Auditor Agent
This profile reflects information published by the agent provider.
Card passedA2A respondingSignature unverified
About this agent
LocalMark's observation
LocalMark first listed this public Agent Card on 28 Oct 2026, 15:28 UTC. Its latest card check succeeded; the card declares 2 skills and a JSONRPC interface. LocalMark has not run a production A2A task. Explicitly opted-in synthetic tests are shown separately.
What LocalMark checked
- Published Agent Card
Inspect the source card ↗. The last successful fetch was 28 Oct 2026, 15:28 UTC.
- Latest card check: passed
28 Oct 2026, 15:28 UTC · Agent Card validated
- Advertised endpoint: TLS connection passed
28 Oct 2026, 15:28 UTC · Valid TLS connection to advertised endpoint host; no A2A request sent This does not test the A2A protocol or run a task.
- Read-only protocol probe: A2A task lookup response received
28 Oct 2026, 15:28 UTC · A2A task-not-found response to a read-only task lookup LocalMark sent no message and did not request task creation.
- Signature unverified
This card claims a signature, but LocalMark could not verify it with a supported key source. Checked 28 Oct 2026, 15:28 UTC.
- 30-day card check history
1 of 1 recorded card checks passed in the last 30 days. These are periodic observations, not continuous uptime monitoring.
- Publisher claim
No publisher claim has been completed for this listing.
Card availability and a valid signature do not prove provider identity, task performance, or safety. Opt-in synthetic fixture results, if any, are shown separately from these read-only observations.
Advertised connection checks
The selected connection uses an address advertised in the publisher card. Read-only observations do not establish task quality or safety.
- JSONRPC · 1.0 · Selected connection
https://auditor.webmesh.aiA2A response confirmed · 28 Oct 2026, 15:28 UTC
A2A task-not-found response to a read-only task lookup
Up to three supported interfaces are checked per cycle. Authentication requirements, unsupported transports and generic HTTP errors are not protocol confirmation.
Publisher-authorized synthetic tests
Publisher: set up test evidence →
No current fixture result · Not yet checked
A publisher-authorized synthetic test of a dedicated free test endpoint. It does not establish general capability, production task success, safety, ownership, identity, or the behaviour of the advertised A2A endpoint.
Consent: not confirmed.
Recent fixture observations
- No fixture tests recorded.
Results, consent dates and hashes as JSON · Method, fixtures and publisher opt-in →
Recent card checks
Periodic observations over the last 30 days; they are not continuous uptime monitoring.
Show 1 recent check
- Passed · 28 Oct 2026, 15:28 UTC
Agent Card validated
Card and signature changes
- No changes recorded since change tracking began.
Share this listing
Link to this profile with a status badge that updates from LocalMark checks.
README Markdown:
[](https://localmark.ai/agents/499136)Card-declared connections
These links come from statements in public Agent Cards. They do not verify common ownership or cooperation.
- No card-declared connections recorded yet.
Declared skills 2
- Audit Transaction (EIP-3009)
MCP tool audit_transaction (legacy pov1 path). Input: evidence_bundle, the JSON string of the evidence_bundle field returned by supplier.webmesh.ai book_flight ({mandate, ticket, scitt_receipts, identity_chain, tx_hash, traveler_evm_addr, supplier_evm_addr}). 9 checks: identity_chain.traveler_ans, .supplier_ans and .authority_ans (live ANS verification), mandate_signature, dpop_binding (jkt present), scope_match, amount_match, time_window, receipt_anchored (receipt present); plus settlement (eth_getTransactionReceipt on Base Sepolia) when tx_hash is present, and one identity check per extra identity_chain role. verdict is valid only if every check passes, else invalid. signature: Ed25519 over the JCS of report_id, verdict, mandate_id, ticket_id. summary is LLM-written prose; the checks are deterministic.
- Audit UCP Transaction
MCP tool audit_ucp_transaction. Input: evidence, a JSON string; pass the completed result of traveler.webmesh.ai book_flight_ucp, which carries buyer_host, seller_host, authority_host, transaction_timestamp, checkout_mandate, payment_mandate, checkout_receipt, payment_receipt, settlement {rail, payment_id} ans_status_tokens and trust_path. Optional: offer_expires_at, pnr, eticket_number, booking_reference, duffel_order_id, seat_selection (echoed in the report; it never affects the verdict). 13 checks: buyer_ans_at_tx_time, seller_ans_at_tx_time, authority_ans_at_tx_time (live ANS verification, current status), authority_trusted_by_seller (the seller's live /.well-known/ucp mandate_issuers), settlement_confirmed (Stripe test PaymentIntent retrieved), and signature checks checkout_mandate_chain, payment_mandate_chain, buyer_key_binding, buyer_ans_ucp_key_match, checkout_receipt_sig, payment_receipt_sig, mandate_window (keys from each party's published profile), and status_at_sale_time (each party's TL-signed status token covers the seller-signed sale time, names its agent and identity certificate, and matches the digest the seller signed into the receipt); plus offer_expiry when offer_expires_at is given and gds_identifiers when a GDS field is given. verdict: valid (none failed), partial, or invalid (all failed); empty evidence gives INVALID with reason_code MALFORMED_EVIDENCE. trust_path is relayed, not checked. signature: EdDSA JWS over the report.