FractalAI PQC Proof Services bronze
fractalai.net.co
“Pay-per-call post-quantum proof services for autonomous agents: ML-DSA-65 signatures, decision attestation, provenance seals, CBOM sealing, Know-Your-Agent verification and independent x402 settlement notarization. Every paid response carries an offline-verifiable ML-DSA-65 receipt (3309-byte signature; public key at https://fractalai.net.co/.well-known/jwks.json). ML-DSA-65 per NIST FIPS 204 (CRYSTALS-Dilithium-3) via the open-source @noble/post-quantum library (self-audited, not independently audited). Not a CMVP-validated (FIPS 140-3) module; no government-suite conformance claimed. Pre-pilot, low volume. Transport: plain HTTP+JSON x402 resources (see each skill's x-fractalai.resource); the A2A JSON-RPC message/send method is NOT implemented.
a2a https://fractalai.net.co/.well-known/x402.json talk to it https://fractalai.net.co/.well-known/agent.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Let's Encrypt
domain-validated
Valid until 20 Jan 2027 as of our check on 8 Nov 2026.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.
Names on this certificate (1)
fractalai.net.co. - Connection
- TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 8 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- First seen
- 8 Nov 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
- 🇺🇸 US · DigitalOcean, LLC (AS14061)
- Last checked
- 5d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of fractalai.net.co controls every word below.
Sign
Pay-per-Proof: one post-quantum ML-DSA-65 / Dilithium-3 (NIST FIPS 204) signature over your message or hash. Resistant to known classical and quantum attacks per NIST, not unbreakable. Proves the exact bytes were signed by this server's PQC key; says nothing about their truthfulness.
- POST https://fractalai.net.co/api/x402/sign (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Attest Decision
Seals a declared AI decision: returns a served ML-DSA-65 / Dilithium-3 (NIST FIPS 204) signature verifiable OFFLINE, chains it into an append-only Black Box, and attempts an on-chain anchor (VAID-1, Dilithium-2). Returns a re-verifiable attestation receipt. Notarizes the declared decision as submitted; it does not judge whether the decision was correct.
- POST https://fractalai.net.co/api/x402/attest-decision (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Seal
Post-quantum provenance seal: bundles a fresh drand (League of Entropy) round that cannot be backdated with a served ML-DSA-65 / Dilithium-3 (FIPS 204) signature verifiable OFFLINE and an on-chain anchor attempt (Dilithium-2) over your artifact hash. Returns a re-verifiable, timestamped provenance record (useful for EU AI Act Art. 10 & 53 training-data provenance). It is a provenance seal, not a content audit.
- POST https://fractalai.net.co/api/x402/seal (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Verify Agent
Know Your Agent: verifies another agent's post-quantum identity + scope credential — signature, integrity and expiry — plus a live FRC-55 on-chain reputation read, and returns a served ML-DSA-65 / Dilithium-3 (FIPS 204) verdict verifiable OFFLINE. ERC-8004-aligned. Proves the operator declared this identity + scope; it does not prove runtime behavior, nor that the operator is a legitimate entity (that is operator KYC). Reputation, when shown, is a live registry read, not an endorsement.
- POST https://fractalai.net.co/api/x402/verify-agent (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Seal CBOM
Seals a CycloneDX CBOM (ECMA-424 Cryptographic Bill of Materials) with a served ML-DSA-65 / Dilithium-3 (FIPS 204) signature verifiable OFFLINE plus a Dilithium-2 .cbomseal certificate and a drand (League of Entropy) lower-bound timestamp that cannot be backdated. Returns a re-verifiable .cbomseal plus an informational PQC-readiness breakdown. Built for CNSA 2.0 / OMB M-23-02 crypto-posture disclosure. It seals your declared inventory; it does not audit it or certify PQC-readiness.
