{
 "generated_at": "2026-10-30T03:33:33+00:00",
 "method": "Measured grade for every KEYSTONE-family product. Every point comes from a check run by this script against the\nlive gateway; nothing is typed in. The language-model step of a product (Claude fixing or hardening) is NOT run\nhere: each scenario uses the product's deterministic detector, its signed ledger and its verifier.\n\n  R1  Live scenario   40  the product's own flow runs end to end on the live gateway: the detector must flag the\n                          planted defect AND pass a clean input, the newest signed record must verify, and the\n                          product's expected refusals must happen (e.g. a replayed credential is refused): 40 when every call answers as expected; 30 when the product\n                          answers but one call refuses unexpectedly (4xx); 0 when a call fails, answers 5xx or a\n                          check on the reply fails (e.g. a record that does not verify).\n  R2  Robustness      30  each JSON-body operation gets \"not json\", a JSON array and {} (when the body has required\n                          fields): each must answer 4xx. Then a schema-valid but empty body (\"\" / {} / [] / 0 in each\n                          required field) must answer below 500. Operations that call a language model or another\n                          site get only the malformed probes. Share of probes that held, times 30.\n  R3  Contract        10  every operation that declares a request body declares a typed schema.\n  R4  Latency         10  scenario wall time: 10 at <=1.5 s, 5 at <=5 s, else 0.\n  R5  Tests in repo   10  test files exist for the product (counted, NOT run here: run them with pytest).\n  R6  Offline proof   20  the product's auditor bundle, downloaded live, verifies with its own embedded standalone\n                          verifier (no CAIN code, run in a separate python -I) against the key pinned from the live\n                          /public-key route. FLIGHT RECORDER has no bundle: the seal record its scenario wrote to the\n                          ledger is re-verified offline with the same family verifier instead.\nA check that cannot run for a product is left out: score = points got / points measured.\n\nGrades: A+ >=97, A >=93, A- >=90, B+ >=87, B >=83, B- >=80, C >=70, D >=60, else F.",
 "products": 17,
 "mean_score": 100.0,
 "distribution": {
  "A+": 17
 },
 "results": [
  {
   "slug": "keystone",
   "title": "KEYSTONE (FALSEWORK + Claude, proved fixes)",
   "anchor": "keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /keystone/samples",
     "status": 200,
     "ms": 15
    },
    {
     "call": "POST /keystone/scan",
     "status": 200,
     "ms": 38
    },
    {
     "call": "POST /keystone/scan-source",
     "status": 200,
     "ms": 24
    },
    {
     "call": "GET /keystone/runs/latest",
     "status": 200,
     "ms": 10
    },
    {
     "call": "GET /keystone/verify/ks-20261015T125333Z-d254b956",
     "status": 200,
     "ms": 11
    },
    {
     "call": "GET /keystone/ledger/verify",
     "status": 200,
     "ms": 14
    }
   ],
   "wall_s": 0.11,
   "robustness": {
    "probes": 18,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 3,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/keystone/bundle (8 records)",
    "key_from": "/keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "mcpgate-keystone",
   "title": "MCPGate KEYSTONE",
   "anchor": "mcpgate-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /mcpgate-keystone/samples",
     "status": 200,
     "ms": 10
    },
    {
     "call": "POST /mcpgate-keystone/scan",
     "status": 200,
     "ms": 24
    },
    {
     "call": "POST /mcpgate-keystone/scan-source",
     "status": 200,
     "ms": 24
    },
    {
     "call": "GET /mcpgate-keystone/runs/latest",
     "status": 200,
     "ms": 13
    },
    {
     "call": "GET /mcpgate-keystone/verify/mk-20261015T125831Z-b5e45334",
     "status": 200,
     "ms": 15
