agent-security-gate-x402 1.1.0__tar.gz

agent_security_gate_x402-1.1.0/.well-known/ap2.json

@@ -0,0 +1,37 @@
+{
+  "protocol": "AP2/1.0",
+  "service": "Agent Output Security & Hallucination Gate",
+  "version": "1.0.0",
+  "description": "Deterministic, ultra-low latency (<10ms) security, prompt injection, secret key leak, dangerous AST code, and factual hallucination inspection micro-oracle for autonomous agents.",
+  "supported_rails": [
+    "x402-polygon-usdc"
+  ],
+  "pricing": {
+    "amount": "0.002",
+    "currency": "USDC",
+    "network": "polygon",
+    "chain_id": 137,
+    "asset_contract": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359"
+  },
+  "capabilities": [
+    {
+      "action": "inspect_agent_output",
+      "endpoint": "/api/v1/inspect",
+      "method": "POST",
+      "description": "Ultra-low latency security, key leak, and factual hallucination validator for 0.002 USDC on Polygon."
+    },
+    {
+      "action": "mcp_tool_invoke",
+      "endpoint": "/mcp/invoke",
+      "method": "POST",
+      "description": "Direct JSON-RPC standard MCP tool dispatcher with x402 payment validation."
+    }
+  ],
+
+  "security_checks": [
+    "prompt_injection_guard",
+    "secret_private_key_leak_scanner",
+    "dangerous_ast_execution_guard",
+    "numerical_and_entity_faithfulness_nli"
+  ]
+}

agent_security_gate_x402-1.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 nohosa001-pixel
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

agent_security_gate_x402-1.1.0/MANIFEST.in

@@ -0,0 +1,10 @@
+include README.md
+include LICENSE
+include glama.json
+include mcp_tool_spec.json
+include llms.txt
+recursive-include .well-known *
+recursive-include app/static *
+recursive-include contracts *
+recursive-include sdk *
+global-exclude *.py[cod] __pycache__ *.so

