Curbi / Company
Make agent work
inspectable.
Curbi builds tools for developers and AI agents to check an action’s permission, inspect the record of its outcome, and reproduce an integration failure with a runnable test.
Evidence that can leave the platform.
A useful record should remain checkable when a team changes its model, framework or hosting provider. Curbi Proof is an open draft for signed action records, Merkle inclusion proofs and compared log histories. Its standalone verifier runs locally against public keys chosen by the verifier.
The current proof examples use test keys and local fixtures. Production signing is off. Portable verification is available to try; a production settlement service is not being offered here.
A failure should become a test.
Repair Lab and MCP Chaos make bounded integration failures visible and repeatable. The aim is a practical loop: reproduce the broken run, inspect the repair, and keep the regression. Today’s downloads demonstrate that loop on included fixtures; arbitrary automatic repair remains future work.
How we build.
| Principle | What it means |
|---|---|
| Explicit trust | The verifier chooses trusted keys. A bundle does not establish its own authority. |
| Inspectable results | Evidence and technical details sit behind a result that can be read in plain language. |
| Portable artifacts | Documented HTTP requests, MCP tool arguments, local test downloads and an independently runnable verifier. |
| Honest availability | Public tools, source adapters and synthetic fixtures carry distinct labels. |
Questions and limits.
Curbi, Inc.
Company · open by design
What we open, what we build on, and what stays ours.
Curbi opens the parts other people need to check us, and builds on public standards instead of inventing formats.
Open source you can download now
| Download | Size | SHA-256 | License |
|---|---|---|---|
| curbi-proof-v0.1.zip | 28.3 KiB | a0e8d2afc39fa60e… | MIT |
| curbi-mcp-chaos-v1.zip | 66.7 KiB | 97ef2f5bbb101f6c… | MIT |
| curbi-repair-lab-v1.zip | 7.3 KiB | 00919c66c92871c8… | MIT |
| curbi-policy-starter-v1.zip | 3.1 KiB | affab1ce1c040edc… | MIT |
| curbi-policy-packs-v1.zip | 6.1 KiB | 008ae3be20a4bead… | MIT |
Standards we build on
| Standard | Where Curbi uses it |
|---|---|
| Ed25519 · RFC 8032 | Signatures on permissions, receipts and log heads |
| JWK · RFC 7517 | Published key sets; verifiers choose which keys to trust |
| Merkle logs · RFC 9162 | Append-only receipt history (the Certificate Transparency construction) |
| Model Context Protocol | Read-only public MCP server and the MCP Chaos proxy |
| OpenAPI 3.1 · JSON Schema | Check API contract and policy schema, tested against the runtime |
What stays ours
Public verification keys and their validity windows are published. Production signing is off. Hosted production action evidence still requires qualification. Code can be copied; a signing identity and its record can’t be borrowed.
Run a check. Keep the result.
Check a reply Connect your agent →A pass means no configured rule fired. It grants no execution authority or provider-completion proof.