Robin Saige we check the tools AI agents call

OpenWarrant — Document Verification Suite

sh.stipple/openwarrant

Document forensics: tamper/AI checks, extract, identity, PII, adverse media. No API key needed.

— the operator's own registry description reported

Publisher sh.stipple · first seen 2026-08-12 · endpoint https://www.stipple.sh/mcp

allow
verdict
mid-slow-shared
cluster
ok_tools
answers
12
tools served

Dependency rating derived

allow — mid-slow-shared — safe to depend on

Cluster mid-slow-shared · distinctiveness 0.571 (moderate). Every figure is a percentile or class within the 11,094-server censussee the whole spectrum.

Reach — can an agent get to it?
answersalive_tools
latency493 ms
vs populationslow
protocolcurrent
authopen
Use — can it use it?
tools12
vs populationmid
capabilities4
harnessB
Trust — can it rely on it?
identityshared
servers on its host3
verifiabilityunassessed
duplicate inventoryno
drift events0
answers true0/0 agree

🔏 Signed receipt rr_8fee8868bab9077352c1c400 · ed25519 · key rs-rcpt-2026-08 — this rating is tamper-evident; an agent gets the full signature from check_server and can verify it against the published key.

What kind of tools these are derived

Verification only means something relative to a tool's NATURE — an email-sender has no "true answer", a generator has no answer key. Classification evidence: classified from tool names/descriptions/annotations WE OBSERVED. What checking applies to each kind (the full methodology →):

naturetoolsmeaning what checking applies
action7changes the worldno true answer exists; we check the CONTRACT (destructive/read-only/idempotent declarations, error legibility) and never fire real actions
computational2deterministic transformsself-checkable by re-computation and known-answer tests
retrieval-public2serves public factstruth-checkable against a public source — the V-ladder applies in full
generative1creates contentno answer key exists; disclosure + stability checks, never truth verdicts

Tools last seen

check_document check_pack classify_document detect_ai_text extract_fields get_warrant redact_pii screen_adverse_media submit_feedback verify_document verify_identity verify_references

Harness readiness observed

Can an agent's harness pick this tool and call it correctly? Graded on the three things an agent reads — name, description, typed parameters. Band B — usable, with rough edges.

legibility checktools passingok
name is clear & specific12/12
has a description12/12
description is substantive12/12
parameters are typed12/12
parameters are described0/120/12

12 of 12 tools graded · 12 with a captured input schema. RS-008, Tier-1 — no domain knowledge, applies to any tool. “Alive” is not the same as “usable”.

Truth checks observed

0/0 answers agree with the published primary source · 2 unverifiable.

claim classkeyverdictprimary source
OFAC SDN screening (vs the official list)ISLAMIC REVOLUTIONARY GUARD CORPSunverifiableofac-sdn
OFAC SDN screening (vs the official list)MAERSK LINEunverifiableofac-sdn

Protocol conformance observed

2025-06-18
protocol version
session model
1.27.2
server version stipple

Capabilities: experimental prompts resources tools

Drift

No confirmed drift on record. Baseline set 2026-08-14; changes appear here after human review.

History observed

Every probe we made, oldest → newest (2 shown, 2026-08-12 → 2026-08-14). Green answered · amber answered-but-walled · red no useful answer. A gap in our cadence is a gap in coverage, not evidence about the server.

changelog (1 events)
datetypewhat changed
2026-08-12outcomefirst probe: ok_tools
raw probe records
probed (UTC) outcomehttpmsprotocol
2026-08-14T20:00:43Zok_tools2004932025-06-18
2026-08-12T05:35:57Zok_tools2004862025-06-18

Watch or embed this verdict

verdict badge

Operators: put the live verdict in your README — it updates with every census, links back here, and is a dated observation, never a warranty:

[![Robin Saige verdict](https://robinsaige.com/badge/sh.stipple/openwarrant.svg)](https://robinsaige.com/s/sh.stipple/openwarrant)

Depend on it? Subscribe to its change feed — outcome changes and confirmed drift, no account needed. Building on it? The full dossier as JSON — verdict, rating, truth checks, history — stable enough to gate CI on.

← overview