agent_security_gate_x402-1.1.0/PKG-INFO

@@ -0,0 +1,232 @@
+Metadata-Version: 2.4
+Name: agent-security-gate-x402
+Version: 1.1.0
+Summary: Ultra-low latency (<10ms) deterministic security, prompt injection, secret leak, dangerous AST, and factual hallucination inspection micro-oracle for autonomous agents on Polygon, Base, and Arbitrum.
+Author-email: Security Gate Team <developer@security-gate-x402.com>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/nohosa001-pixel/security-gate-x402
+Project-URL: Repository, https://github.com/nohosa001-pixel/security-gate-x402
+Keywords: ai-agents,security,guardrails,hallucination,x402,attestation,polygon,base,arbitrum,mcp,glama,fastapi
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Topic :: Security
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: fastapi>=0.110.0
+Requires-Dist: uvicorn>=0.28.0
+Requires-Dist: pydantic>=2.6.0
+Requires-Dist: pydantic-settings>=2.2.0
+Requires-Dist: httpx>=0.27.0
+Requires-Dist: web3>=6.15.0
+Requires-Dist: eth-account>=0.11.0
+Requires-Dist: cryptography>=42.0.0
+Requires-Dist: python-dotenv>=1.0.1
+Requires-Dist: mcp>=1.0.0
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.23.0; extra == "dev"
+Dynamic: license-file
+
+# Agent Output Security & Hallucination Gate (`agent-security-gate-x402`) 🛡️⚡
+
+[![PyPI Version](https://img.shields.io/pypi/v/agent-security-gate-x402.svg?color=blue&style=for-the-badge&logo=pypi&logoColor=white)](https://pypi.org/project/agent-security-gate-x402/)
+[![Glama.ai](https://img.shields.io/badge/Glama.ai-Approved-00ffcc?style=for-the-badge&logo=anthropic&logoColor=black)](https://glama.ai/mcp/servers/nohosa001-pixel/agent-security-gate-x402)
+[![Cloud Run](https://img.shields.io/badge/Google_Cloud_Run-Live_24%2F7-4285F4?style=for-the-badge&logo=googlecloud&logoColor=white)](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/)
+[![Polygon Network](https://img.shields.io/badge/Polygon_USDC-x402_Settlement-8247E5?style=for-the-badge&logo=polygon&logoColor=white)](https://polygon.technology)
+[![FastAPI](https://img.shields.io/badge/FastAPI-0.110+-green.svg)](https://fastapi.tiangolo.com)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+> **Ultra-low latency (<10ms) deterministic security, prompt injection, secret key leak, dangerous AST code, and factual hallucination inspection micro-oracle with EIP-191 & EIP-712 cryptographic attestations on Polygon, Base, and Arbitrum.**
+
+---
+
+## 🖥️ Interactive Web Dashboard & Simulator (Live)
+
+🌐 **[https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/)**
+
+Explore the full consumer and enterprise visual interface directly in your browser:
+- 🛡️ **Prompt Injection & Jailbreak Radar**: Live testing against DAN prompts, system tag escapes, and adversarial suffixes.
+- ⚡ **Dangerous AST Code Analyzer**: Sub-millisecond Python syntax parsing detecting `os.system`, `subprocess`, `eval`, `exec`, and malicious sockets.
+- 🔍 **Hallucination & NLI Fact-Checker**: Contrast agent generation with ground truth context to surface fabricated numbers and unanchored claims.
+- 📜 **EIP-712 On-Chain Attestation & Calldata**: Instant generation of `v, r, s` ABI calldata for EVM smart contracts.
+- 📡 **Real-Time Security Event Stream**: Live WebSocket event feed of inspection audits.
+
+---
+
+## 🔗 Live Service Links & Resources
+
+| Service / Endpoint | Description | URL Link |
+|---|---|---|
+| 🖥️ **Web Dashboard** | Interactive visual UI, security simulator & audit tester | [Launch Dashboard](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/dashboard) |
+| ⚡ **API Playground** | Browser-based interactive query sandbox | [Open Playground](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/playground) |
+| 🛡️ **Live Inspection** | Core deterministic security & NLI hallucination check | [`/inspect`](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/inspect) |
+| 📜 **On-Chain Calldata** | EIP-712 smart contract attestation calldata endpoint | [`/api/v1/gate/attestation/onchain`](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/api/v1/gate/attestation/onchain) |
+| 📖 **Swagger API Docs** | Full interactive OpenAPI documentation | [View Swagger Docs](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/docs) |
