A bounded agentic security system with evidence you can inspect

The fix is not the proof. The full sequence is.

Antigense reproduces a software-injected integrity fault, finds an unsafe fail-open authorization fallback, gates AI advice behind human review, and preserves each step as an addressable custody occurrence with recomputable Merkle/MMR checkpoints.

Watch primary narrated demo ↗ Explore recorded walkthrough ↗ Technical detail ↗ Open application ↗

Two distinct, inspectable evidence routes

Historical multi-sponsor custody

Recorded execution receipts

Semgrep local before/after findings, ClickHouse Cloud ingestion/readback and separately authorized Akash GPU inference/close. Their execution happened earlier, not when this webpage loads.

HISTORICAL OBSERVED · NOT A NEW SPONSOR RUN

Actual local human-review path

12 leaves

New local persisted FCG

Local browser-bound approval became a distinct FCO occurrence, linked to its predecessor, recorded on disk and independently recomputed.

LOCAL EXECUTION OBSERVED · NOT REMOTE LIVE ACCESS

Independent review

Recompute rather than trust a slide

This page loads a frozen public proof snapshot and validates its leaf commitments, typed predecessor sequence and every MMR prefix in your browser.

AUTHENTICITY / TIMING NOT ATTESTED

Verifiable local snapshot · Run 20261009T204741Z

Browser verification of the new FCG occurrence

This is a previously executed local run, exported as exact JSON bytes. It is not a connection to the operator's machine. Start a fresh browser-side recomputation:

Proof JSON ↗Provenance index ↗

Result

NOT_TESTED · verification not started

Verification reads the frozen proof; it does not call sponsor APIs or change custody state.

Observed local run MMR root

02d102de2d19334b582a5a9ebde4e55de184533a607d81cc2b317c000423ddc3

Selected local review action

Event #9: 08 Local review action
Typed relation: DEPENDS_ON_RECORDED_PREDECESSOR
Actor: local-browser-action · UNSIGNED
No physical host patch; pinned fixture only.

01 · Local user action

New occurrence

The current MMR-bound review is logged as event 9. Operator identity remains unverified.

02 · Persistence

Canonical append

JSON FCO, typed predecessor, ordered ledger and prefix commitment; source verified from the recorded local run.

03 · Verification

Independent recomputation

The browser recalculates object/ledger/prefix hashes. Full reload recovery and remote witness are distinct tests.

Sponsor evidence by claim, not by logo

01 · Semgrep

Find the fail-open path

Custom-rule local scan reports one finding before the pinned fixture correction and zero afterward. Independent regression matrix guards authorized work; this is not an all-vulnerabilities guarantee.

RECORDED SCAN · OBSERVED

02 · Akash

Bounded cloud inference

A separate prior Console deployment returned provider-reported GPU lease, qwen2.5:0.5b inference HTTP 200, and close API success. Advice was not applied.

HISTORICAL OBSERVED · GPU/TEE NOT_ATTESTED

03 · ClickHouse

Retrieve incident evidence

Existing cloud branch ingested and exactly read back its bounded fixture rows; 11-checkpoint incident reconciled. Fresh reads must be identified separately from the original write.

HISTORICAL OBSERVED · NOT NEW INGESTION

Explicit boundaries: Pi Security sponsor API execution NOT_TESTED; Akash final closed-state readback NOT_TESTED; actual billing NOT_COMPUTED; GPU/TEE attestation NOT_TESTED; signatures NOT_SIGNED; physical hardware damage NOT_OBSERVED. Merkle equality establishes integrity of declared bytes, not truth, security, or causality.

GitHub source and receipts: PR #1 recorded sponsor history and PR #2 local verification successor. Repository remains PRIVATE; judges need access. This static page is not evidence of an authenticated identity or trusted capture timestamp.