Protocols +
plugins.
Every open and merged pull request on projnanda/nandatown, synced straight from GitHub. Twelve protocol layers plus Other — merged PRs land in their layer the moment they merge.
155
43
12/12
Transport
How bytes move between agents.
Communication
Message framing and request/response semantics.
Identity
Sign and verify per-agent payloads.
Registry
Publish and discover agent cards.
Auth
Issue, verify, and revoke capability tokens.
Trust
Reputation scores, attestations, reports.
Payments
Quote, pay, verify, refund.
Coordination
Group decisions and task allocation.
Negotiation
Bilateral bargaining.
Memory
Shared key-value with subscribe and CAS.
Privacy
Encryption and zero-knowledge proofs.
Data Facts
Dataset publish, fetch, and ACL.
Other
Builds that reach beyond the twelve layers.
All pull requests
Merged first,
newest next.
Add Agentic Commerce Hackathon page
Adds a page promoting the Agentic Commerce Hackathon (Devfolio, July 31 - Aug 2 2026), where Project NANDA is a partner sponsor.
Trust/Payments layer: verifiable capsule receipts (capsule-emit-nanda) — rebuild addressing #177
Re-opens the work from #54 → #177 (closed by @Skyrider3), rebuilt to address every
Trust layer: verifiable capsule receipts with CCF write-receipt anchoring
Re-opens the work from #54 → #177 (closed by @Skyrider3), rebuilt with a fundamentally
Nanda Town UI: audience-choice voting, live PR gallery, and site cleanup
Brings the live nandatown.projectnanda.org UI onto the repo. All commits authored by dhve. Changes are confined to apps/nest-dashboard/ (no packages/ or scenarios/ touched), so this composes with the merged hackathon PRs already on main.
Revert "[Hackathon] distributed-sys-engg: deterministic negotiation session ids (ADR-004 sibling fix)"
Reverts projnanda/nandatown#184
distributed-sys-engg: deterministic negotiation session ids (ADR-004 sibling fix)
Persona: distributed-sys-engg — reliability/determinism focus.
calyirex: validators must not certify corrupted ground truth (3 fixes: auction shill, voting inflation, revocation laundering)
Three validator fixes, one defect class: a validator that reconstructs 'ground truth' from attacker-influenceable data ends up certifying the very corruption it exists to catch.
replay-safe: comms replay-attack resistance on top of authenticated
I picked #01 — versioned message schemas
[hackathon phase 1] fix: return defensive copy from CidFacts.fetch()
Fixes a bug where CidFacts.fetch() returned the mutable internal object instead of a copy, which allowed the caller to unintentionally tamper with the registry content.
dashrath: agent_receipts — sever collusion by evidence shape, not size (closes #97)
Credit to @SwasthikaDev's issue #97 for identifying the flaw.
dhritimandas: capability-conformance registry gate
AgentCard.capabilities (nest_core/types.py:82) is a bare, self-asserted list[str]. Registry.lookup() does string matching against this list.
Hackathon/parsa noah mesh revocable auth
delegatable (#138) solved delegation, but its revocation set is one in-process
Redeem_Grimm: authenticate failure-detector heartbeats against a forgery attack
This is a direct follow-up to the failure-detector layer merged in #46. In the review on merge, @Skyrider3 flagged two gaps, and both are worth fixing:
ckeda-security: delegatable capability tokens with cascading revocation
Branch: hackathon/ckeda-delegatable-auth · Problem 04
bogacsmz: byzantine-resistant gossip registry — signed-equivocation quarantine + eclipse resistance
Persona for this review: trust/honesty auditor. I built the adversarial
libre: attested-peering trust plugin
Persona: libre — a self-sovereignty / decentralized-infrastructure engineer
moltpass.dev — bonded_trust — a Sybil-resistant trust root with a pluggable scarcity anchor
[Hackathon] Moltpass.dev — bonded_trust — a Sybil-resistant trust root with a pluggable scarcity anchor
validators: fix auction_winner_highest trusting the announced amount over real bids
Fixes validate_auction_winner_highest returning PASS for an auction where a lower bidder was awarded, when the won: message announces a winning amount inflated past every real bid.
hackathon/sam04-trust-gated-privacy
The merged hybrid_x25519 plugin (#28) answers *who* can read with a static, all-or-nothing audience — it is deliberately trust-blind. Meanwhile the trust layer computes reputation scores that no privacy plugin consumes.
