Source Audit of NVlabs/SoL-Pi: a per-mechanism capability gate permits losses that accumulate until the assembled harness retains roughly 94% of Pi’s EdgeBench average.

A pinned-commit read of TradingAgents and LibreChat: what adopting open source actually transfers, what it never removes, and why these two are not substitutes.

Source Audit of redhat-et/ripwire at 1cf3086e: the gate count reads 612 in three guarded source files and 606 in the committed showcase deck the README links.

Recount audit of gensee-crate at 0a47b53c: its sealed traces reproduce to the item, while the front-page AgentCanary defense-rate chart ships without N, config, or raw results.

Real Ed25519 witness code, no shipped bridge that exports it: a commit-pinned metaharness audit of the sign, verify, validate, and publish gates.

A commit-pinned hyperframes audit: byte equality stops at one format, encoded goldens pass at 20-45 dB checkpoints, and 28 of 79 fixtures are recorded as never run in CI.

A commit-pinned audit of iflytek/skillhub: the scan verdict — even BLOCKED — gates no publish path in shipped code, while an unrecovered scanner outage hard-blocks the version.

A commit-pinned audit of awslabs/cli-agent-orchestrator 2.5.0: the docs name the real trust boundary in plain text, and four references cite an auth switch no code reads.

A commit-pinned audit of razzant/ouroboros 6.114.0: the constitution says agency wins, and every custody switch this audit read belongs to the owner.