settings — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited settings (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Unified zero-knowledge proof identity protocol for humans and AI agents.
Signed-off-by:)Bolyra is a mutual zero-knowledge proof authentication protocol. Humans prove uniqueness via a Semaphore v4-style enrollment circuit; AI agents prove EdDSA-signed credentials with cumulative-bit permissions; a delegation circuit narrows scope one-way. A handshake binds a Groth16 (human) and Groth16 (agent) proof to a shared session nonce, verified atomically on-chain.
circuits/ Circom 2 circuits + snarkjs/rapidsnark proving
contracts/ Hardhat — Solidity verifiers + on-chain registry
sdk/ @bolyra/sdk (TypeScript, public API)
sdk-python/ bolyra (Python — pure types + subprocess bridge)
integrations/ langchain, crewai, mcp, openclaw, payment-protocols
spec/ DID method, IETF-style draft, conformance runner
examples/ mcp-demo, provider-mock
docs/ quickstart, OWASP agentic mappingSee sdk/QUICKSTART.md for the TypeScript SDK quickstart.
npm install
npm run compile:circuits
npm run compile:contracts
npm test # circuits fast + contracts
FULL_PROOF=1 npm run test:circuits:slow # full Groth16/PLONK proving (~2 min)48 executable test vectors verify the implementation matches the protocol specification. CI runs them on every PR. See spec/CONFORMANCE.md for the current generated report.
npm run conformance # run vectors
npm run conformance:report # generate spec/CONFORMANCE.mdThis project requires a Developer Certificate of Origin (DCO) sign-off on every commit. Use git commit -s. See CONTRIBUTING.md for details.
Apache-2.0. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.