    },
    {
     "call": "GET /mcpgate-keystone/ledger/verify",
     "status": 200,
     "ms": 16
    }
   ],
   "wall_s": 0.1,
   "robustness": {
    "probes": 18,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 3,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/mcpgate-keystone/bundle (2 records)",
    "key_from": "/mcpgate-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "vericoding-keystone",
   "title": "VeriCoding KEYSTONE (Z3)",
   "anchor": "vericoding-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /vericoding-keystone/samples",
     "status": 200,
     "ms": 20
    },
    {
     "call": "POST /vericoding-keystone/check",
     "status": 200,
     "ms": 338
    },
    {
     "call": "POST /vericoding-keystone/check-source",
     "status": 200,
     "ms": 33
    },
    {
     "call": "GET /vericoding-keystone/runs/latest",
     "status": 200,
     "ms": 11
    },
    {
     "call": "GET /vericoding-keystone/verify/vc-20261015T130103Z-296650b3",
     "status": 200,
     "ms": 14
    },
    {
     "call": "GET /vericoding-keystone/ledger/verify",
     "status": 200,
     "ms": 12
    }
   ],
   "wall_s": 0.43,
   "robustness": {
    "probes": 22,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 2,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/vericoding-keystone/bundle (2 records)",
    "key_from": "/vericoding-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "codeguard-keystone",
   "title": "CODEGUARD (coding-agent action gate)",
   "anchor": "codeguard-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "POST /codeguard-keystone/scan",
     "status": 200,
     "ms": 14
    },
    {
     "call": "POST /codeguard-keystone/verify-receipt",
     "status": 200,
     "ms": 13
    },
    {
     "call": "POST /codeguard-keystone/check",
     "status": 200,
     "ms": 13
    },
    {
     "call": "GET /codeguard-keystone/runs/latest",
     "status": 200,
     "ms": 11
    },
    {
     "call": "GET /codeguard-keystone/verify/cg-9dd02bfa92754cdd",
     "status": 200,
     "ms": 12
    }
   ],
   "wall_s": 0.06,
   "robustness": {
    "probes": 12,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/codeguard-keystone/bundle (1 records)",
    "key_from": "/codeguard-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "keystone-ci",
   "title": "KEYSTONE CI (pull-request gate)",
   "anchor": "keystone-ci",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "POST /keystone-ci/scan",
     "status": 200,
     "ms": 15
    },
    {
     "call": "POST /keystone-ci/verify",
     "status": 200,
     "ms": 12
    },
    {
     "call": "POST /keystone-ci/check",
     "status": 200,
     "ms": 47
    },
    {
     "call": "GET /keystone-ci/verify/kci-db8ef8fb92c44c81",
     "status": 200,
     "ms": 28
    },
    {
     "call": "GET /keystone-ci/badge/kci-db8ef8fb92c44c81.svg",
     "status": 200,
     "ms": 28
    }
   ],
   "wall_s": 0.13,
   "robustness": {
    "probes": 15,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/keystone-ci/bundle (200 records)",
    "key_from": "/keystone-ci/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "broker-keystone",
   "title": "BROKER (action credentials)",
   "anchor": "broker-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /broker-keystone/samples",
     "status": 200,
     "ms": 11
    },
    {
     "call": "POST /broker-keystone/mint",
     "status": 200,
     "ms": 33
    },
    {
     "call": "POST /broker-keystone/introspect",
     "status": 200,
     "ms": 13
    },
    {
     "call": "GET /broker-keystone/demo-api/orders/A-1042",
     "status": 200,
     "ms": 19
    },
    {
     "call": "GET /broker-keystone/demo-api/orders/A-1042",
     "status": 403,
     "ms": 14,
     "expected": [
      403
     ],
     "why": "a used credential must be refused (single use)"
    },
    {
     "call": "GET /broker-keystone/demo-api/customers/C-77",
     "status": 401,
     "ms": 9,
     "expected": [
      401
     ],
