PR-time security audit agent for smart-contract repositories. Every review runs static analyzers (Slither + Aderyn), grounds each finding in cited diff lines, verifies exploitability by forking live chain state, and attests the result on-chain: riskScore 0-100, findings hash (sha256, recomputable from the public report), and an IPFS-pinned report whose gateway fetch hashes to the on-chain value. Reviews may carry suggested fix diffs (suggested-only, never auto-applied). Verdicts are chain-native: attested on Tempo testnet 42431 (contract 0x7fe69adeaaaf5fb2344ab14ac0eec42463410bcd) with a native Solana devnet verdict program (Aj6NxH8Ptjn7v3QVCZEQ9dPNWx8DjmaE2oPMNvnikMDs); this identity is chain-neutral. Reputation disclosure: feedback on the canonical ReputationRegistry is operator-seeded — submitted by the agent wallet itself for completed audits, not yet from independent clients; live client ingestion is on the roadmap.
The seven checks, with their evidence
7 recordedRegistered?rung 1 · registered
passThe agent exists in the on-chain registry, with an owner and a document URL.
passed
- block_number
- 26125718
- chain_id
- 1
- token_id
- 50891
checked at 2026-10-05T14:13:42.813292Z
Reachable?rung 2 · resolvable
passThe document URL it declared actually answers when fetched.
passed
- elapsed_ms
- 18348
- gateway_attempts
{"error":"robots_unavailable: timeout fetching robots.txt","gateway":"https://ipfs.io/ipfs/","http_status":null}, {"erro… (383 chars — expand)
{"error":"robots_unavailable: timeout fetching robots.txt","gateway":"https://ipfs.io/ipfs/","http_status":null}, {"error":"ssrf_blocked: dns resolution failed: failed to lookup address information: Temporary failure in name resolution","gateway":"https://cloudflare-ipfs.com/ipfs/","http_status":null}, {"error":null,"gateway":"https://gateway.pinata.cloud/ipfs/","http_status":200}- http_status
- 200
- scheme
- ipfs
- via_gateway
- https://gateway.pinata.cloud/ipfs/
checked at 2026-10-05T14:13:42.813292Z
Readable?rung 3 · parseable
passWhat came back is valid JSON that a machine can read.
passed
- body_bytes
- 1384
- body_sha256
- 2ec447f085df721b70094a7b0f6f53a378a4a58e5f9e72c381bcc301675e732c
- content_type
- application/json
checked at 2026-10-05T14:13:42.813292Z
Follows the spec?rung 4 · conformant
passThe document meets what ERC-8004 requires of it.
passed
- both_fields_present
- false
- legacy_endpoints_field
- false
- may_gaps
- (empty)
- must_violations
- (empty)
- registrations_checked
- 1
- services_field_source
- services
- services_status
- present
- should_gaps
- image, services[].version
- spec_commit
- 68fc6765761a10fb26f0692df21c8a6f9d12b1be
checked at 2026-10-05T14:13:42.813292Z
Claims its identity?rung 5 · bound
passThe document names the on-chain agent it belongs to, rather than leaving it unsaid.
passed
- declared_agent_id
- 50891
- declared_chain
- 1
- declared_registry
- eip155:1:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432
- match
- true
- registrations_seen
- 1
checked at 2026-10-05T14:13:42.813292Z
Answers?rung 6 · live
passA declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.
passed
- endpoints
{"declared":"https://rextoraudit.com/","elapsed_ms":3057,"final_url":"https://www.rextoraudit.com/","http_status":200,"i… (227 chars — expand)
{"declared":"https://rextoraudit.com/","elapsed_ms":3057,"final_url":"https://www.rextoraudit.com/","http_status":200,"index":0,"kind":"https","name":"web","outcome":"live","probed":true,"probed_url":"https://rextoraudit.com/"}- endpoints_answered_not_live
- 0
- endpoints_declared
- 1
- endpoints_live
- 1
- endpoints_our_error
- 0
- endpoints_payment_gated
- 0
- endpoints_probeable
- 1
- endpoints_probed
- 1
- endpoints_refused
- 0
checked at 2026-10-05T15:04:06.520133Z
Has feedback?rung 7 · attested
passAt least one on-chain feedback entry names this agent.
passed
- distinct_authors
- 2
- feedback_count
- 5
checked at 2026-10-05T14:13:42.813292Z
Check it again, now
outside the censusOn-chain snapshot
mainnet- token id
- 50891
- owner
- 0x273ae839a5447cee34b9a694bb62c9e61086d76d
- block
- 26,125,718
- observed
- 2026-10-05T14:13:42.816606Z
What the fetch saw
ipfs- scheme
- ipfs
- http status
- 200
- content type
- application/json
- size
- 1,384 bytes
- sha256
- 2ec447f085df721b70094a7b0f6f53a378a4a58e5f9e72c381bcc301675e732c
- elapsed
- 18,348 ms
This run
reproducible- run
- 67b76d5d-476f-4d7a-80e1-3580feac5a40
- chain
- mainnet
- pinned block
- 26,125,718
- agents
- 52,139
- started
- 2026-10-05T10:57:44.538042Z
- finished
- 2026-10-05T14:22:43.904654Z
- checker
- 0.7.0 · 10238dd9af44dfa032e6578390569a413a6bb393
- spec commit
- 68fc6765761a10fb26f0692df21c8a6f9d12b1be
cargo run -p sweeper -- mainnet # at block 26125718