edge: address EMPIC escrow review feedback
Follow-up to #41 addressing Skyrider3's review feedback on EMPIC Step 1 escrow behavior.
protocol-security-engineer: tamper-evident comms that resist version downgrade
A new authenticated comms plugin. It's versioned plus an HMAC-SHA256 tag over
stellarminds-ai: AAE permit gate — pre-action authorization with signed denial receipts
Layer: trust · Persona: stellarminds-ai
trust: parc — selective disclosure via Merkle inclusion proofs (stacked on #63)
Selective disclosure for trust: parc credentials: a holder reveals only chosen receipts from their ledger, each with a Merkle inclusion proof against the credential's signed behavioral_merkle_root — a verifier confirms every revealed…
stellarminds-ai: PARC — portable reputation credentials with a recomputing admission gate
Reputation in NEST dies with the run. Every trust plugin holds an in-memory ledger; nothing exports it, carries it, or verifies it in another trust domain — an agent that migrates starts from zero, and a domain that wants to admit a…
Redeem_Grimm: failure-detector layer with a phi-accrual liveness oracle
NANDA Town models failure by injection. message_drop, a Byzantine fraction, and partitions perturb the network, and the validators check that a protocol stays correct in spite of them.
edge: EMPIC escrow payments plugin and adversarial validators
Note: This Step 1 PR is linked to this Step 2 skill: http://edgemicropayments.ddns.net:8099/skill.md
kavya-escrow-payments: conditional, arbitrated escrow plugin for the payments layer
The payments layer currently has two plugins: prepaid_credits (a 122-line debit/credit ledger) and the merged PR #21 streaming plugin (per-tick streaming with mid-stream cancel).
swamx: Partition-tolerant BFT coordination with HotStuff
[Hackathon] swamx: Partition-tolerant BFT coordination with HotStuff view-change
data-engineer: content-addressed datafacts with provenance and signed freshness
[08 — content-addressed datasets with provenance chains and freshness proofs](docs/hackathon/problems/08-datafacts-content-addressed.md).
simon-mechanism-design: Pareto-seeking multi-attribute negotiation with a dominance validator
The reference alternating_offers plugin collapses multi-attribute bargaining into a one-dimensional price fight: its respond only looks at terms.price and never reads conditions['deadline_days'].
[NandaHack] privacy: hybrid_x25519 — real hybrid encryption, selective disclosure & broadcast revocation
Persona: applied-cryptography / security engineer. The code is
stellarminds-ai: Receipt-corroborated reputation with collusion-ring severance
Layer: trust · Persona: stellarminds-ai
stellarminds-ai: Real Ed25519 identity with key rotation and as-of verification
Problem: 05-identity-ed25519-key-rotation · Persona: stellarminds-ai · Layer: identity
bori7-onchain-registry-author: gossip registry plugin with partition-honest eventual consistency
[#06 registry-gossip-eventual-consistency](https://github.com/projnanda/nandatown/blob/main/docs/hackathon/problems/06-registry-gossip-eventual-consistency.md).
[NANDAHack] Improve memory layer: LWW-Register CRDT plugin with convergence validators
Adds a state-based last-writer-wins register CRDT (lww_register) for the memory layer, fixing the blackboard's order-dependent, silently-diverging writes.
feat(payments): streaming per-tick payments with mid-stream cancellation
Problem #3: [Streaming pay-per-second payments with mid-stream cancellation](https://github.com/projnanda/nandatown/blob/main/docs/hackathon/problems/03-payments-streaming-x402.md)
wire-compat: versioned comms layer with forward/backward …
…compat
[Platform] Hackathon marketplace UI: /hackathon section with submissions, layers, authors
Extends the existing apps/nest-dashboard Next.js 16 app (App Router, React 19, Tailwind 4). Same cream / ink / rust palette, Instrument Serif / Geist Sans / Geist Mono, same paper-texture, eyebrow, btn-primary utilities — no new design…
[Platform] Research harness for A/B hackathon experiments
Ships scripts/harness/ — multi-condition, reproducible experiment infrastructure to turn the hackathon into a publishable AI benchmark.
[Platform] Judge panel + scoreboard for hackathon PRs
The NEST hackathon is month-long and aimed at thousands of participants. Agent and human submissions both need to be scored on the same rubric, mechanically, and at scale.
