cwn-trust-gate
Post-quantum, tamper-evident receipts for consequential agent actions.
Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeCan modify data
What it can do
- Mint Receipt For Record Change: Mint a post-quantum receipt for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom).
- Audit My Agent Inventory: Rank a CALLER-PROVIDED list of MCP tools by worst-regret if they act, with a signed receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pa
- Mint Action Receipt: Mint a post-quantum receipt for an arbitrary consequential agent action.
What data it sees
Do you need an account
No: the server works without sign-in
Post-quantum, tamper-evident receipts for consequential agent actions. Four tools — mint_action_receipt, mint_receipt_for_record_change, verify_receipt, audit_my_agent_inventory — every receipt signed Ed25519 + ML-DSA-65, verifiable offline from the certificate alone. Hardened against signature-stripping downgrades.
No receipt. No trust. Built on the open-source OpenAgentOntology primitive.
Server tool list (4)
Raw names from tools/list. Only developers need these.
| mint_receipt_for_record_change | Mint a post-quantum receipt for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom). |
| audit_my_agent_inventory | Rank a CALLER-PROVIDED list of MCP tools by worst-regret if they act, with a signed receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pass it in. |
| mint_action_receipt | Mint a post-quantum receipt for an arbitrary consequential agent action. |
| verify_receipt | Verify a Trust Gate receipt from the certificate alone (offline). require_pq=True (default via OAO_REQUIRE_PQ) FAILS if the ML-DSA-65 or SLH-DSA legs are missing -- defends against signature-stripping downgrade attacks. |