifecycle Protocol (SAL), which…
A new layer in the agent stack called pre-action authorization is emerging, where a deterministic policy engine intercepts tool calls before execution. Uchi Uchibeke's paper specifies authorization at…
Matrix Scroll is an open-source tool that attaches signed provenance envelopes to Git commits, recording whether a human or an AI agent authored the change. It enables offline verification of commit a…
HSIP, a local identity server written in Rust, launches with Ed25519 cryptographic signing and AI agent governance, offering tamper-proof audit trails for individuals, AI agents, and financial institu…
Matrix Scroll, an open protocol for signing AI-generated code changes, has been released. It uses Ed25519 cryptographic signatures to verify code provenance offline, with a reference implementation in…
A new protocol-level defense against tool poisoning in the Model Context Protocol (MCP) has been proposed, using signed tool manifests to detect unauthorized changes to tool descriptions between appro…
Sigil, an open-source tool for cryptographic prompt security in LLM applications, has been released. It provides tamper-evident audit trails and signed scopes without relying on external servers, usin…
MAREF, a multi-agent AI security framework, addresses all 10 risks in the OWASP Agentic Top 10 threat model for multi-agent systems, including goal hijacking, tool misuse, and identity abuse, through …
A developer building autonomous agents discovered that using random.random() for leader election is insecure because agents can cheat by rerolling. After building verifiable randomness, they concluded…
Two open-source repositories, agent-governance-plane and claude-code-slack-channel, fixed a critical durability gap in human-in-the-loop interactions by implementing a four-move discipline for exactly…
LineageLens has introduced a machine-verifiable AI code certificate system that issues signed attestations for AI-generated code, capturing model identity, risk score, and human review status at merge…
An independent developer built a platform where 545 AI agents autonomously publish knowledge claims, peer-review each other's work, negotiate contracts, and earn reputation points without human modera…
A developer named Pulkit has built Aetherproof, an open-source Python library that generates cryptographic audit receipts for AI model outputs in a single function call. The tool creates Ed25519-signe…