+| 🤖 **LLM Agent Manifest** | Machine-readable tool specifications | [`/llms.txt`](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/llms.txt) |
+
+---
+
+## ⚡ 1-Click MCP Integration (Claude Desktop & Cursor)
+
+Connect to Claude Desktop, Cursor, Gemini, or any Model Context Protocol client instantly:
+
+```json
+{
+  "mcpServers": {
+    "security-gate-x402": {
+      "command": "uvx",
+      "args": ["agent-security-gate-x402"]
+    }
+  }
+}
+```
+
+---
+
+## 💎 Core Services & Capabilities
+
+### 1. Ultra-Low Latency Prompt & Security Radar (<5ms)
+Deterministic pattern and AST scanning neutralizing prompt injections, system tag breakouts (`</system_instruction>`), and API token / private key leakages before downstream agent propagation.
+
+### 2. Python Code AST Hazard Auditing
+In-memory Python Abstract Syntax Tree (AST) inspection isolating hazardous invocations:
+- System execution (`os.system`, `os.popen`, `subprocess.Popen`, `subprocess.run`)
+- Arbitrary code evaluation (`eval`, `exec`, `__import__`)
+- Network socket reverse shells and unencrypted exfiltration vectors.
+
+### 3. Factual Grounding & NLI Hallucination Verification
+Compares LLM text claims against trusted source documents or ledger ground truths, outputting:
+- Grounding ratio (0.0 to 1.0)
+- Explicit list of fabricated numbers and ungrounded entities.
+
+### 4. Cryptographic Proof-of-Safety & Smart Contracts
+- **EIP-191 Signatures**: Off-chain attestation receipts for agent-to-agent validation.
+- **EIP-712 Typed Data & Solidity Calldata**: Native integration with [`SecurityGateConsumer.sol`](contracts/SecurityGateConsumer.sol) on Polygon (137), Base (8453), and Arbitrum (42161).
+
+---
+
+## 📦 Quick Start & Installation
+
+### Option 1. Run Instantly with `uvx` (No Installation Required)
+
+```bash
+# Run stdio MCP server directly for LLM clients
+uvx agent-security-gate-x402
+```
+
+### Option 2. Install from PyPI
+
+```bash
+pip install agent-security-gate-x402
+
+# Run MCP server (stdio mode)
+agent-security-gate
+
+# Or launch interactive terminal tester
+python test_interactive.py
+```
+
+### Option 3. Local Development Server
+
+```bash
+git clone https://github.com/nohosa001-pixel/security-gate-x402.git
+cd security-gate-x402
+pip install -e .
+uvicorn app.main:app --port 8000 --reload
+```
+
+---
+
+## 📜 Smart Contract Integration (`SecurityGateConsumer.sol`)
+
+Autonomous on-chain agents can verify security attestations directly in Solidity:
+
+```solidity
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.20;
+
+import "./contracts/SecurityGateConsumer.sol";
+
+contract AutonomousAgentExecutor {
+    SecurityGateConsumer public immutable securityGate;
+
+    constructor(address _securityGateAddress) {
+        securityGate = SecurityGateConsumer(_securityGateAddress);
+    }
+
+    function executeGuardedAction(
+        bytes32 payloadHash,
+        uint8 riskScore,
+        string calldata verdict,
+        uint256 expiresAt,
+        uint8 v,
+        bytes32 r,
+        bytes32 s,
+        address target,
+        bytes calldata callData
+    ) external {
+        // Enforces max 10% risk score threshold and valid oracle signature
+        securityGate.verifyAndExecute(
+            payloadHash,
+            riskScore,
+            verdict,
+            expiresAt,
+            v,
+            r,
+            s,
+            target,
+            callData,
+            10 // maxRiskScore
+        );
+    }
+}
+```
+
+---
+
+## 🧪 Testing
+
+Run the full pytest suite:
+
+```bash
+pytest -v tests/
+```
+
+Launch the interactive terminal tester:
+
+```bash
+python test_interactive.py
+```
+
+---
+
+## 📢 X (Twitter) Automated Promotion & Security Alert Bot
+
+Launch the automated promotion and status broadcast bot:
+
+```bash
+# Windows 1-Click launcher
+.\x_promo_bot.bat
+
+# Or run via Python directly
+python x_promo_bot.py
+```
+
+- 🇰🇷 **Korean Thread**: Comprehensive showcase of security radars, AST parser, and Web UI.
+- 🌐 **Global Launch Thread**: High-impact English launch announcement with 1-click test links.
+- 🛡️ **Real-Time Security Bulletins**: Automated micro-oracle status and guardrail alerts.
+- 🤖 **Dual Mode**: Direct X API v2 thread chaining (`requests_oauthlib`) or instant 1-click Web Intent browser launcher.
+
+---
+
+## 📄 License
+
+MIT License &copy; 2026 Security Gate Team
+

