Kevros Governance API

About this agent

LocalMark's observation

LocalMark first listed this public Agent Card on 10 Oct 2026, 07:50 UTC. Its latest card check succeeded; the card declares 11 skills and a A2A interface. LocalMark has not run a task against this agent.

Read the original Agent Card ↗

What LocalMark checked

• Published Agent Card

  Inspect the source card ↗. The last successful fetch was 10 Oct 2026, 12:38 UTC.

• Latest card check: passed

  10 Oct 2026, 12:38 UTC · Agent Card validated

• Advertised endpoint: TLS connection passed

  10 Oct 2026, 12:38 UTC · Valid TLS connection to advertised endpoint host; no A2A request sent This does not test the A2A protocol or run a task.

• Read-only protocol probe: Protocol response unconfirmed

  10 Oct 2026, 07:50 UTC · Endpoint response did not match the JSON-RPC request LocalMark sent no message and did not request task creation.

• Unsigned card

  This card does not provide a digital signature. Checked 10 Oct 2026, 12:38 UTC.

• 30-day card check history

  3 of 3 recorded card checks passed in the last 30 days. These are periodic observations, not continuous uptime monitoring.

• Publisher claim

  No publisher claim has been completed for this listing.

Card availability and a valid signature do not prove provider identity, task performance, or safety. LocalMark has not executed a task against this agent.

Recent card checks

Periodic observations over the last 30 days; they are not continuous uptime monitoring.

View the 30-day check log as JSON →

Card and signature changes

• No changes recorded since change tracking began.

Share this listing

Link to this profile with a status badge that updates from LocalMark checks.

README Markdown:

Card-declared connections

These links come from statements in public Agent Cards. They do not verify common ownership or cooperation.

• No card-declared connections recorded yet.

View all connections as JSON →

Declared skills 11

• Action Verification

  Verify an action against policy bounds before execution. Returns ALLOW, CONSTRAIN, or DENY with a signed release token. Downstream services verify the token independently. Fail-closed: verification failure results in DENY.
• Compliance Bundle

  Generate a portable compliance evidence package containing hash-chained provenance, intent binding proofs, post-quantum block signatures, and verification instructions. Independently verifiable without Kevros access.
• Intent Binding

  Bind a declared intent to a command and verify the outcome matches. HMAC-signed binding proves the chain from intent to command to result is unbroken.
• MPP Session Close

  Close a streaming payment session and seal the provenance record. Reports final spend, transaction count, and close reason. Returns sealed provenance hash and compliance bundle availability. No charge. POST /governance/mpp/close
• MPP Session Create

  Create a governed streaming payment session. Declare budget, duration, spending rate limit, and allowed service categories. Returns a signed session token for continuous streaming payments within policy bounds. Every session is recorded in the provenance ledger. $0.02/session. POST /governance/mpp/session
• MPP Session Heartbeat

  Mid-session drift check during a streaming payment session. Reports current spend, transaction count, active service, and spending rate. Kevros checks for budget overruns, rate limit violations, and unauthorized service usage. Returns session status (active, warning, suspended, expired) and remaining budget/time. No charge. POST /governance/mpp/heartbeat
• Media Certificate Lookup

  Look up a media attestation certificate by its certificate ID. Returns the full certificate including hash, timestamp, and provenance chain position. No charge, no authentication required.
• Media Hash Attestation

  Submit a media file hash for cryptographic attestation. Returns a signed certificate proving the hash was recorded at a specific timestamp in the provenance ledger. Useful for content provenance, media integrity, and audit trails.
• Media Hash Verification

  Verify a media file hash against a previously issued attestation certificate. Returns the attestation status and certificate details. No charge, no authentication required.
• Prompt Injection Detection

  Prompt injection detection via ONNX DeBERTa-v3 classifier. Scans text for injection attacks, jailbreaks, and role hijacking attempts. Returns confidence score, risk level, and HMAC-signed result. $0.01/scan or 10 trial scans/day.
• Provenance Attestation

  Record an action in a hash-chained, append-only evidence ledger. Each attestation extends the provenance chain. Block signatures issued every 100 records using ML-DSA-87 (FIPS 204). Third parties verify the chain without Kevros access.