🔭 Currently building:
- Symbiont — ⚙️ Policy-governed agent runtime for production. A Rust-native runtime for executing AI agents and tools under explicit policy, identity, and audit controls. Same agent. Secure runtime.
- SchemaPin — 🧷 Cryptographic tool schema verification for AI agents and MCP servers. Prevents "MCP Rug Pull" attacks with ECDSA signatures, DNS-anchored trust, and TOFU key pinning.
- AgentPin — 🪪 Domain-anchored cryptographic identity for AI agents. The second layer in the ThirdKey trust stack (SchemaPin → AgentPin → Symbiont).
- ToolClad — 🛡️ Declarative tool interface contracts for agentic runtimes.
.clad.tomlmanifests define the complete behavioral contract: typed parameters, validation rules, invocation, output parsing, and policy metadata. - AgentSniff — 🔍 AI Agent Network Scanner. Detect AI agents operating on enterprise networks via passive monitoring, active probing, protocol detection, and behavioral analysis.
- TrustVer — 📦 Provenance-aware versioning for AI-era software. Combines EffVer effort semantics with authorship tagging and signed Provenance Attestation Documents (PAD) — know the effort, the author, and the verification applied.
- AgentNull — 🕳️ AI System Security Threat Catalog + Proof-of-Concepts. A red team-oriented catalog of attack vectors targeting autonomous agents (MCP, LangGraph, AutoGPT), RAG pipelines, and embedding-based retrieval systems.
- VectorSmuggle — 🧬 Testing platform for covert data exfiltration via vector embeddings. Sensitive documents tunneled out under the guise of legitimate RAG operations — bypassing traditional controls through semantic obfuscation. Built to help security teams detect and defend.
- HarmonyDagger — 🔐 Make Music Unlearnable for Generative AI. Imperceptible psychoacoustic noise patterns that prevent effective ML training while preserving human listening quality. (Reference implementation — not for production.)
We're building next-generation AI systems for enterprise security and automation.
Our mission: enhance cybersecurity, streamline operations, and democratize AI-powered protection.