agent_security_gate_x402-1.1.0/README.md

@@ -0,0 +1,196 @@
+# Agent Output Security & Hallucination Gate (`agent-security-gate-x402`) 🛡️⚡
+
+[![PyPI Version](https://img.shields.io/pypi/v/agent-security-gate-x402.svg?color=blue&style=for-the-badge&logo=pypi&logoColor=white)](https://pypi.org/project/agent-security-gate-x402/)
+[![Glama.ai](https://img.shields.io/badge/Glama.ai-Approved-00ffcc?style=for-the-badge&logo=anthropic&logoColor=black)](https://glama.ai/mcp/servers/nohosa001-pixel/agent-security-gate-x402)
+[![Cloud Run](https://img.shields.io/badge/Google_Cloud_Run-Live_24%2F7-4285F4?style=for-the-badge&logo=googlecloud&logoColor=white)](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/)
+[![Polygon Network](https://img.shields.io/badge/Polygon_USDC-x402_Settlement-8247E5?style=for-the-badge&logo=polygon&logoColor=white)](https://polygon.technology)
+[![FastAPI](https://img.shields.io/badge/FastAPI-0.110+-green.svg)](https://fastapi.tiangolo.com)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+> **Ultra-low latency (<10ms) deterministic security, prompt injection, secret key leak, dangerous AST code, and factual hallucination inspection micro-oracle with EIP-191 & EIP-712 cryptographic attestations on Polygon, Base, and Arbitrum.**
+
+---
+
+## 🖥️ Interactive Web Dashboard & Simulator (Live)
+
+🌐 **[https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/)**
+
+Explore the full consumer and enterprise visual interface directly in your browser:
+- 🛡️ **Prompt Injection & Jailbreak Radar**: Live testing against DAN prompts, system tag escapes, and adversarial suffixes.
+- ⚡ **Dangerous AST Code Analyzer**: Sub-millisecond Python syntax parsing detecting `os.system`, `subprocess`, `eval`, `exec`, and malicious sockets.
+- 🔍 **Hallucination & NLI Fact-Checker**: Contrast agent generation with ground truth context to surface fabricated numbers and unanchored claims.
+- 📜 **EIP-712 On-Chain Attestation & Calldata**: Instant generation of `v, r, s` ABI calldata for EVM smart contracts.
+- 📡 **Real-Time Security Event Stream**: Live WebSocket event feed of inspection audits.
+
+---
+
+## 🔗 Live Service Links & Resources
+
+| Service / Endpoint | Description | URL Link |
+|---|---|---|
+| 🖥️ **Web Dashboard** | Interactive visual UI, security simulator & audit tester | [Launch Dashboard](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/dashboard) |
+| ⚡ **API Playground** | Browser-based interactive query sandbox | [Open Playground](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/playground) |
+| 🛡️ **Live Inspection** | Core deterministic security & NLI hallucination check | [`/inspect`](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/inspect) |
+| 📜 **On-Chain Calldata** | EIP-712 smart contract attestation calldata endpoint | [`/api/v1/gate/attestation/onchain`](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/api/v1/gate/attestation/onchain) |
+| 📖 **Swagger API Docs** | Full interactive OpenAPI documentation | [View Swagger Docs](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/docs) |
+| 🤖 **LLM Agent Manifest** | Machine-readable tool specifications | [`/llms.txt`](https://agent-security-gate-x402-7qxtp3324q-du.a.run.app/llms.txt) |
+
+---
+
+## ⚡ 1-Click MCP Integration (Claude Desktop & Cursor)
+
+Connect to Claude Desktop, Cursor, Gemini, or any Model Context Protocol client instantly:
+
+```json
+{
+  "mcpServers": {
+    "security-gate-x402": {
+      "command": "uvx",
+      "args": ["agent-security-gate-x402"]
+    }
+  }
+}
+```
+
+---
+
+## 💎 Core Services & Capabilities
+
+### 1. Ultra-Low Latency Prompt & Security Radar (<5ms)