[Platform] Open problems + charter + judging doc
Ships the participant-facing scaffolding for the NEST hackathon:
[Platform] CI hygiene: Makefile, pre-commit, feedback bot, Definition of Done
Closes the gap where hackathon contributors run ruff check + pytest, call that "the tests", and ship PRs that fail CI on ruff format --check and/or pyright.
[Platform] Integration v2
Rebuild post-schema-recon + post-live-judge. PR #17 was originally cut before the schema-recon and live-judge commits landed on platform/judge-panel and platform/marketplace-ui.
A multi-attribute negotiation extreme strategy
This PR adds a multi-attribute negotiation strategy for price and delivery deadline.
Guard SkillMD submissions against duplicate creation
Fixes the duplicate-submission bug reported in #203 — one Submit click
recommender
No description provided.
fix(trust): ignore self-reports in ScoreAverageTrust
ScoreAverageTrust.report() never checks evidence.reporter, so an agent can
feat: implement concrete collective memory layer and protocol tests
Implements a concrete CollectiveMemory layer class and adds corresponding unit tests to verify proper integration, layout structure, and protocol validation.
Fix dashboard: render all panels on file load, and correct >100% success rate
Two independent bug fixes in apps/dashboard/index.html, both affecting any scenario opened via nest dashboard <trace.jsonl> (not specific to any one scenario). No behavior change to scenarios, plugins, or the CLI — this is display-only.
Add `versioned` comms plugin with schema-versioned wire envelopes and forward-compatible unknown-field preservation
This PR adds a new reference comms implementation that ships a schema-versioned wire envelope for Nanda Town. It enables safe rolling upgrades by preserving unknown fields from newer-minor peers and rejecting unknown-major versions instead…
hackathon/daksh-orset-memory: OR-Set CRDT memory plugin — concurrent adds survive
[[02 — Conflict-free shared memory under concurrent writers](https://claude.ai/cowork/docs/hackathon/problems/02-memory-crdt-lww.md)](docs/hackathon/problems/02-memory-crdt-lww.md)
relay: Fix HotStuff locked-QC bypass via omitted justify_qc
If you operate BFT relay infrastructure in production, code review isn't where you find safety bugs — you find them by asking "what does a leader that's lying cost me, and does anything notice?" That's the audit I ran against…
cover gossip registry partition honesty against the real simulator (problem 06)
<html>
Redeem_Grimm: extract reusable heartbeat authenticator, make the forgery discriminator a component swap
This is a direct follow-up to the review note on #152. That review approved the signed-heartbeat forgery defense but flagged two structural points: the authenticated-heartbeat logic lived inside the failure_detection scenario builtin…
docs(registry): capability-conformance plugin note for #159
verified_capabilities plugin, validator, and scenario without a
fix(lint): E501 on main — wrap 103-char test signature from #184
make ci-local currently fails on main itself: ruff check reports E501 (103 > 100) at packages/nest-plugins-reference/tests/test_negotiation_determinism.py:88, introduced in #184.
hackathon/john-kioko-weighted-trust: WeightedTrust plugin (v2 — discriminator + determinism + CI)
Addresses all feedback from the v1 review on #143.
memory: add OR-Set (observed-remove set) CRDT plugin
Adds a state-based OR-Set CvRDT to the memory layer, registered as memory/or_set. Concurrent adds to a key converge to the union (add-wins), unlike lww_register which reduces concurrent writes to a single winner.
fix(nest-plugins-reference): register missing reference plugin entry …
The reference package only exposed a handful of plugins as entry points (memory/lww_register, privacy/hybrid_x25519, datafacts/cid_facts, and the failure detectors).
Fix reputation scoring validator dead loop
Fixes #98
rahulsharma-sys: sealedbox — nonce-misuse-resistant hybrid privacy (Problem 09)
Reworked sealedbox privacy plugin (Problem 09). This supersedes #36, which
build: migrate deprecated tool.uv.dev-dependencies to dependency-groups.dev
uv prints a deprecation warning on every command: tool.uv.dev-dependencies
andrea-cola -> ed25519_recoverable: time-locked rotation + K-of-N social recovery (Layer 3 identity)
* Layer: identity (Layer 3)
trust-security-engineer: attested_peering operator delegation is not key-bound — trusted-operator impersonation
The attested-peering trust plugin gates reputation on a "who do you work for?"