     "why": "no credential, no call"
    },
    {
     "call": "GET /broker-keystone/issuance/latest",
     "status": 200,
     "ms": 19
    }
   ],
   "wall_s": 0.12,
   "robustness": {
    "probes": 12,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/broker-keystone/bundle (323 records)",
    "key_from": "/keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "approval-keystone",
   "title": "APPROVAL (action-bound human approval)",
   "anchor": "approval-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "POST /approval-keystone/request",
     "status": 200,
     "ms": 39
    },
    {
     "call": "POST /approval-keystone/vote",
     "status": 200,
     "ms": 36
    },
    {
     "call": "POST /approval-keystone/vote",
     "status": 409,
     "ms": 23,
     "expected": [
      400,
      403,
      409
     ],
     "why": "the same approver cannot vote twice"
    },
    {
     "call": "POST /approval-keystone/vote",
     "status": 200,
     "ms": 32
    },
    {
     "call": "GET /approval-keystone/requests/apr_yZzL8GqxDfxCR_7k",
     "status": 200,
     "ms": 12
    },
    {
     "call": "GET /approval-keystone/ledger/latest",
     "status": 200,
     "ms": 20
    },
    {
     "call": "GET /approval-keystone/ledger/verify/apr_yZzL8GqxDfxCR_7k:APPROVED:2",
     "status": 200,
     "ms": 20
    }
   ],
   "wall_s": 0.18,
   "robustness": {
    "probes": 8,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/approval-keystone/bundle (378 records)",
    "key_from": "/keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "governor-keystone",
   "title": "SPEND GOVERNOR (runaway agent spend)",
   "anchor": "governor-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "POST /governor-keystone/session",
     "status": 200,
     "ms": 66
    },
    {
     "call": "POST /governor-keystone/charge",
     "status": 200,
     "ms": 27
    },
    {
     "call": "POST /governor-keystone/charge",
     "status": 200,
     "ms": 29
    },
    {
     "call": "POST /governor-keystone/charge",
     "status": 200,
     "ms": 32
    },
    {
     "call": "GET /governor-keystone/status/demo_p1fNy9YuVM5IQMlCYqdmVw",
     "status": 200,
     "ms": 12
    },
    {
     "call": "POST /governor-keystone/reset",
     "status": 200,
     "ms": 32
    },
    {
     "call": "GET /governor-keystone/ledger/latest",
     "status": 200,
     "ms": 26
    }
   ],
   "wall_s": 0.22,
   "robustness": {
    "probes": 12,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/governor-keystone/bundle (500 records)",
    "key_from": "/keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "recorder-keystone",
   "title": "FLIGHT RECORDER (signed agent run records)",
   "anchor": "recorder-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "POST /recorder-keystone/recordings",
     "status": 200,
     "ms": 59
    },
    {
     "call": "POST /recorder-keystone/recordings/rec_BGMI8LaJd1rLzslE/events",
     "status": 200,
     "ms": 47
    },
    {
     "call": "POST /recorder-keystone/recordings/rec_BGMI8LaJd1rLzslE/events",
     "status": 200,
     "ms": 37
    },
    {
     "call": "POST /recorder-keystone/recordings/rec_BGMI8LaJd1rLzslE/seal",
     "status": 200,
     "ms": 21
    },
    {
     "call": "GET /recorder-keystone/recordings/rec_BGMI8LaJd1rLzslE/verify",
     "status": 200,
     "ms": 27
    },
    {
     "call": "GET /recorder-keystone/recordings/rec_BGMI8LaJd1rLzslE/proof/1",
     "status": 200,
     "ms": 16
    },
    {
     "call": "POST /recorder-keystone/verify-inclusion",
     "status": 200,
     "ms": 16
    },
    {
     "call": "GET /recorder-keystone/ledger/latest",
     "status": 200,
     "ms": 34
    }
   ],
   "wall_s": 0.26,
   "robustness": {
    "probes": 20,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "this run's seal record (/recorder-keystone/ledger/latest) + keystone/family_verify.py",
    "key_from": "/recorder-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "agent-ci-keystone",
   "title": "AGENT-CI (release gate for AI agents)",
