Crawl. Gate. Sign. Ship.
Agent Clawbrary is the cryptographic supply chain for AI agent skills. Every skill is crawled from public sources, evaluated by DetGate, signed with Ed25519, and Merkle-chained before any agent can execute it. No receipt, no execution. No exceptions.
How It Works
Crawl & Discover
cl-crawler scans GitHub, npm, PyPI, and Hugging Face every 15 minutes. Skill manifests are parsed, hashed, and queued for evaluation.
Gate & Evaluate
DetGate evaluates TierDrivingFacts — mutation type, criticality, impact, cross-boundary access, identity root contact. Three verdicts: Pass, Escalate, Reject.
Sign & Chain
Passing skills get an Ed25519 or ECDSA P-256 signed receipt. Every receipt is appended to a Merkle chain. Rejected skills get a public rejection log with findings.
Distribute
Attested bundles are exported in three formats — Claude Code skill (.md), MCP tool definitions (.json), and raw bundle with full manifest + SBOM + receipt. Served through the /api/v1/skills/[id]/bundle endpoint.
Public Directory
Atestiv.com surfaces the catalog as a public governance directory. Every listing shows its receipt card — signer, Merkle root, signature, risk tier. Downloads go through our governed API, not raw source.
Three-Repo Governance System
SovereignClaw
Deterministic execution control. Evaluates skills through DetGate, signs Ed25519 receipts, enforces mechanical refusal at runtime.
Agent Clawbrary
Skill supply chain. Crawls sources, ingests signed receipts, serves attested bundles. The governed source of truth.
Atestiv
Public governance directory. Browse attested listings, verify receipts, download governed bundles. The consumer-facing layer.