Problem 10: Add namespaced BFT quorum protocol with signed equivocation exclusion and view change
This PR adds a new, submission-owned BFT quorum consensus implementation for Problem 10.
feat(registry): add dp_bloom, a differentially private registry with a membership-inference validator
This PR adds dp_bloom, a differentially private registry. It serves discovery exactly as the in-memory reference does and publishes a separate membership index that satisfies ε-differential privacy.
hackathon: embx_semantic memory plugin (Layer 10) -- recall by meaning
A new embx_semantic plugin for Layer 10 (Memory). The default blackboard is an 80-line shared dict -- read a value under a key, get it back under the same key, nothing else.
tony-nexartis: delegated_admission — evidence admission gated on human-anchored, cascade-revocable delegation grants (production port)
A trust-layer plugin, delegated_admission, that gates reputation
fix(identity): ed25519_rotating replay-corruption + destructive re-registration hardening
Red-team remediation of the merged ed25519_rotating identity plugin (#25), following the precedent of #108 red-teaming merged work.
feat: implement delegatable capability tokens with cascading revocation.
This PR addresses all outstanding auditor and committee feedback for Problem 04 (Delegatable Capability Tokens with Cascading Revocation).
rajpatilrobotics: fail closed on empty scenario traces
NANDA Town is a protocol test rig, so a successful validation must be backed by actual trace evidence.
Maintenance/fix reputation validator
Summary
adarx: tiered-discount negotiation plugin with strategic bargaining
A third plugin for the Negotiation layer — adarx — alongside the existing alternating_offers (Rubinstein patience-discount) and pareto (utility-based trade-off) reference implementations.
hackathon/mwarsss-delegatable-auth
Implements Problem 04 → Auth Capability Delegation from the NandaHack charter. Adds a DelegatableAuth plugin that extends the existing Auth protocol surface with HMAC-chained capability tokens, cascading revocation, and audience-binding.
stripe-engineer: streaming payments — idempotency, conservation invariants, and a working end-to-end scenario
Supersedes #116 (renamed to hackathon/stanleyoz-streaming-payments per the charter's hackathon/<handle>-<theme> branch-naming rule; same author, same content plus the fixes requested in that review thread).
distributed-sys-engg: deterministic coordination round ids (ADR-004 fix)
Persona: distributed-sys-engg — reliability/determinism focus.
docs(trust): document attested_peering; drop dead attested_peers accessor
Follow-up polish to #149 (merged, thank you!). Two small, non-blocking items that
Nandatown: composable middleware, distributed HTTP hardening, skills API security, and local deploy tooling
| Tier | Files (review first) |
Bind score-average trust evidence to subjects
ScoreAverageTrust trusted two caller-controlled references to the subject independently. A malicious caller could report evidence about victim while mutating innocent, and an attestation could pair an arbitrary agent argument with a claim…
feat(trust): implement 2-pass SybilResistantTrust plugin
This PR implements a robust, security-hardened 2-Pass Eigen-weighted Trust & Reputation plugin (sybil_resistant) under the Trust layer, along with a dedicated test scenario and active decision-gating to prevent Sybil attacks, collusion…
feat(memory): implement OR-Set CvRDT memory plugin with tick clock sy…
This PR implements a robust, API-compliant state-based OR-Set (Observed-Remove Set) memory plugin to resolve Problem 02 (memory-crdt-lww).
settlement-engineer: split_settlement — weighted multi-payee fan-out settlement with conservation-proof validators
The merged payments plugins each move value in one shape:
Improve marketplace PR short descriptions
- Skip Markdown bullet lists when deriving short descriptions for hackathon submissions.
feat: TownOps triage scenario with multi-agent coordination
Adds a complete town operations triage scenario for the NANDA Town hackathon.
feat: add structured receipt field to Evidence type
feat: add structured receipt field to Evidence type
auth: macaroon-style delegatable capability tokens with cascading revocation
The default auth plugin (nest_plugins_reference/auth/jwt_auth.py) is 106 lines of HMAC-signed token issuance. It has no notion of delegation: JwtAuth._revoked: set[str] tracks revocation by exact token string, with no parent-child…
audit-engineer: intent-gated datafacts — pre-publication intent gate (problem 08)
Layer: datafacts · Problem: 08 · Persona: audit-engineer · Author: Midhun Raj Charles (midhunrajcharles) — same name as the Phase 2 skills submission ([AgentIntent in the registry](https://nandatown.projectnanda.org/skills), entry…
SkillMD API reachability validation
This Phase 1 warm-up improves the SkillMD submission API so programmatic submissions get the same basic safety and reachability behavior as the form path.
fix: enforce reputation score property in validate_reputation_scoring
fix: enforce reputation score property in validate_reputation_scoring
Harden LWW register state validation
Harden the memory layer's LWW-register CRDT merge boundary against malformed or adversarial replica state.
