Safety checks an agent runs before it acts: package malware, destructive command, secret leak.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Safety checks an agent runs before it acts: package malware, destructive command, secret leak.
Verify a number before an agent asserts it — evals, backtests (Deflated Sharpe), signed receipts.