Security gate for autonomous agent actions with signed policy, single-use permits, and verifiable execution receipts.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 12 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
tempus_commit_outcome
-
tempus_commit_outcome_signed
-
tempus_gen_keys
-
tempus_get_trace
-
tempus_init
-
tempus_list_agents
-
tempus_list_identity_events
-
tempus_list_policies
-
tempus_register_agent
-
tempus_request_action
-
tempus_request_action_signed
-
tempus_verify_trace
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 8b1d915 · analyzer v33 · 5d ago
danger signals2
- committed secret Slack token elbuilder77-tempus-ddb-8b1d915/tests/test_conformance.py :85
xoxb-m…(15 chars, redacted) - committed secret Slack token elbuilder77-tempus-ddb-8b1d915/tests/test_new_executors.py :162
xoxb-i…(25 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 50
filesystem 3
- fs (weak) elbuilder77-tempus-ddb-8b1d915/scripts/build_site.mjs :1
import { cp, mkdir, rm } from "node:fs/promises"; - fs (weak) elbuilder77-tempus-ddb-8b1d915/scripts/generate_site_trace_fixture.mjs :2
import { mkdir, writeFile } from "node:fs/promises"; - fs (weak) elbuilder77-tempus-ddb-8b1d915/scripts/validate_site.mjs :2
import { access, readFile, readdir } from "node:fs/promises";
shell / exec 1
- shell (weak) elbuilder77-tempus-ddb-8b1d915/scripts/build_site.mjs :2
import { spawn } from "node:child_process";
network 2
- net (weak) elbuilder77-tempus-ddb-8b1d915/scripts/sites-worker.mjs :2
fetch(request, env) { - net elbuilder77-tempus-ddb-8b1d915/site/assets/trace-page.mjs :109
const response = await fetch('data/demo-trace.json', { signal: controller.signal });
tool registrations 12
- tempus_request_action_signed elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :73
- tempus_commit_outcome_signed elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :97
- tempus_get_trace elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :113
- tempus_verify_trace elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :125
- tempus_list_agents elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :137
- tempus_list_policies elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :146
- tempus_list_identity_events elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :155
- tempus_request_action elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :168
- tempus_commit_outcome elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :195
- tempus_init elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :228
- tempus_gen_keys elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :242
- tempus_register_agent elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :256
declared dependencies 12
- @openai/sites-vite-plugin@0.2.0
- vite@8.2.2
- serde@1.0
- serde_json@1.0
- sha2@0.11
- ed25519-dalek@2.1
- hex@0.4
- clap@4.4
- rand_core@0.6
- rand@0.8
- tempfile@3.8
- pyo3-build-config@0.29