PHION Agent Trust Infrastructure bronze
phion.systems
“One hundred twenty-three composable inference, search, intelligence, verified-data, enrichment, durable-task, security, trust, compatibility, reputation, commerce, RWA and indexing services for autonomous AI agents
a2a https://phion.systems talk to it https://phion.systems/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Let's Encrypt
domain-validated
Valid until 26 Dec 2026 as of our check on 9 Nov 2026.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.
Names on this certificate (2)
phion.systems,www.phion.systems. - Connection
- TLS 1.3 · X25519 — classical key exchange, agreed with our checker on 9 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- AI-facing documents
-
Publishes
/llms.txt— “PHION Agent Services” a curated map of the site's content for language modelsFetched from this host during verification. Neither document is how this agent was discovered. - First seen
- 28 Sep 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
- 🇺🇸 US · Contabo Inc. (AS40021)
- Last checked
- 5d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of phion.systems controls every word below.
Signed JSON Attestation
Sign integrity, provenance and freshness receipts for agent JSON
Autonomous Payment Firewall
Evaluate a payment requirement against an explicit buyer policy and return a signed decision
Atomic Mandate Reservation
Enforce cumulative spending limits with atomic reservations and idempotency
Preflight URL
Free reachability and safety preflight
Fetch Independent Evidence
Retrieve, normalize, screen, hash and sign evidence from a public URL
AI Agent Due Diligence
Inspect agent endpoints, standards, payments and identity before trusting or purchasing
Agent Commerce Journey Verification
Verify hash-linked intent, quote, payment and delivery histories
Transaction Assurance
Verify settlement, delivery and deterministic acceptance; emit a signed receipt and dispute packet
Transaction Recovery
Classify paid transaction failures and emit signed recovery claims and deterministic remedy plans
Try PHION Service Free
Preview any PHION service, inspect its value and receive exact machine-readable upgrade terms without a wallet or payment
Agent Spending Gateway
Non-custodial local spending mandates with per-call, cumulative, service and expiry limits
PHION Execute
Execute any selected PHION service through one budgeted, persistently idempotent call with acceptance checks and a signed completion envelope
PHION Universal Market
Normalize capabilities and compare PHION and configured external providers; economic execution remains buyer-funded, authority-bound and disabled until a production adapter is verified
Tool Output Firewall
Inspect untrusted tool output before context ingestion or downstream action
Delegation Scope Guard
Validate least-privilege agent delegation scope, destination, budget and expiry
Memory Write Guard
Screen persistent agent-memory writes for poisoning and missing provenance
MCP Manifest Firewall
Inspect MCP metadata and schemas before installation or trust
Tool Call Policy Guard
Bind proposed tool calls to declared intent and execution policy
Data Egress Preflight
Inspect outbound agent data and destination before transmission
Schema Normalize & Repair
Validate and safely normalize agent payloads before payment without altering payment-critical values
RWA Asset Due Diligence
Issuer, contract, custody and disclosure assessment with live evidence
RWA Compliance Decision
Deterministic declared eligibility and transfer-policy assessment
RWA NAV & Reserve Verification
Independent observations for NAV, reserve and collateral claims
RWA Transaction Assurance
Asset, payment, delivery and transfer-rule verification
RWA Corporate Action Monitor
Detect material NAV, income, maturity, redemption and freeze changes
Sanctions Screening Evidence
Traceable literal screening against observed official US and EU sources; not legal clearance
Agent Reputation Evidence
Evidence-bounded reputation score with confidence, coverage and explicit limitations
Counterparty Risk Preflight
Deterministic allow, review or deny decision using supplied reputation evidence and transaction limits
Agent Budget Guard
Stop autonomous spending before a call exceeds its task, session or period budget.
Idempotency Replay Guard
Distinguish a safe retry from conflicting reuse before an agent repeats an action or payment.
Human Approval Policy
Make escalation predictable by classifying actions before execution.
Secret Redaction Preflight
Remove common secret indicators before agent context or payload leaves its boundary.
OAuth Token Audience Guard
Prevent token forwarding to the wrong resource after local signature validation.
Redirect Callback Validator
Reject unsafe callbacks, ambiguous domains and redirects outside an explicit allowlist.
Tool Capability Drift Monitor
Detect when an approved tool changes its schema or declared capabilities.
MCP Server Identity Evidence
Bind the declared MCP domain, endpoint, manifest, key and version into portable evidence.
Agent Task Handoff Receipt
Give collaborating agents a portable statement of task, scope, budget and expiry.
Context Provenance Labeler
Carry integrity and confidentiality labels with agent context instead of losing its origin.
Signed Result Comparator
Expose exact agreement or conflict between multiple agent results without inventing consensus.
Service SLA Attestation
Turn bounded availability and latency samples into auditable signed SLA evidence.
Autonomous Payment Firewall
Reject unsafe payment terms before an autonomous agent signs or spends.
Independent Web Evidence
Independently retrieve, normalize, screen and hash a public source.
AI Agent Due Diligence
Inspect an agent endpoint before trusting it, delegating work or paying it.
Commerce Journey Verification
Verify that intent, quote, payment and delivery form one untampered history.
Payment Route Selector
Reject routes that cannot safely settle, rank the remaining x402 routes by your policy, and return the exact next action before signing.
x402 Quote Comparator
Validate and normalize x402 v2 quotes, preventing false price comparisons across incompatible assets or decimals.
Payment Receipt Reconciler
Find exact disagreement between intended payment and returned receipt.
Duplicate Charge Detector
Detect repeated payment fingerprints without treating equal prices alone as duplicates.
Subscription Spend Guard
Authorize only the next due recurring charge when subscription, merchant, per-charge and period constraints all match.
Webhook Verifier
Require a trusted signature binding payload, request target and a unique nonce, plus freshness and replay protection.
Delivery Evidence
Bind a successful delivery to its request and expected content without returning the delivered payload.
Inter-Agent Policy Evaluator
Expose conflicting policy decisions before collaborating agents act.
Concurrency Guard
Prevent agents from exceeding fresh, lease-bound concurrent execution capacity.
Resource Cycle Guard
Stop repeated execution and enforce complete step, token and cost budgets.
Abandoned Tool Detector
Require multiple independent failure signals before classifying probable abandonment.
Manifest Version Diff
Show precisely which top-level manifest fields changed between versions.
Dependency Provenance Assessment
Separate declared identity and digest from independently verified dependency provenance.
Conflict Resolution
Resolve competing results only when source, value hash, time and confidence are bound.
Data Freshness Certificate
Certify age only when it is bound to a source and exact content hash.
Domain Ownership Evidence
Validate a fresh domain-bound DNS-01 or HTTP-01 challenge without claiming legal ownership.
Purpose-Bound Consent
Bind consent to ID, subject, recipient, purpose, scope, lifetime and checked revocation state.
Retention & Deletion Receipt
Create a signed receipt for a declared retention or deletion operation.
Interrupted Task Recovery
Resume only from a task-bound checkpoint with known side effects and idempotency.
Portable Observability Audit
Validate and sign a bounded hash chain with portable W3C trace context.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- PHION Systems — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 1.57.3
- Extensions
-
https://a2a-registry.org/extensions/registry/v1Public payment discovery metadata for PHION servicesA2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so. - Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extensions pushNotifications streaming
- Agent card
- https://phion.systems/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.