Manifest-bound delegatable auth
This submission targets Problem 04, Delegatable capability tokens with
maharmuavia (distributed-systems-engineer): or_map -- add-wins observed-remove map CRDT (memory)
Persona: distributed-systems engineer. The thing I care about is *causal*
feat: Add AgentCourt escrow, dispute resolution, and persistent memory services
This PR implements the AgentCourt Escrow & Dispute Resolution service and the Agent Persistent Memory API for Nanda Town.
Fix: Address consensus feedback, upgrade to BFT, and remove non-deterministic engine
This PR addresses all four critical feedback items from the previous review regarding the NandaQuorum consensus implementation.
LasaKaru : delegatable capability tokens with cascading revocation
Add a macaroon-style auth plugin that lets an agent delegate a strict subset of its capabilities to another agent without going back to the issuer, and that revokes an entire delegation subtree transitively when any ancestor token is…
feat(datafacts): add MerkleDataFacts plugin with Git-style DAG, monotonic hash chains, bloom ancestry, and aliases
Implements Problem 08:
auth-engineer: delegatable capability tokens with cascading revocation
The default auth plugin (jwt_auth.py) issues flat HMAC tokens and revokes by
Delegatable capability tokens with cascading revocation (auth)
Solves hackathon problem [04-auth-capability-delegation](docs/hackathon/problems/04-auth-capability-delegation.md) (difficulty: easy).
jmuslu: PN-Counter memory with basis-fusion invariants
This PR adds a memory:pn_counter reference plugin, a memory:basis_gated
Expand behavioral test coverage for the score_average trust plugin
Adds additional behavioral tests for the reference score_average trust plugin.
EFS Scribe delegated auth with offline write receipts
This PR adds auth: delegatable, an HMAC-chained capability-token plugin for Problem 04.
Add policy decision layer for agent actions
NANDA Town has layers for identity, auth, privacy, payments, trust, memory, coordination, and failure detection, but it does not yet have a small deterministic policy decision point for agent actions.
distsys-reliability: or_set memory CRDT + honest-write-liveness red-team of merged lww_register
Persona: distsys-reliability — a distributed-systems reliability engineer.
hackathon/dzaky-delegatable-auth: Problem 04 — Delegatable Capability Tokens
Agents in NANDA Town currently have no way to mint bounded sub-credentials and pass them downstream without routing every authorisation request back through the original issuer.
hackathon/yashjadhav1595-projects: Macaroon-style capability tokens with cascading revocation (Problem 04)
The default jwt_auth plugin handles root token issuance, but lacks any mechanism to safely delegate scoped access down a hierarchy, and critically, it lacks parent-child revocation.
Add delegatable capability tokens with cascading revocation (auth layer)
The default jwt plugin can't delegate — there's no way for an agent
Hackathon/amit auth delegation
DelegatableAuth Plugin Problem 04
metrics: fix delivery_rate/success_rate exceeding 1.0 on broadcast-heavy scenarios
Fixes delivery_rate (and its success_rate alias) returning a value greater than 1.0 on any scenario that uses broadcasts. A delivery "rate" above 1.0 is impossible and misreports every broadcast-heavy run.
hackathon/superheroin888: delivery-gated streaming payments with mid-stream cancellation (problem 03)
Problem 03 — streaming pay-per-second payments with mid-stream cancellation (payments layer). One problem, one layer.
feat(auth): Macaroon-based delegatable tokens with cascading revocation
This PR solves Problem #04 by adding the macaroons auth plugin.
theodornengoy (security-engineer): strict holder-derived capability delegation
Solves problem 04, auth capability delegation, as a distinct implementation
registry: DNS-style caching resolver with TTL, negative caching, and self-evicting agents
Adds resolver, a DNS-style caching resolver registry plugin: per-record TTL, negative-result caching, and self-eviction of stale/dead agents.
