github Rust analyzed 8b1d915

JPatronC92/tempus-ddb

github

Security gate for autonomous agent actions with signed policy, single-use permits, and verifiable execution receipts.

maintainer
JPatronC92
licence
MIT
first seen
2026-08-24
last seen
2026-08-24
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 12 tools
transport counts 12 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • tempus_commit_outcome
  • tempus_commit_outcome_signed
  • tempus_gen_keys
  • tempus_get_trace
  • tempus_init
  • tempus_list_agents
  • tempus_list_identity_events
  • tempus_list_policies
  • tempus_register_agent
  • tempus_request_action
  • tempus_request_action_signed
  • tempus_verify_trace
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8b1d915 · analyzer v33 · 5d ago

danger signals2

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 50

filesystem 3

  • fs (weak) elbuilder77-tempus-ddb-8b1d915/scripts/build_site.mjs :1 import { cp, mkdir, rm } from "node:fs/promises";
  • fs (weak) elbuilder77-tempus-ddb-8b1d915/scripts/generate_site_trace_fixture.mjs :2 import { mkdir, writeFile } from "node:fs/promises";
  • fs (weak) elbuilder77-tempus-ddb-8b1d915/scripts/validate_site.mjs :2 import { access, readFile, readdir } from "node:fs/promises";

shell / exec 1

  • shell (weak) elbuilder77-tempus-ddb-8b1d915/scripts/build_site.mjs :2 import { spawn } from "node:child_process";

network 2

  • net (weak) elbuilder77-tempus-ddb-8b1d915/scripts/sites-worker.mjs :2 fetch(request, env) {
  • net elbuilder77-tempus-ddb-8b1d915/site/assets/trace-page.mjs :109 const response = await fetch('data/demo-trace.json', { signal: controller.signal });

tool registrations 12

  • tempus_request_action_signed elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :73
  • tempus_commit_outcome_signed elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :97
  • tempus_get_trace elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :113
  • tempus_verify_trace elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :125
  • tempus_list_agents elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :137
  • tempus_list_policies elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :146
  • tempus_list_identity_events elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :155
  • tempus_request_action elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :168
  • tempus_commit_outcome elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :195
  • tempus_init elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :228
  • tempus_gen_keys elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :242
  • tempus_register_agent elbuilder77-tempus-ddb-8b1d915/python/tempus_ddb/mcp_server.py :256

declared dependencies 12

  • @openai/sites-vite-plugin@0.2.0
  • vite@8.2.2
  • serde@1.0
  • serde_json@1.0
  • sha2@0.11
  • ed25519-dalek@2.1
  • hex@0.4
  • clap@4.4
  • rand_core@0.6
  • rand@0.8
  • tempfile@3.8
  • pyo3-build-config@0.29