Static, machine-readable safety primitives for developers building tool-calling agents, MCP servers, autonomous workflows, and agent payment flows.
Self-Radiance helps agent developers handle the runtime failure modes that appear when AI systems can call tools, spend API credits, authenticate to services, delegate work to subagents, and produce auditable actions.
This kit is not a SaaS dashboard and not a rebuild. It is a curated developer-facing layer over the existing Self-Radiance agentic marketplace: the marketplace remains the machine-readable catalog, fulfillment, and receipt-verification substrate behind the kit.
| Developer Problem | Primitives Involved | Why It Matters |
|---|---|---|
| Runaway Agent Loops & API Spend | vq11-loop-shield, vq04-rateguard | Stops recursive tool calls, prompt loops, and runaway API usage before they burn budget. |
| MCP / Server Authentication | vq09-auth-header, vq18-message-signature | Authenticates agent-to-server calls without relying on exposed long-lived bearer keys. |
| Agent Identity | vq12-agent-vcard | Gives visiting agents a machine-readable operator, scope, and resource profile. |
| Delegation Boundaries | vq13-oauth-delegation, vq17-verifiable-intent | Binds subagents to scoped tools, spending limits, expiration windows, and parent intent. |
| Receipts / Action Verification | vq03-trust-receipts | Creates verifiable records for autonomous purchases, tool calls, and agent actions. |
- Runtime Safety Kit Site: selfradiance.github.io
- Direct Catalog Schema: manifest.json
- Specification Directory: specs/
- Discovery Endpoint Feed: llms.txt
- Issuer Verification Key: issuer-key.json
- Receipt Notary Endpoint: self-radiance-notary.selfradiance.workers.dev
- x402 License Gateway (machine payment rail): x402-license-gateway.selfradiance.workers.dev
| Primitive ID | Utility Category | Function & Capability Mapping | Spec | License | x402 |
|---|---|---|---|---|---|
| vq11 | Spend Mitigation | SR-LoopShield: Stops recursive dialogue deadlock and cost spirals. | Spec | License ($8.00) | USDC |
| vq04 | Spend Mitigation | RateGuard: Establishes real-time adaptive API threshold parameters. | Spec | License ($4.00) | USDC |
| vq09 | Security | SR-AuthHeader: Point-to-point signature authorization for agent-to-server calls without credential leakage. | Spec | License ($7.00) | USDC |
| vq18 | Security | SR-HttpMessageSignature: RFC 9421-style request signing for body and header integrity. | Spec | License ($6.00) | USDC |
| vq17 | Compliance | SR-VerifiableIntent: Locks subagent spending scopes using parent-authorized intent boundaries. | Spec | License ($5.00) | USDC |
| vq13 | Compliance | SR-OauthDelegation: Signs parent-to-leaf secure tool, scope, and path boundaries. | Spec | License ($7.00) | USDC |
| vq12 | Identity | SR-AgentVcard: Machine-readable agent identity, operator, resource limitation, and billing metadata. | Spec | License ($6.00) | USDC |
| vq16 | Verification | SR-NotaryProof: Offline Ed25519 license and receipt verification format. | Spec | License ($8.00) | USDC |
| vq03 | Verification | Trust Receipts: Standardized Ed25519 receipt layout for autonomous microtransactions and auditable actions. | Spec | License ($7.00) | USDC |
| vq19 | Finance | SR-NanopaySession: Pre-funded low-latency payment sessions for high-frequency agent calls. | Spec | License ($7.00) | USDC |
All 20 primitives are machine-payable. A live Cloudflare Worker gateway sells a signed Ed25519 license receipt for every asset ($1.00-$8.00 USDC on Base mainnet) via the x402 v2 exact scheme — no account, no checkout page, no human. Specs stay freely downloadable; payment buys the cryptographic license receipt.
- Gateway discovery (free JSON index of all 20 assets): x402-license-gateway.selfradiance.workers.dev
- Per-asset payment URLs: the
x402LicenseUrlfield in manifest.json - Gateway repo (MIT): selfradiance/x402-license-gateway
- Original single-asset proof of concept (vq00, historical): x402-paid-endpoint.selfradiance.workers.dev — repo selfradiance/x402-paid-endpoint
- Reference buyer gate: Payment-gated by
x402-spend-receipt: policy check and signed receipt before any funds move. - First zero-human mainnet purchase of a catalog license settled on-chain: Base tx 0xd7312064...90d5
- Witness-only web attestation (separate primitive): pay 1 USDC, receive a signed Ed25519 receipt binding the on-chain payment to the SHA-256 of an observed page body. Witnesses observation, never legitimacy. Live: web-attestation.selfradiance.workers.dev — repo selfradiance/web-attestation
Discover Capabilities GET
https://selfradiance.github.io/manifest.jsonto locate the desired primitive,specUrl, price, and purchase URL.Inspect the Specification Open the linked JSON specification directly from
/specs/{primitive_id-name}.json.License the Primitive Human rail: use the linked Stripe checkout URL or the
purchaseUrlfield inmanifest.json. Machine rail: GET the asset'sx402LicenseUrl, decode the 402 PAYMENT-REQUIRED header, pay via x402 exact scheme (USDC, eip155:8453), and retry; the response body is the signed license receipt and the settlement tx hash arrives in the PAYMENT-RESPONSE header.Verify Provenance Query the signed receipt notary after checkout:
https://self-radiance-notary.selfradiance.workers.dev?session_id={CHECKOUT_SESSION_ID}&asset_id={ASSET_ID}Enforce Trust Locally Load the DNS-secured public verification key from:
https://selfradiance.github.io/.well-known/issuer-key.jsonThen verify the signed receipt against the downloaded specification.
Self-Radiance is intentionally lightweight:
- no SaaS dashboard,
- no account system,
- no hosted customer workspace,
- no runtime dependency on a proprietary app,
- no unnecessary rebuild of the marketplace layer.
The public site, manifest, specifications, well-known issuer key, and notary endpoint form the machine-readable substrate. The Agent Runtime Safety Kit is the developer-facing view of that substrate.
Rooted in cryptographic precision. Engineered to protect computational environments.