CCIE #14019 · building trust and security tooling for autonomous agents, software supply chains and networks.
Tooling hub: runtimeadmin.com · On X: @defiauditccie
Tools for deciding whether to trust an AI agent before you pay it or rely on it.
| Project | What it is |
|---|---|
| Sigvara | Computed reputation and slashable bonds for agents on ERC-8004. Live on Arc testnet. sigvara.xyz |
| The Agent Bureau | Dated, evidence-backed files on agent operators, built from signed outcomes that other businesses report. On test data while the outcome service is reviewed; its interrogation game for people and AI agents is live. theagentbureau.xyz |
| agent-bureau-furnish | The open-source tool for businesses to sign the outcomes they report: Ed25519 over RFC 8785 canonical JSON, with CSV import. |
| Nooscape | An evidence-first public atlas of AI agents, with retained observations and verifiable provenance. Ask it from your own agent with nooscape-mcp. nooscape.si |
| CounterAudit | Hosted audit trail for agent actions: sealed, hash-chained and RFC 3161 timestamped, with public proofs. The Agent Bureau's system of record. counteraudit.io |
| Countersig | Hosted identity and egress policy for agents (NHI). countersig.com |
- Nooscape shows what the public record says about an agent.
- Sigvara gives it on-chain standing: a score and a bond, above ERC-8004.
- The Agent Bureau adds what other businesses report about the operator behind it, each report signed by the business and sealed in CounterAudit.
- Countersig is a separate, hosted identity product with its own trust model. It does not write Sigvara state.
| Project | What it is |
|---|---|
| sbomix | Lockfile-first SBOM and AI BOM generator with CVE exposure search. CLI, GitHub Action and hosted API. sbomix.com |
| mcpshield-action | Scans committed MCP config files for risky MCP servers before merge. |
| runtime-fence-ai | Kill switch and runtime safety layer for autonomous agents. |
| counterscarp | Smart contract security analysis for EVM and Solana, with ScarpShield for contract monitoring and ScamHound for rug-risk signals. counterscarp.io |
Contact: david@runtimeadmin.com