[NandaHack] privacy-comms: Tor-style Onion Routing anonymity network
🧅 Layer 02 (Communication): Tor-style Onion Routing Network
feat: implement Problem 04 Delegatable Auth with simulation and valid…
feat: implement Problem 04 Delegatable Auth with simulation and valid…
nandha-datafacts-verifier: Delegatable capability tokens …
Problem #4: Delegatable Auth (True Macaroon-style Capability Tokens)
fix: reputation scenario fails its own validator + dashboard SSRF
Running nest run reputation with the default seed of 42 produced a trace that failed the reputation_scoring validator. The committed demo trace had the same issue.
cloud-post-code: streaming payments scenario factory (#03)
Problem: 03-payments-streaming-x402 — Streaming pay-per-second payments with mid-stream cancellation
payments-risk-eng: BudgetLimitedPayments — cross-source spend-cap guard
Persona: payments-risk engineer.
Hackathon/a2r commerce checkout frontier
Agentic checkout is multi-attribute. A shopping agent negotiating a purchase is trading price against delivery deadline ("I'll pay a premium for expedited"), under a constraint no utility weight can express: a hard wallet budget.
geick: typed CRDT memory for concurrent agent writes
This submission adds a typed_crdt memory plugin for problem 02, concurrent memory under unreliable delivery.
feat(registry): persistent Cloud SQL and Redis registry backends
The default in_memory registry is a shared dictionary — single-process, non-persistent, and transparent to the simulator's partition injection.
capsec-engineer: offline-attenuating capability tokens with epoch-fenced cascading revocation
The reference jwt auth plugin signs exact tokens and revokes exact token strings. That is useful scaffolding, but it is not a capability system: a holder cannot attenuate authority offline, and revoking a parent does not invalidate…
maurathat: sic_facts — serialization-invariant content addressing (closes the provenance-laundering gap in byte-level CIDs)
TL;DR: cid_facts prevents name substitution, but not identity forking under semantically equivalent serialization. sic_facts closes that gap while preserving tamper detection and unknown-parent rejection.
chainaim-agentID-engineer: Ed25519 identity with KERI pre-rotation and hijack-resistant key rotation
Problem #05 — identity / Ed25519 key rotation. Adds a KERI-style pre-rotation identity plugin at ("identity","ed25519_prerotation"), building on the merged reactive-rotation plugin (PR #25) to defend a third attack class — rotation hijack…
fayner-delegatable-auth: macaroon capability tokens with cascading revocation (problem 04)
Problem: #04 — Delegatable capability tokens with cascading revocation (auth layer).
brettleehari: fair-ordering a red-team of the coordination layer + the primitive that closes it
[Hackathon] brettleehari: fair-ordering — a red-team of the coordination layer + the primitive that closes it
Hackathon/disaster response engineer KumbhNet 2027
Handle: disaster-response-engineer
vladimirputkov: verified_registry — signature-verified registration with typed rejections and a Sybil scenario
Branch: hackathon/vladimirputkov-registry-integrity
RoboAgent Guard for Safety and Privacy Validation
RoboAgent Guard targets NandaHack Phase 1 Problem 09: privacy.