+Deterministic pattern and AST scanning neutralizing prompt injections, system tag breakouts (`</system_instruction>`), and API token / private key leakages before downstream agent propagation.
+
+### 2. Python Code AST Hazard Auditing
+In-memory Python Abstract Syntax Tree (AST) inspection isolating hazardous invocations:
+- System execution (`os.system`, `os.popen`, `subprocess.Popen`, `subprocess.run`)
+- Arbitrary code evaluation (`eval`, `exec`, `__import__`)
+- Network socket reverse shells and unencrypted exfiltration vectors.
+
+### 3. Factual Grounding & NLI Hallucination Verification
+Compares LLM text claims against trusted source documents or ledger ground truths, outputting:
+- Grounding ratio (0.0 to 1.0)
+- Explicit list of fabricated numbers and ungrounded entities.
+
+### 4. Cryptographic Proof-of-Safety & Smart Contracts
+- **EIP-191 Signatures**: Off-chain attestation receipts for agent-to-agent validation.
+- **EIP-712 Typed Data & Solidity Calldata**: Native integration with [`SecurityGateConsumer.sol`](contracts/SecurityGateConsumer.sol) on Polygon (137), Base (8453), and Arbitrum (42161).
+
+---
+
+## 📦 Quick Start & Installation
+
+### Option 1. Run Instantly with `uvx` (No Installation Required)
+
+```bash
+# Run stdio MCP server directly for LLM clients
+uvx agent-security-gate-x402
+```
+
+### Option 2. Install from PyPI
+
+```bash
+pip install agent-security-gate-x402
+
+# Run MCP server (stdio mode)
+agent-security-gate
+
+# Or launch interactive terminal tester
+python test_interactive.py
+```
+
+### Option 3. Local Development Server
+
+```bash
+git clone https://github.com/nohosa001-pixel/security-gate-x402.git
+cd security-gate-x402
+pip install -e .
+uvicorn app.main:app --port 8000 --reload
+```
+
+---
+
+## 📜 Smart Contract Integration (`SecurityGateConsumer.sol`)
+
+Autonomous on-chain agents can verify security attestations directly in Solidity:
+
+```solidity
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.20;
+
+import "./contracts/SecurityGateConsumer.sol";
+
+contract AutonomousAgentExecutor {
+    SecurityGateConsumer public immutable securityGate;
+
+    constructor(address _securityGateAddress) {
+        securityGate = SecurityGateConsumer(_securityGateAddress);
+    }
+
+    function executeGuardedAction(
+        bytes32 payloadHash,
+        uint8 riskScore,
+        string calldata verdict,
+        uint256 expiresAt,
+        uint8 v,
+        bytes32 r,
+        bytes32 s,
+        address target,
+        bytes calldata callData
+    ) external {
+        // Enforces max 10% risk score threshold and valid oracle signature
+        securityGate.verifyAndExecute(
+            payloadHash,
+            riskScore,
+            verdict,
+            expiresAt,
+            v,
+            r,
+            s,
+            target,
+            callData,
+            10 // maxRiskScore
+        );
+    }
+}
+```
+
+---
+
+## 🧪 Testing
+
+Run the full pytest suite:
+
+```bash
+pytest -v tests/
+```
+
+Launch the interactive terminal tester:
+
+```bash
+python test_interactive.py
+```
+
+---
+
+## 📢 X (Twitter) Automated Promotion & Security Alert Bot
+
+Launch the automated promotion and status broadcast bot:
+
+```bash
+# Windows 1-Click launcher
+.\x_promo_bot.bat
+
+# Or run via Python directly
+python x_promo_bot.py
+```
+
+- 🇰🇷 **Korean Thread**: Comprehensive showcase of security radars, AST parser, and Web UI.
+- 🌐 **Global Launch Thread**: High-impact English launch announcement with 1-click test links.
+- 🛡️ **Real-Time Security Bulletins**: Automated micro-oracle status and guardrail alerts.
+- 🤖 **Dual Mode**: Direct X API v2 thread chaining (`requests_oauthlib`) or instant 1-click Web Intent browser launcher.
+
+---
+
+## 📄 License
+
+MIT License &copy; 2026 Security Gate Team
+