Metal Mantra / AGENT INTELLIGENCEOpen agentic framework · v0.2AUTOMATED SIGNAL. NOT CERTIFICATION.
Metal Mantra
Run free agent scan
Metal Mantra
Run free agent scan

Public agent signals. Clear evidence boundaries.

AGENTIC AUDIT FRAMEWORK v0.2

Autonomy demands
boundaries.

Five weighted pillars turn inspectable source and domain evidence into a public automated signal. A match is a lead for human investigation—not proof of a vulnerability or certification.

Static heuristicsFive weighted pillarsEntity Trust contributes 15%No security certification
25%Security & privacy25%Guardrails & loop control20%Schema & tooling quality15%Token & cost efficiency15%Entity trust & provenance
19 controls
01

Security & privacy

Prompt injection, unsafe execution, secrets and network sinks · 25% of the overall signal.

SEC001

Hardcoded credential

CRITICAL

Move the credential to a secret store and rotate it.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
SEC002

Dynamic code execution

CRITICAL

Use an allow-listed dispatcher and argument-safe process calls.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
SEC003

Untrusted data in privileged prompt

MAJOR

Keep untrusted data outside system or developer instructions.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
SEC004

User-controlled network destination

MAJOR

Allow-list destinations and reject private and reserved IP ranges before fetching.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
02

Guardrails & loop control

Bounded loops, human approval and rate limits · 25% of the overall signal.

REL001

LLM request without token ceiling

MAJOR

Set max_tokens or the provider's equivalent on each model call.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
REL002

Public LLM endpoint without rate limit

MAJOR

Apply per-user or per-IP rate limits before model calls.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
REL003

Unbounded model loop

CRITICAL

Enforce a hard step limit, timeout and cancellation signal.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
REL004

Sensitive action without human approval

MAJOR

Require explicit human approval before a destructive or external action.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
03

Schema & tooling quality

Runtime validation, safe output and source provenance · 20% of the overall signal.

SCH001

LLM output without runtime schema

MAJOR

Validate model output with Zod, JSON Schema, Pydantic or provider structured output.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
SCH002

Raw model text returned

MINOR

Parse and validate the result before returning it.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
SCH003

RAG answer without citations

MAJOR

Return source identifiers or citations alongside retrieved answers.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
04

Token & cost efficiency

Model fallbacks, caching and bounded context · 15% of the overall signal.

EFF001

Model call without fallback

MAJOR

Configure a secondary model or explicit fallback path for provider failures.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
EFF002

Repeated model call without cache

MINOR

Cache deterministic or repeated requests with an appropriate expiry.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
EFF003

Unbounded conversation history

MAJOR

Trim or summarize history before sending it to a model.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
EFF004

Unbounded input payload

MINOR

Bound or compress document input before sending it to the provider.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
05

Entity trust & provenance

DNS ownership, HTTPS and privacy disclosures · 15% of the overall signal.

TRUST001

Domain ownership not verified

MAJOR

Verify the domain using the Metal Mantra DNS TXT challenge.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
TRUST002

HTTPS not confirmed

MAJOR

Make the official website reachable over HTTPS for verification.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
TRUST003

Privacy Policy link not confirmed

MINOR

Expose a clear Privacy Policy link on the official homepage.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.
TRUST004

Terms link not confirmed

MINOR

Expose a clear Terms link on the official homepage.

Evidence
Static source pattern or domain check
Interpretation
Heuristic finding; requires human validation.