BlindOracle
Trust gap
How this is scoredAre scope, spend, and authority enforced while the agent runs?
Scored from 2 evidenced field(s): runtime_governance, permission_scopes. Automated score; capped at 2 pending review.
Is there a tamper-evident record of what it actually did?
Scored from 1 evidenced field(s): audit_trail_immutable. Automated score; capped at 2 pending review.
How this gap gets closed →Are compliance obligations attached per engagement?
Scored from 2 evidenced field(s): compliance_certs, regulatory_alignment. Automated score; capped at 2 pending review.
Does payment depend on a verified result?
Scored from 1 evidenced field(s): settlement_mechanism. Automated score; capped at 2 pending review.
How this gap gets closed →Can the deployment be insured, and is the customer indemnified?
Scored from 1 evidenced field(s): insurance_carriers. Automated score; capped at 2 pending review.
How this gap gets closed →Assurance
- Insurance available
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Insurance carriers
- Payments secured by PayPal.
“Payments secured by PayPal.”
craigmbrown.com · checked Aug 1, 2026 - Coverage limits
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Indemnification
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Liability cap
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Audit trail
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Tamper-evident log
- hash-chained, and re-checkable by anyone with a key-free verifier
“hash-chained, and re-checkable by anyone with a key-free verifier”
craigmbrown.com · checked Aug 1, 2026 - Explainability
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Runtime governance
- before it grants tool access, spend authority, or a delegation chain to an agent it has never met
“before it grants tool access, spend authority, or a delegation chain to an agent it has never met”
craigmbrown.com · checked Aug 1, 2026 - Permission scopes
- HMAC-SHA256 signed delegation proofs establishing who authorized this agent, and for what scope.
“HMAC-SHA256 signed delegation proofs establishing who authorized this agent, and for what scope.”
craigmbrown.com · checked Aug 1, 2026 - Compliance certifications
- MASSAT / OWASP ASI
“MASSAT / OWASP ASI”
craigmbrown.com · checked Aug 1, 2026 - Regulatory alignment
- MASSAT / OWASP ASI
“MASSAT / OWASP ASI”
craigmbrown.com · checked Aug 1, 2026 - Outcome-based pricing
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Settlement mechanism
- x402 / USDC settlement on Base
“x402 / USDC settlement on Base”
craigmbrown.com · checked Aug 1, 2026 - Dispute process
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- SLA terms
- Growth $299 /mo For production deployments with SLA requirements
“Growth $299 /mo For production deployments with SLA requirements”
craigmbrown.com · checked Aug 1, 2026 - Evaluation coverage
- /.well-known/agent-evaluation.json — capability + fit manifest with a 4-rung verification ladder
“/.well-known/agent-evaluation.json — capability + fit manifest with a 4-rung verification ladder”
craigmbrown.com · checked Aug 1, 2026
Agency
- Autonomy level
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Human oversight
- A decision, not a status report — you approve once, then your agent handles identity, payment, content-scanning, and proof on its own.
“A decision, not a status report — you approve once, then your agent handles identity, payment, content-scanning, and proof on its own.”
craigmbrown.com · checked Aug 1, 2026 - Goal complexity
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Action space
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Operating environment
- Your agent checks an ERC-8004 passport + a settlement track record → pays in USDC over x402 → gets a signed trust envelope and a proof an outsider can re-check.
“Your agent checks an ERC-8004 passport + a settlement track record → pays in USDC over x402 → gets a signed trust envelope and a proof an outsider can re-check.”
craigmbrown.com · checked Aug 1, 2026 - Initiative
- you approve once, then your agent handles identity, payment, content-scanning, and proof on its own.
“you approve once, then your agent handles identity, payment, content-scanning, and proof on its own.”
craigmbrown.com · checked Aug 1, 2026
Safety
- Safety evaluations
- MASSAT security audits against the OWASP ASI Top 10 for Agentic Applications
“MASSAT security audits against the OWASP ASI Top 10 for Agentic Applications”
craigmbrown.com · checked Aug 1, 2026 - Red teaming
- MASSAT security audits against the OWASP ASI Top 10 for Agentic Applications — prompt-injection resilience, credential handling, delegation forgery
“MASSAT security audits against the OWASP ASI Top 10 for Agentic Applications — prompt-injection resilience, credential handling, delegation forgery”
craigmbrown.com · checked Aug 1, 2026 - Safety policy
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Usage restrictions
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Model or system card
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Incident reporting
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Third-party evaluations
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Data handling
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
Practicality
- Pricing model
- Pay Per Call or Subscribe Monthly
“Pay Per Call or Subscribe Monthly”
craigmbrown.com · checked Aug 1, 2026 - Price point
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Availability
- Get Early Access Join the waitlist for free Explorer tier access.
“Get Early Access Join the waitlist for free Explorer tier access.”
craigmbrown.com · checked Aug 1, 2026 - Deployment options
- Enterprise contracts for white-label deployment and dedicated engineering support.
“Enterprise contracts for white-label deployment and dedicated engineering support.”
craigmbrown.com · checked Aug 1, 2026 - Integrations
- Connect via MCP or REST API
“Connect via MCP or REST API”
craigmbrown.com · checked Aug 1, 2026 - Supported regions
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Support model
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
Foundation models
- Base models
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Model provider
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Model swappable
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Open weights
- Apache-2.0
“Apache-2.0”
craigmbrown.com · checked Aug 1, 2026 - Fine-tuning
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- Context window
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
Ecosystem
- Protocols supported
- Connect via MCP or REST API
“Connect via MCP or REST API”
craigmbrown.com · checked Aug 1, 2026 - Tool use
- before it grants tool access, spend authority, or a delegation chain to an agent it has never met
“before it grants tool access, spend authority, or a delegation chain to an agent it has never met”
craigmbrown.com · checked Aug 1, 2026 - Multi-agent
- 30 agents paid each other on-chain
“30 agents paid each other on-chain”
craigmbrown.com · checked Aug 1, 2026 - API access
- Get Free API Key
“Get Free API Key”
craigmbrown.com · checked Aug 1, 2026 - Open source
- Apache-2.0
“Apache-2.0”
craigmbrown.com · checked Aug 1, 2026 - Marketplace presence
- Indexed across 13+ agent directories, MCP registries, open-source lists, and skill marketplaces
“Indexed across 13+ agent directories, MCP registries, open-source lists, and skill marketplaces”
craigmbrown.com · checked Aug 1, 2026
Impact
- User base
- 30 agents paid each other on-chain
“30 agents paid each other on-chain”
craigmbrown.com · checked Aug 1, 2026 - Deployment scale
- Indexed across 13+ agent directories, MCP registries, open-source lists, and skill marketplaces
“Indexed across 13+ agent directories, MCP registries, open-source lists, and skill marketplaces”
craigmbrown.com · checked Aug 1, 2026 - Target sectors
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this
- High-risk domains
- MASSAT security audits against the OWASP ASI Top 10 for Agentic Applications — prompt-injection resilience, credential handling, delegation forgery
“MASSAT security audits against the OWASP ASI Top 10 for Agentic Applications — prompt-injection resilience, credential handling, delegation forgery”
craigmbrown.com · checked Aug 1, 2026 - Documented incidents
- no public informationcraigmbrown.com · checked Aug 1, 2026 · source did not state this