   "anchor": "agentci-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /agent-ci-keystone/samples",
     "status": 200,
     "ms": 25
    },
    {
     "call": "POST /agent-ci-keystone/attest",
     "status": 200,
     "ms": 277
    },
    {
     "call": "GET /agent-ci-keystone/records/aci-0572bcd7a7054557",
     "status": 200,
     "ms": 23
    },
    {
     "call": "POST /agent-ci-keystone/verify",
     "status": 200,
     "ms": 30
    },
    {
     "call": "POST /agent-ci-keystone/check",
     "status": 200,
     "ms": 37
    },
    {
     "call": "POST /agent-ci-keystone/check",
     "status": 422,
     "ms": 30,
     "expected": [
      422
     ],
     "why": "an empty suite is refused, never graded"
    }
   ],
   "wall_s": 0.42,
   "robustness": {
    "probes": 12,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/agent-ci-keystone/bundle/aci-0572bcd7a7054557 + its agentci_verify.py (re-derives the verdict)",
    "key_from": "/agent-ci-keystone/public-key",
    "verifier_said": "RESULT: ALL VERDICTS RE-DERIVED AND VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "redteam-keystone",
   "title": "REDTEAM (attack and patch agent tool policies)",
   "anchor": "redteam-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /redteam-keystone/samples",
     "status": 200,
     "ms": 33
    },
    {
     "call": "POST /redteam-keystone/attest",
     "status": 200,
     "ms": 449
    },
    {
     "call": "GET /redteam-keystone/records/rtk-434bfb5143a84b78",
     "status": 200,
     "ms": 35
    },
    {
     "call": "POST /redteam-keystone/verify",
     "status": 200,
     "ms": 82
    },
    {
     "call": "POST /redteam-keystone/check",
     "status": 200,
     "ms": 37
    },
    {
     "call": "POST /redteam-keystone/check",
     "status": 422,
     "ms": 36,
     "expected": [
      422
     ],
     "why": "a policy with no rules is refused, never attacked"
    }
   ],
   "wall_s": 0.67,
   "robustness": {
    "probes": 16,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/redteam-keystone/bundle/rtk-434bfb5143a84b78 + its redteam_verify.py (re-derives the verdict)",
    "key_from": "/redteam-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS RE-DERIVED AND VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "openclaw-keystone",
   "title": "OpenClaw KEYSTONE (skill auditing)",
   "anchor": "openclaw-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /openclaw-keystone/samples",
     "status": 200,
     "ms": 17
    },
    {
     "call": "POST /openclaw-keystone/scan",
     "status": 200,
     "ms": 20
    },
    {
     "call": "POST /openclaw-keystone/scan-skill",
     "status": 200,
     "ms": 17
    },
    {
     "call": "GET /openclaw-keystone/runs/latest",
     "status": 200,
     "ms": 11
    },
    {
     "call": "GET /openclaw-keystone/verify/ok-4fad84a027ea4724",
     "status": 200,
     "ms": 12
    }
   ],
   "wall_s": 0.08,
   "robustness": {
    "probes": 8,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 2,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/openclaw-keystone/bundle (1 records)",
    "key_from": "/openclaw-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "swarm-keystone",
   "title": "SWARM KEYSTONE (delegation and collusion)",
   "anchor": "swarm-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /swarm-keystone/samples",
     "status": 200,
     "ms": 9
    },
    {
     "call": "POST /swarm-keystone/scan",
     "status": 200,
     "ms": 12
    },
    {
     "call": "POST /swarm-keystone/scan-swarm",
     "status": 200,
     "ms": 15
    },
    {
     "call": "GET /swarm-keystone/runs/latest",
     "status": 200,
     "ms": 10
    },
    {
     "call": "GET /swarm-keystone/verify/sk-8fd2b162e5cd4194",
     "status": 200,
     "ms": 9
    }
   ],
   "wall_s": 0.06,
   "robustness": {
    "probes": 8,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/swarm-keystone/bundle (1 records)",
