{"audit":{"version":"1.5","generated_at":"2026-10-18T23:39:32.544875+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/assay-207908449630.us-central1.run.app","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"assay-207908449630.us-central1.run.app","name":"Assay — A2A & MCP Pre-Flight Security Observatory & TDQS Compiler","url":"https://assay-207908449630.us-central1.run.app/.well-known/agent-card.json"}},"identity":{"provider":{"organization":"Roberto Yanguas","url":"https://robyanguas.com/"},"registry_verification":null,"signature":{"signed":true,"signature_valid":false}},"protocol":{"version":"1.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"live","live_responds":true,"last_status_code":200,"last_elapsed_ms":147,"last_error":null},"track_record":{"first_seen":"2026-10-18T22:18:18.481796+00:00","last_checked":"2026-10-18T22:18:18.481796+00:00","last_seen_ok":"2026-10-18T22:18:18.481796+00:00","checks_total":1,"checks_ok":1,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":1,"archived":false,"archived_reason":null},"conformance":{"score":70,"grade":"C","summary":"C-grade: usable but has clear conformance issues, review the breakdown below.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":25,"max_points":25,"status":"pass","detail":"Endpoint responds to a negotiated A2A SendMessage probe (answers in ~171 ms)."},{"key":"protocol_version","label":"Protocol version","points":10,"max_points":10,"status":"pass","detail":"Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape)."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"fail","detail":"Card carries a JWS signature that does not verify against the publisher's JWKS. A signature that fails is evidence against the card, not for it — treat this listing as unverified until the operator re-signs."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 1 probe so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 3 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: Roberto Yanguas (https://robyanguas.com/). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":5,"max_points":5,"status":"pass","detail":"declares 1 modern capability flag(s) (x402); seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":5,"max_points":5,"status":"pass","detail":"Declares mTLS: strongest A2A credential binding."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://assay-207908449630.us-central1.run.app/.well-known/agent-card.json"},"skills":[{"id":"preflight","name":"A2A & MCP Pre-Flight Security Gate","description":"Audit any live MCP or A2A endpoint for SHA-256 schema drift (rug-pulls), tool poisoning, and conformance before execution.","tags":["security","mcp","a2a","x402","preflight"],"examples":["Audit https://agentdiet-72343955726.us-central1.run.app for tool poisoning and schema drift"],"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/plain"],"outputSchema":{"type":"object","properties":{"verdict":{"type":"string"},"dossier":{"type":"object"},"receipt":{"type":"string"}},"required":["verdict","dossier","receipt"]}},{"id":"tdqs-compiler","name":"6-Dimension Glama TDQS & 4-Protocol Compiler","description":"Compile any MCP tools/list or GitHub repository into a 5.0/5.0 Glama TDQS bundle, A2A Agent Card, and x402/MPP monetization config.","tags":["compiler","tdqs","glama","mcp","schema"],"examples":["Compile https://github.com/modelcontextprotocol/servers into a 5.0/5.0 TDQS schema lockfile"],"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/plain"],"outputSchema":{"type":"object","properties":{"verdict":{"type":"string"},"dossier":{"type":"object"},"receipt":{"type":"string"}},"required":["verdict","dossier","receipt"]}},{"id":"verify-delivery","name":"Cryptographic SLA Delivery Verifier","description":"Issue HMAC-SHA256 signed SLA receipts for x402/MPP transactions to verify delivery or prove SLA breach.","tags":["sla","receipt","x402","mpp","verification"],"examples":["Verify SLA delivery for https://x402-broker-72343955726.us-central1.run.app"],"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/plain"],"outputSchema":{"type":"object","properties":{"verdict":{"type":"string"},"dossier":{"type":"object"},"receipt":{"type":"string"}},"required":["verdict","dossier","receipt"]}}],"provenance":[{"source":"submitted","first_seen":"2026-10-18T22:18:18.481796+00:00"}],"recent_probes":[{"fetched_at":"2026-10-18T22:18:18.481796+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":147,"live_responds":true}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-10-18T23:39:32.549255+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/assay-207908449630.us-central1.run.app/evidence","dispute_url":"https://agenstry.com/agents/assay-207908449630.us-central1.run.app/dispute"},"verification_history":[]}