Skip to content
View DSHCorrectover's full-sized avatar

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Achievements

Achievement: Pull SharkAchievement: Quickdraw

Block or report DSHCorrectover

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
DSHCorrectover/README.md

Correctover

Runtime verification & cryptographic evidence for AI agents and node infrastructure. 从「提示词劝导」到「密码学契约」——运行时七维验证 + Ed25519 签名收据（第三方离线可验）。

我们在做什么（一条主线）

  • CCS 运行时验证框架：AI Agent 工具调用的七维运行时验证（Structure/Schema/Latency/Cost/Identity/Integrity/Security），fail-closed 默认
  • 密码学证据链：每笔授权产出 Ed25519 over JCS（RFC 8785/8032）签名收据——执法/保险/审计可离线核验，无需信任我们的数据库
  • 守夜人服务：矿池/验证节点的签名机安全审计 + 分布式节点契约验证（签名回执链）+ 链上状态突变监控

实证（可独立复核）

  • GHSA-vh45-f885-3848：独立复现并纠正 sm-crypto 弱熵死代码根因，维护者公开致谢
  • mcphub PR #1299：高危工具调用前守卫（merged，6 commits/6 files）
  • IETF 草案在案：agent 运行时验证与签名收据设计（draft-correctover-ccs）
  • 弱熵武器库：secp256k1 九算法（nonce 复用/biased nonce/Weak RNG 枚举），纯手写 ECC 引擎零依赖

工具链

工具 用途
mcp-atlas 42,163 MCP servers / 229,827 tools 参数级普查（CC0）
correctover-scan MCP/Agent 契约与弱 RNG 风险 CLI 扫描器
ccs-verifier Ed25519 收据离线验证器

联系

Popular repositories Loading

  1. agent-runtime-guard agent-runtime-guard Public

    Agent runtime guard — full-stack runtime interception for AI agents. Blocks destructive commands, credential theft, SSRF and injection in real time, with Ed25519 evidence receipts. Agent 运行时全栈拦截.

    JavaScript 2

  2. agent-audit agent-audit Public

    Manual security audit service for AI agents and MCP integrations — semantic intent review of tool permissions, command injection, SSRF and credential-exposure paths, with a free 1-page audit summary.

    HTML

  3. ccs-conformance-vectors ccs-conformance-vectors Public

    Public conformance test vectors for CCS (Correctover Conformance Shape) — signed, tamper-evident receipt fixtures for verifying AI agent runtime security implementations.

    Python

  4. ccs-verifier ccs-verifier Public archive

    Moved to github.com/Correctover/ccs-verifier — CCS Runtime Verifier

  5. ccs-verifier-build ccs-verifier-build Public

    CI build matrix for ccs-verifier wheels (cp310-cp313, Linux/macOS/Windows)

    Python

  6. ccs-integrations ccs-integrations Public

    Framework-native adapters for CCS (Correctover Conformance Shape) cryptographically signed runtime receipts — Ed25519 + JCS signed audit evidence for AI agent tool calls (Pydantic AI, CrewAI).

    Python