    "key_from": "/swarm-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "vibeguard-keystone",
   "title": "VIBEGUARD KEYSTONE (AI code diffs)",
   "anchor": "vibeguard-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /vibeguard-keystone/samples",
     "status": 200,
     "ms": 11
    },
    {
     "call": "POST /vibeguard-keystone/scan",
     "status": 200,
     "ms": 14
    },
    {
     "call": "POST /vibeguard-keystone/scan-code",
     "status": 200,
     "ms": 13
    },
    {
     "call": "GET /vibeguard-keystone/runs/latest",
     "status": 200,
     "ms": 44
    },
    {
     "call": "GET /vibeguard-keystone/verify/vg-252da2db4ee84549",
     "status": 200,
     "ms": 11
    }
   ],
   "wall_s": 0.09,
   "robustness": {
    "probes": 8,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/vibeguard-keystone/bundle (1 records)",
    "key_from": "/vibeguard-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "memguard-keystone",
   "title": "MEMGUARD KEYSTONE (agent memory)",
   "anchor": "memguard-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /memguard-keystone/samples",
     "status": 200,
     "ms": 10
    },
    {
     "call": "POST /memguard-keystone/scan",
     "status": 200,
     "ms": 32
    },
    {
     "call": "POST /memguard-keystone/scan-memory",
     "status": 200,
     "ms": 13
    },
    {
     "call": "GET /memguard-keystone/runs/latest",
     "status": 200,
     "ms": 12
    },
    {
     "call": "GET /memguard-keystone/verify/mg-06c6c18830384e34",
     "status": 200,
     "ms": 12
    }
   ],
   "wall_s": 0.08,
   "robustness": {
    "probes": 8,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/memguard-keystone/bundle (1 records)",
    "key_from": "/memguard-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "surfguard-keystone",
   "title": "SURFGUARD KEYSTONE (browser agents)",
   "anchor": "surfguard-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /surfguard-keystone/samples",
     "status": 200,
     "ms": 12
    },
    {
     "call": "POST /surfguard-keystone/scan",
     "status": 200,
     "ms": 17
    },
    {
     "call": "POST /surfguard-keystone/scan-plan",
     "status": 200,
     "ms": 16
    },
    {
     "call": "GET /surfguard-keystone/runs/latest",
     "status": 200,
     "ms": 16
    },
    {
     "call": "GET /surfguard-keystone/verify/sg-7712260d2ad04a7b",
     "status": 200,
     "ms": 14
    }
   ],
   "wall_s": 0.08,
   "robustness": {
    "probes": 8,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 1,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/surfguard-keystone/bundle (1 records)",
    "key_from": "/surfguard-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  },
  {
   "slug": "actuary-keystone",
   "title": "ACTUARY KEYSTONE (fleet risk score)",
   "anchor": "actuary-keystone",
   "score": 100.0,
   "grade": "A+",
   "points": {
    "live": 40,
    "robustness": 30.0,
    "contract": 10,
    "latency": 10,
    "tests_in_repo": 10,
    "offline_proof": 20
   },
   "points_measured_of": 120,
   "live_status": "ok",
   "steps": [
    {
     "call": "GET /actuary-keystone/samples",
     "status": 200,
     "ms": 9
    },
    {
     "call": "POST /actuary-keystone/scan",
     "status": 200,
     "ms": 13
    },
    {
     "call": "POST /actuary-keystone/prove",
     "status": 200,
     "ms": 26
    },
    {
     "call": "GET /actuary-keystone/runs/latest",
     "status": 200,
     "ms": 21
    },
    {
     "call": "GET /actuary-keystone/verify/ak-4390ad86668043b5",
     "status": 200,
     "ms": 14
    }
   ],
   "wall_s": 0.08,
   "robustness": {
    "probes": 16,
    "crashes": []
   },
   "contract": {
    "served": true,
    "untyped": []
   },
   "test_files": 2,
   "offline_proof": {
    "measured": true,
    "valid": true,
    "source": "/actuary-keystone/bundle (34 records)",
    "key_from": "/actuary-keystone/public-key",
    "verifier_said": "RESULT: ALL RECORDS VALID"
   },
   "language_model": "not exercised (deterministic path graded)"
  }
 ]
}