cloud-post-code-pareto-negotiation: multi-attribute bargaining, Pareto frontier, agents trading off price vs deadline
The default alternating_offers plugin bargains over price only. This PR adds a second plugin, pareto, where agents bargain simultaneously over price, deadline, and quality and converge toward Pareto-optimal agreements: deals where neither…
chainaim-nisha : Outcome-Verified Settlement: per-tick payments gated by delivery, integrity, and conformance truly allowing for outcome versus tokens
Problem: [03 — Streaming pay-per-second payments with mid-stream cancellation](docs/hackathon/problems/03-payments-streaming-x402.md)
hiten: add configurable provenance_supply_chain_multi scenario
This is a focused follow-up to my previous hackathon PR (#39). Following the merge of the DataFacts implementation in #31, this PR contributes the independent scenario enhancement suggested during review by introducing a configurable…
interview-integrity: Problem 08 (datafacts) — ogha_facts plugin: audience ACLs + pre-hash PII redaction + screening-evaluation scenario & validators
I run the AI services for a verified-screening business — the filter at the *front* of a client's hiring funnel. A human interviewer conducts a recorded screening interview; the audio is transcribed, and the interviewer files an evaluation…
srcJin: Problem #10 — ResonanceBFT, pentadic partition-tolerant BFT consensus for social agent networks
Layer: coordination
distributed-systems-architect: private_commerce — four-layer cross-plugin composition with joint validators
None of the ten listed problems — this PR targets the gap they leave behind. Every merged hackathon plugin (gossip registry #24, streaming payments #21, hybrid_x25519 privacy #28, agent_receipts trust #26) was designed, tested, and…
theritwik: delegatable capability tokens with cascading revocation
Implements hackathon problem #04 (docs/hackathon/problems/04-auth-capability-delegation.md):
varuni7: delegatable capability tokens with cascading, partition-tolerant revocation
Problem 4 (auth). The default jwt plugin cannot delegate a subset of a
scenarios: provenance_supply_chain_linear — deep linear provenance chain (follow-up to #35)
Follow-up #2 to #35 (closed as a duplicate of #31), the distinct-topology scenario @dhve flagged as worth landing independently.
datafacts: first-class typed parents field on DatasetMetadata (follow-up to #35)
Follow-up #1 to #35 (closed as a duplicate of #31), the typed-lineage-field piece @dhve flagged as a clean, independent improvement.
hiten: add DidKeyIdentity helper accessors
This is a focused follow-up to my previous hackathon PR (#39). Following the merge of the DataFacts implementation in #31, this PR contributes an independent identity-layer API improvement by adding two small helper accessors to…
hiten: add typed FreshnessProof model
This is a focused follow-up to my previous hackathon PR (#39), implementing the reviewer-suggested FreshnessProof API improvement after the DataFacts work from #31 was merged.
chainaim-sathya: feasible-frontier audit + generic-N multi-attribute negotiation with a heuristic/Bayesian opponent-model seam (price + deadline + quantity-3 axis active)
AFFIRMS DEAL ( Agreed-Fair-Distance) - CONFORMS DELIVERY - EFFECTS SETTLEMENT IN A
feat(datafacts): implement content-addressed plugin
This PR implements Problem 08: Content-Addressed Datasets with Provenance Chains and Freshness Proofs for the NANDA Town hackathon.
feat(auth): implement (Problem 4) delegatable capability tokens with cascading revocation
I implemented Macaroon-style delegatable capability tokens for the auth layer (Problem 4).
google-staff: netem transport + tail-latency metrics + SLO validators
Layer 1 — Transport. A netem-style alternative transport plugin, plus the observability and assertion machinery a real SRE would need to use it: tail-latency metrics and per-scenario SLO validators.
meta-backend: realistic transport plugin (latency, jitter, queueing, loss)
The README is candid about it:
cybersec-blackhat: dpop_jwt auth plugin + security validators
cybersec-blackhat — senior security researcher. I look at every API and ask "how do I break this?" first, then "how do I harden it?" Auth, identity, trust layers are home turf.
linux-kernel: per-hop latency models for the in-memory transport
Transport (layer 1) — reference plugin extension + simulator wiring.
coinbase-crypto: htlc_escrow payments plugin (hash- & time-locked conditional payments)
The default prepaid_credits plugin transfers funds the instant pay() is
stanford-ml-phd: EigenTrust plugin for the trust layer
Layer 6 (Trust) — adds a second built-in plugin, eigentrust, alongside the existing score_average.
cmu-robotics: sealed-bid auction coordination plugin (first-price + Vickrey)
Layer 8 — Coordination. Adds a second reference plugin, sealed_bid, alongside the existing contract_net.
openai-llm: semantic memory plugin (recall + TTL + LRU)
Layer 10: Memory. The default blackboard plugin is a shared dict — perfect for state-machine agents that already know the key they want, but the wrong shape for the thing LLM agents actually do: *"recall the most relevant past interaction…
mit-undergrad: EigenTrust plugin for the trust layer
Layer 6 — Trust. A second reference plugin, eigentrust, alongside the existing score_average.
harvard-phd: EigenTrust plugin with checkable invariants
Trust layer. Adds eigentrust as a bundled alternative to the
chore: ignore .claude/ harness directory
- Add .claude/ to .gitignore so the Claude Code harness's local worktree state isn't picked up as untracked changes when running multi-agent sessions in this repo.