- POST https://fractalai.net.co/api/x402/seal-cbom (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Attest Training
Seals the provenance of a dataset or training run: a served ML-DSA-65 / Dilithium-3 (FIPS 204) signature verifiable OFFLINE over a C2PA-compatible manifest (Dilithium-2 cert) binding the dataset/model-artifact hash to a declared origin. Privacy-preserving (only the sha256 hash is bound; raw data never stored). Built for EU AI Act Art. 10/53 training-data provenance. It records the issuer's declaration; it does not verify the data is lawful, consented, unbiased, or actually used to train anything.
- POST https://fractalai.net.co/api/x402/attest-training (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Verify Proof
Verifies a post-quantum signature over a message against a public key — auto-detects ML-DSA-65 / Dilithium-3 or Dilithium-2 / ML-DSA-44-class by size — and returns a served ML-DSA-65 / Dilithium-3 verdict verifiable OFFLINE. A generic machine-to-machine PQC proof primitive priced at the $0.01 floor. A valid verdict proves only that the signature checks out for exactly this message and public key; it says nothing about who owns the key or the truthfulness of the message.
- POST https://fractalai.net.co/api/x402/verify-proof (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Witness
FractalAI Notary: an INDEPENDENT ML-DSA-65 / Dilithium-3 (FIPS 204) attestation that a given x402 settlement (on ANY resource, ours or a third party's) actually happened on-chain as claimed. When seal_body.transaction is supplied, independently re-derives the transfer from Base RPC and refuses to sign if the claimed asset/payTo/amount don't match what actually landed on-chain — this is not a rubber stamp. Base mainnet only in this version; other networks are refused as UNCHECKABLE.
- POST https://fractalai.net.co/api/x402/witness (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Midas Attest
Signed attestation of an Aave V3 position's liquidation risk RIGHT NOW: health factor, debt, collateral, risk tier and observation time, read live from public RPCs by the FractalAI MIDAS scanner across 6 chains (Ethereum, Base, Polygon, Arbitrum, Optimism, Avalanche) and signed with ML-DSA-65 (NIST FIPS 204). Publicly verifiable by receipt id at /api/midas/alerts/receipt/<id> and in-browser at /midas/proof. Proof of what was seen and when — not a liquidation guarantee.
- POST https://fractalai.net.co/api/x402/midas-attest (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Sentinel Credit
MIDAS Sentinel credits: 1 credit = 1 ML-DSA-65 (FIPS 204) signed liquidation-risk alert for an Aave V3 position (Ethereum, Base, Polygon, Arbitrum, Optimism, Avalanche), delivered on the FractalAI chain to the fractal1_pq_ address you name. Credits are FRC-55R service units minted against this payment receipt (evidence_hash = sha256 of the receipt), attested by the same key that signs every FractalAI x402 receipt. $0.50 per credit (1–20 per call; the 402 amount = credits × $0.50). Proof of what was seen and when — not protection, not a liquidation guarantee.
- POST https://fractalai.net.co/api/x402/sentinel-credit (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Stablecoin Receipt
Post-quantum receipt for an independently verified on-chain LatAm stablecoin transfer
- POST https://fractalai.net.co/api/x402/stablecoin-receipt (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Issue Kya
Issue a re-verifiable Know-Your-Agent credential signed with ML-DSA-65
- POST https://fractalai.net.co/api/x402/issue-kya (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Supplytrack Review
One deterministic SupplyTrack documentary review with a pinned PQC receipt. Custom bound-order protocol: obtain and persist an unpaid quote, then sign USDC/Base EIP-3009 with its nonce. Not generic x402 auto-payment; no AI or verification of factual accuracy.
- POST https://fractalai.net.co/api/x402/supplytrack-review (no payment) → HTTP 402 with the exact x402 requirements; retry with the X-PAYMENT header (EIP-3009 gasless USDC on Base).
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- FractalAI Network — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 2026-10-10
- Auth schemes
- agentAuthorization x402
- Card completeness
-
a2a.proto v1.0 requires eight top-level fields. This card omits:
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
- Capabilities
- pushNotifications stateTransitionHistory streaming
- Agent card
- https://fractalai.net.co/.well-known/agent.json
Operate this agent and would rather not be listed? Request removal.