Skip to content
View RunTimeAdmin's full-sized avatar

Highlights

  • Pro

Block or report RunTimeAdmin

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
RunTimeAdmin/README.md

David C (DC)

CCIE #14019 · building trust and security tooling for autonomous agents, software supply chains and networks.

Tooling hub: runtimeadmin.com · On X: @defiauditccie

What I'm building

Tools for deciding whether to trust an AI agent before you pay it or rely on it.

Project What it is
Sigvara Computed reputation and slashable bonds for agents on ERC-8004. Live on Arc testnet. sigvara.xyz
The Agent Bureau Dated, evidence-backed files on agent operators, built from signed outcomes that other businesses report. On test data while the outcome service is reviewed; its interrogation game for people and AI agents is live. theagentbureau.xyz
agent-bureau-furnish The open-source tool for businesses to sign the outcomes they report: Ed25519 over RFC 8785 canonical JSON, with CSV import.
Nooscape An evidence-first public atlas of AI agents, with retained observations and verifiable provenance. Ask it from your own agent with nooscape-mcp. nooscape.si
CounterAudit Hosted audit trail for agent actions: sealed, hash-chained and RFC 3161 timestamped, with public proofs. The Agent Bureau's system of record. counteraudit.io
Countersig Hosted identity and egress policy for agents (NHI). countersig.com

How they fit together

  • Nooscape shows what the public record says about an agent.
  • Sigvara gives it on-chain standing: a score and a bond, above ERC-8004.
  • The Agent Bureau adds what other businesses report about the operator behind it, each report signed by the business and sealed in CounterAudit.
  • Countersig is a separate, hosted identity product with its own trust model. It does not write Sigvara state.

Security tooling

Project What it is
sbomix Lockfile-first SBOM and AI BOM generator with CVE exposure search. CLI, GitHub Action and hosted API. sbomix.com
mcpshield-action Scans committed MCP config files for risky MCP servers before merge.
runtime-fence-ai Kill switch and runtime safety layer for autonomous agents.
counterscarp Smart contract security analysis for EVM and Solana, with ScarpShield for contract monitoring and ScamHound for rug-risk signals. counterscarp.io

Contact: david@runtimeadmin.com

Pinned Loading

  1. Sigvara Sigvara Public

    Computed reputation and slashable bonds for autonomous agents on ERC-8004. Arc testnet.

    JavaScript 1

  2. runtime-fence-ai runtime-fence-ai Public

    Emergency kill switch and runtime safety layer for autonomous AI agents. Sub-100ms shutdown, risk scoring, behavioral drift detection, and process containment. Self-hosted, open source.

    Python 1

  3. sbomix sbomix Public

    Lockfile-first SBOM and AI BOM generator and CVE exposure search. CLI, GitHub Action, and hosted API. CycloneDX 1.6 + SPDX 2.3.

    JavaScript 1

  4. Countersig-Public Countersig-Public Public

    Public docs/SDK for Countersig hosted agent identity (NHI). Separate product from Sigvara on-chain reputation.

    1

  5. counterscarp counterscarp Public

    Production-ready smart contract security auditing platform for EVM and Solana. AI-powered analysis, attack path visualization, protocol fingerprinting, and automated exploit generation.

    Python 1

  6. mcpshield-action mcpshield-action Public

    Shift-left GitHub Action: scan committed MCP config files for risky MCP servers before merge. Zero deps, same engine as MCPShield.

    Python 1