DEV Community: Founder

Filed public security issue on CrewAI (#8621). Agent loop lacks cryptographic signatures (SOC2 blocker). CrewAI scores 0/100. I built the open-source fix. Proof here: https://nti-leaderboard.vercel.app

Founder — Mon, 26 Oct 2026 14:36:29 +0000

nti-leaderboard.vercel.app

The Missing Layer: Why AI Agents Need a Post-Quantum Trust Standard

Founder — Sat, 24 Oct 2026 17:36:46 +0000

The Silent Crisis in AI Agent Execution

As autonomous AI agents transition from experimental chat interfaces to operational infrastructure—executing database queries, issuing API requests, and managing cloud environments—a fundamental security vulnerability has emerged: the lack of non-repudiable tool execution chains.

When a multi-agent system issues a financial wire, executes a database migration, or modifies access control lists, traditional logging captures what happened, but cannot cryptographically prove who authorized it or whether the tool call payload was tampered with in transit.

In high-consequence enterprise environments, unverified tool execution creates three primary failure modes:

Indirect Prompt Injection Exploitation: Adversaries manipulate context documents to inject unauthorized tool calls that execute under the application's service credentials.
Audit Trail Repudiation: Incident response teams cannot verify whether a logged tool execution originated from a legitimate agent turn or a rogue sub-agent.
Quantum Vulnerability Horizon: As RSA and ECDSA signatures near retirement ahead of post-quantum migration mandates (NIST FIPS 203/204/205), traditional JWTs and API tokens fail long-term compliance requirements.

The NTI Architecture: A 5-Pillar Trust Framework

The Neutral Trust Infrastructure (NTI) specification defines an open trust layer designed to cryptographically bind agent execution turns, user identity, and tool invocation parameters.

Post-Quantum Envelope Signing: Every tool call argument payload is signed using post-quantum signature schemes (e.g., ML-DSA / Dilithium).
Agent Identity Binding: Cryptographically ties user session contexts to agent execution sub-routines.
Payload Digest Verification: Verifies tool output integrity before returning results back into LLM context.
Immutable Event Logging: Generates hash-linked, tamper-evident audit traces for SecOps compliance.
Zero-Trust Interoperability: Operates transparently across Python, Node.js, and Rust frameworks.

You can read the full specification, which is actively being discussed in the W3C AI Agent Protocol Community Group, here: NTI-1 Spec

One-Command Hardening: nti-scanner --fix

Integrating cryptographic trust into existing codebases does not require re-architecting your application. Using the open-source Python CLI, developers can scan and automatically attach NTI compliance wrappers to execution handlers:

# Install the scanner
pip install nti-scanner

# Scan repository for unsigned tool execution handlers
nti-scanner scan ./src

# Apply automated NTI compliance middleware wrappers
nti-scanner --fix

Automated Pipeline Enforcement: GitHub Marketplace Action

To enforce agent trust controls across engineering teams, add the NTI Security Gate to your GitHub Actions workflow. You can find it in the GitHub Marketplace:

name: AI Agent Security & Compliance Gate

on:
  pull_request:
    branches: [ main ]

jobs:
  nti-trust-check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run NTI Security Gate
        uses: abisheakp197/nti-scan-action@v1.0.0
        with:
          fail-on-vulnerability: true

Build verifiable AI agents. Inspect the ecosystem and live registry at nti-registry.vercel.app.

The World Is Automating Rapidly. We Are Building the Trust Infrastructure That Controls It.

Founder — Fri, 18 Sep 2026 14:03:32 +0000

Every major tech era—cloud, online payments, mobile operating systems—was defined by the core infrastructure built beneath it.
We are entering a world dominated by autonomous AI agents, robotics, software execution, and automated machine-to-machine interactions. But this multi-trillion-dollar transition faces a critical flaw: a total lack of deterministic security and trust. Probabilistic safety prompts cannot guarantee control when machines execute financial transactions or high-stakes commands.
The Opportunity: Building the Next Infrastructure Giant
We are building Neutral Trust Infrastructure (NTI)—a high-barrier, commercially protected cryptographic gateway for autonomous systems.
Instead of soft guidelines, NTI uses Ed25519 capabilities, Merkle chains, TEE hardware enclaves, and Rust-based zero-knowledge virtual machines (zkVMs) to create an unbreachable mathematical fence. It determines what autonomous systems can verify, block, and execute.
This is not a temporary side project or an ordinary utility crate. This is the foundational protocol layer designed to secure future machine commerce—built from day one to scale into an enterprise infrastructure powerhouse alongside industry giants.
Why Join as a Core Developer?
Great infrastructure isn't built by huge committees at the start—it's forged by top engineers who recognize ground-floor opportunities before the rest of the market catches on.
Elite Systems Engineering: Natively written in high-performance Rust for ultra-low latency and total memory safety.
Uncompromising Security: Combining zero-knowledge execution proofs (zkVM) with immutable cryptographic audit chains.
Commercially Protected Open Source: Protected under the PolyForm Shield license to secure IP and build long-term enterprise value while maintaining an open developer ecosystem.
Get Involved Today
The foundation is live, public, and moving fast. We are opening initial architecture tasks for developers who want to contribute core code and help shape a high-value technology startup from the ground up.
📌 GitHub Repository: https://github.com/abisheakp197/Neutral-Trust-Infrastructure
🏷️ Look for issues tagged good first issue and help wanted.
If you have the technical drive to build the security stack governing the automated world, pick an issue, open a pull request, or join our technical discussions today