AIBITIOUS 404 LAB - 32 Free Agent Experiments

Resolve one CVE identifier (e.g. CVE-2024-3094) using NIST NVD records. This tool does not execute code, scan targets, or accept arbitrary URLs.

Opt-in report of a PUBLIC missing-data topic, never include private data or secrets.

Validate one JSON object against a SAFE subset of JSON Schema. No remote refs. Offline.

Find missing fields, ragged CSV rows and duplicate key values; no raw rows are stored.

Independently recalculate invoice arithmetic, NOT legal/tax compliance. Synthetic data only.

Detect probable token patterns without returning or storing secret values. Never send real secrets.

Static OpenAPI 3.x lint: missing operation IDs, responses and malformed operations. Offline.

Check a candidate MCP server.json metadata structure; this is NOT official validation.

Assess supplied HTTP security response headers. No network or live website probe.

Evaluate supplied robots.txt for one agent/path. Not a legal scraping permission.

Compare JSON object shapes for added, deleted or changed field types. Offline.

Dry-run one proposed tool action against explicit allow/deny/approval rules; no enforcement.

Plan reverse-order compensations for a supplied workflow DAG; never execute actions.

Find duplicate, failed and rate-limited deliveries from supplied HTTP status metadata.

Check whether supplied claim references reach at least one declared source; not fact checking.

Check declared fields, retention and model transfer against a supplied local policy.

Find newly granted permissions outside an approved set. Offline check. Supply payload like {"before":["read"],"after":["read","send"],"approved_additions":[]}. Advisory result only.

Find missing or expired fields before seeking human approval. Offline check. Supply payload like {"now_unix":100,"action":{"actor":"agent","tool":"mail.send","target":"draft1","effect":"send","reason":"owner_request","expiry_unix":200}}. Advisory result only.

Check worst-case proposed cost against a local hard budget. Offline check. Supply payload like {"limit_usd":"0","spent_usd":"0","reserved_usd":"0","proposed_worst_case_usd":"0"}. Advisory result only.

Preview capped exponential retries against a deadline. Offline check. Supply payload like {"attempts":3,"first_delay_seconds":2,"max_delay_seconds":10,"deadline_seconds":30}. Advisory result only.

Find duplicate attempts and conflicting key reuse. Offline check. Supply payload like {"calls":[{"idempotency_key":"k1","payload_fingerprint":"hash1"},{"idempotency_key":"k1","payload_fingerprint":"hash1"}]}. Advisory result only.

Check whether all declared evidence prerequisites are present. Offline check. Supply payload like {"requirements":[{"id":"deploy","evidence_refs":["ci"]}],"available_evidence":["ci"]}. Advisory result only.

Flag stale observations before an agent acts. Offline check. Supply payload like {"now_unix":200,"records":[{"id":"health","observed_unix":100,"ttl_seconds":120}]}. Advisory result only.

Find claims with missing or unknown citation identifiers. Offline check. Supply payload like {"claims":[{"id":"claim1","citation_refs":["src1"]}],"citations":["src1"]}. Advisory result only.

Identify downstream consumers broken by changed fields. Offline check. Supply payload like {"before":{"id":1},"after":{},"consumers":[{"id":"client","required_fields":["id"]}]}. Advisory result only.

Generate bounded edge cases from simple field constraints. Offline check. Supply payload like {"fields":[{"name":"count","type":"integer","minimum":0,"maximum":10}]}. Advisory result only.

Measure error-budget burn against a supplied target. Offline check. Supply payload like {"target_percent":"99","total":1000,"bad":20,"alert_burn_rate":2}. Advisory result only.

Project backlog and drain time from supplied rates. Offline check. Supply payload like {"backlog":100,"incoming_per_hour":10,"capacity_per_hour":20,"horizon_hours":4}. Advisory result only.

Find sensitive targets reachable through declared capability edges. Offline check. Supply payload like {"start":"agent","edges":[{"from":"agent","to":"secret"}],"sensitive_targets":["secret"]}. Advisory result only.

Select prioritized context chunks inside a token limit. Offline check. Supply payload like {"max_tokens":100,"chunks":[{"id":"source1","tokens":40,"priority":10}]}. Advisory result only.

Require named checks to be green before a release. Offline check. Supply payload like {"required":["test"],"checks":[{"id":"test","status":"success"}]}. Advisory result only.

Compare expected and observed resource manifests. Offline check. Supply payload like {"expected":{"version":"1"},"observed":{"version":"2"}}. Advisory result only.

Check links in a supplied digest receipt chain. Offline check. Supply payload like {"root_sha256":"0000000000000000000000000000000000000000000000000000000000000000","receipts":[{"previous_sha256":"0000000000000000000000000000000000000000000000000000000000000000","sha256":"1111111111111111111111111111111111111111111111111111111111111111"}]}. Advisory result only.