Recount audit of gensee-crate at 0a47b53c: its sealed traces reproduce to the item, while the front-page AgentCanary defense-rate chart ships without N, config, or raw results.

Real Ed25519 witness code, no shipped bridge that exports it: a commit-pinned metaharness audit of the sign, verify, validate, and publish gates.

A commit-pinned hyperframes audit: byte equality stops at one format, encoded goldens pass at 20-45 dB checkpoints, and 28 of 79 fixtures are recorded as never run in CI.

A commit-pinned audit of iflytek/skillhub: the scan verdict — even BLOCKED — gates no publish path in shipped code, while an unrecovered scanner outage hard-blocks the version.

A commit-pinned audit of awslabs/cli-agent-orchestrator 2.5.0: the docs name the real trust boundary in plain text, and four references cite an auth switch no code reads.

A commit-pinned audit of razzant/ouroboros 6.114.0: the constitution says agency wins, and every custody switch this audit read belongs to the owner.

A commit-pinned audit of aipoch/open-science: checksum-bound artifact provenance in the code, and a README #1 badge that sheds every hedge the org’s blog recorded a day earlier.

A commit-pinned audit of Apache Maka’s working-record boundary: agent PR evidence tracked in git, export-ignored from the ASF source archive, bound by tests in two languages.

A commit-pinned audit of the OpenHarness permission checker: its tool allow list returns before the command and path deny globs an operator configured.