Skip to content
View DSHCorrectover's full-sized avatar

Block or report DSHCorrectover

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
DSHCorrectover/README.md

Correctover — Agent Runtime Reliability

Every AI agent action must be independently verifiable.


🛡️ CCS Proxy v1.3.0 — Inline MCP Security Proxy

dshcorrectover.github.io/ccs-proxy

Inline enforcement proxy for AI agents calling MCP tools. Three-layer cryptographic attestation:

Layer What it does
L1 Admission 7-dimension pre-call verification (Structure, Schema, Latency, Cost, Identity, Integrity, Security)
L2 Protocol Attestation Upstream manifest fingerprint, pin & drift detection — no lying tools/list
L3 Execution Binding Ed25519-signed receipt chain (JCS RFC 8785), per-call, third-party verifiable
  • 22/22 tests pass — 17 mock + 5 real NVIDIA NIM integration tests
  • Zero runtime dependencies, 53KB signed tarball, GPG-verified release
  • Fail-closed — deny on timeout, never silently allow
  • 14-day free trialDownload

📄 Read: When the Admin Is the Attacker — CVE-2026-76404 analysis


Open Source Core

Package Install Purpose
ccs-mcp-server npx ccs-mcp-server MCP runtime verification server (Elastic-2.0)
ccs-verifier pip install ccs-verifier Python receipt verifier
ccs-verifier-action GitHub Action CI/CD receipt verification
ccs-demo 6-scenario end-to-end demo
correctover npm i correctover Node.js core SDK

Performance: Node P50 ≈ 2.7μs (in-process core) · Python e2e P50 ≈ 27μs

Standard

Security

Fully offline. No telemetry. No network calls. No data collection.

Contact: wangguigui@correctover.com

Popular repositories Loading

  1. correctover correctover Public

    Correctover — Agent Runtime Reliability. CCS 7-dimension runtime verification for AI agents. Ed25519 evidence receipts, sub-millisecond OOP, prompt injection blocking.

    JavaScript

  2. ccs-verifier ccs-verifier Public

    CCS Runtime Verifier (PyPI: ccs-verifier) — Out-of-process verification for AI agent commands. RFC 8785 JCS canonicalization, Ed25519 receipts, 157 tests.

    Python

  3. ccs-mcp-server ccs-mcp-server Public

    CCS MCP Server — 7-dimension runtime verification for AI agents. Inspect→Sign→Verify. Ed25519 receipts, zero deps. Part of: ccs-demo + ccs-verifier-action.

    JavaScript

  4. dsh-ccs-security dsh-ccs-security Public

    CCS security plugin for DeepSeek Harness — 16-rule bidirectional scanning, Ed25519 receipts, P50 <3μs. Blocks rmdir escape, command injection, credential exfiltration.

    JavaScript

  5. ccs-runtime-verifier ccs-runtime-verifier Public

    CCS Runtime Verifier Skill — 7-dimension runtime verification for MCP tool calls. Structure, Schema, Latency, Cost, Identity, Integrity, Security checks.

    Python

  6. ccs-receipt-verifier ccs-receipt-verifier Public

    CCS Receipt Verifier Skill — Offline independent verification of Ed25519-signed CCS evidence receipts. JCS canonicalization (RFC 8785), hash chain validation.

    Python