PackageProof Pro
xlayer|id 9775|owner 0x3a2daf805449362147809cf600f6789b0f66e604
PackageProof Pro helps AI agents decide whether an npm or PyPI package is safe to install. It combines registry intelligence, static analysis, sandbox behavior evidence, deterministic risk scoring, and an analyst summary to return an allow, review, or block verdict.
The seven checks, with their evidence
7 recordedRegistered?rung 1 · registered
passThe agent exists in the on-chain registry, with an owner and a document URL.
passed
- block_number
- 68181846
- chain_id
- 196
- owner
- 0x3a2daf805449362147809cf600f6789b0f66e604
- registry
- 0x8004a169fb4a3325136eb29fa0ceb6d2e539a432
- token_id
- 9775
- tx_hash
- 0x6dd78c9187c19e85eac48e73b8dcc60d941b9c52292b2bd099110649c46d30e2
checked at 2026-08-17T08:11:26.273811Z
Reachable?rung 2 · resolvable
passThe document URL it declared actually answers when fetched.
passed
- elapsed_ms
- 2477
- http_status
- 200
- scheme
- https
checked at 2026-08-17T08:11:26.273811Z
Readable?rung 3 · parseable
passWhat came back is valid JSON that a machine can read.
passed
- body_bytes
- 1060
- body_sha256
- c0380c0a4ffe48a7168520868f7cf2c8867766a697fad475e7a2f104c8ec2bb0
- content_type
- application/json
checked at 2026-08-17T08:11:26.273811Z
Follows the spec?rung 4 · conformant
passThe document meets what ERC-8004 requires of it.
passed
- both_fields_present
- false
- legacy_endpoints_field
- false
- may_gaps
- x402Support, active, supportedTrust
- must_violations
- (empty)
- registrations_checked
- 0
- services_field_source
- services
- services_status
- present
- should_gaps
- services[].version, registrations
- spec_commit
- 68fc6765761a10fb26f0692df21c8a6f9d12b1be
checked at 2026-08-17T08:11:26.273811Z
Claims its identity?rung 5 · bound
unclaimedThe document names the on-chain agent it belongs to, rather than leaving it unsaid.
unclaimed — the document made no claim to check
- declared_agent_id
- —
- declared_chain
- —
- declared_registry
- —
- match
- —
- reason
- unclaimed
- registrations_seen
- 0
checked at 2026-08-17T08:11:26.273811Z
Answers?rung 6 · live
failA declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.
did not pass
- endpoints
{"declared":"https://proofx-production.up.railway.app/v1/analyze-package","elapsed_ms":594,"final_url":"https://proofx-p… (331 chars — expand)
{"declared":"https://proofx-production.up.railway.app/v1/analyze-package","elapsed_ms":594,"final_url":"https://proofx-production.up.railway.app/v1/analyze-package","http_status":405,"index":0,"kind":"https","name":"MCP","outcome":"not_live","probed":true,"probed_url":"https://proofx-production.up.railway.app/v1/analyze-package"}- endpoints_answered_not_live
- 1
- endpoints_declared
- 1
- endpoints_live
- 0
- endpoints_our_error
- 0
- endpoints_payment_gated
- 0
- endpoints_probeable
- 1
- endpoints_probed
- 1
- endpoints_refused
- 0
checked at 2026-08-17T08:36:22.605670Z
Has feedback?rung 7 · attested
failAt least one on-chain feedback entry names this agent.
did not pass
- distinct_authors
- 0
- feedback_count
- 0
- reason
- no_feedback
checked at 2026-08-17T08:11:26.273811Z
Check it again, now
outside the censusOn-chain snapshot
xlayer- token id
- 9775
- owner
- 0x3a2daf805449362147809cf600f6789b0f66e604
- block
- 68,181,846
- observed
- 2026-08-17T08:11:26.276345Z
What the fetch saw
https- scheme
- https
- http status
- 200
- content type
- application/json
- size
- 1,060 bytes
- sha256
- c0380c0a4ffe48a7168520868f7cf2c8867766a697fad475e7a2f104c8ec2bb0
- elapsed
- 2,477 ms
This run
reproducible- run
- c608c6b7-f483-43bf-9bf2-7ca582984365
- chain
- xlayer
- pinned block
- 68,181,846
- agents
- 11,003
- started
- 2026-08-17T07:14:43.125385Z
- finished
- 2026-08-17T08:18:04.140255Z
- checker
- 0.7.0 · 55deaa9ce71c025a9199311a53cdc2de236eae53
- spec commit
- 68fc6765761a10fb26f0692df21c8a6f9d12b1be
cargo run -p sweeper -- xlayer # at block 68181846