Mago is the public trust infrastructure for AI agent tools. Verify Ed25519 manifests, track reputation via Merkle transparency logs, and enforce runtime limits with Agent Behavioral Checksums (ABC).
pip install pki-skills
$ pki-skills verify --manifest manifest.json --skill SKILL.md
[✔] Signature: ed25519 valid (Author: Alice)
[✔] SHA-256 Digest Match: e3b0c44298fc...
[✔] SKILLS_CHECKSUM_V1 Score: 0.95
[✔] ABC_HYBRID_V1 Execution Trace Verified
[!] Author Trust Score: 0.85 (Threshold: 0.70)
SUCCESS: Skill authenticated & safe for agent runtime.
Heavy sandbox evaluation occurs in isolated microVMs at the registry layer. Lightweight verification runs instantly on client agents.
Generates Ed25519 keypair, signs skill manifests locally with SHA-256 digests, and submits artifacts to the Mago registry.
Executes 100 canonical prompts inside Firecracker/gVisor microVMs. Computes Agent Behavioral Checksums (ABC) and writes to Merkle log.
Verifies signatures and trust scores in milliseconds (`ms`). Enforces ABC trace bounds during runtime to block prompt injections.
Traditional cryptographic signatures fail against Deep-Deceptive Intent-Preserving Exploits (DDIPE) where a structurally benign skill tricks an agent into unauthorized actions.
| Attack Vector | Layer 1 (Semantic Checksum) | Layer 2 (PKI Signature) | Layer 3 (Mago ABC) |
|---|---|---|---|
| Intent-content mismatch | ✅ Mitigated | ❌ Failed | ❌ Failed |
| Tampering after publication | ❌ Failed | ✅ Mitigated | ❌ Failed |
| DDIPE (Deceptive Author) | ❌ Failed | ❌ Failed | ✅ Closed by Mago ABC |
| Agent-specific behavioral exploit | ❌ Failed | ❌ Failed | ✅ Closed by Mago ABC |
Moving beyond promotional whitepapers, Mago adopts a rigorous, reproducible approach to evaluating Agent Behavioral Checksums. We separate the normative methodology (the Protocol) from the empirical results (the Report). All finalized documents, datasets, and signed evidence bundles will be hosted on our dedicated, version-controlled repository at papers.magofoundation.dev.
A versioned, reviewable specification instructing independent evaluators on how to reproduce a study.
The empirical record stating exactly what happened during an evaluation, including failures, false-positives, and statistical uncertainty.
Test verification constraints against live manifest attributes in real-time.
{
"manifest_version": "1.0",
"skill": { "name": "web-search-agent", "version": "1.0.0" },
"abc_status": "ABC_HYBRID_V1_PASS",
"verification_ms": 1.2
}