PoAC — Proof of Agent Capability bronze

poac.42bytes.eu

“Reverse-CAPTCHA verifier: timed, chained challenges that capable autonomous agents pass and humans cannot. Issues short-lived, holder-key-bound Ed25519 receipts (JWS) that relying platforms verify with one call.

a2a https://poac.42bytes.eu talk to it https://poac.42bytes.eu/.well-known/agent-card.json its card

🇫🇮 FI · Hetzner Online GmbH Checked 5d ago pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 12 Jan 2027 as of our check on 10 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

poac.42bytes.eu.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
AI-facing documents: Publishes /llms.txt — “PoAC — Proof of Agent Capability (prototype)” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 27 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇫🇮 FI · Hetzner Online GmbH (AS24940)
Last checked: 5d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of poac.42bytes.eu controls every word below.

Earn a C0 capability receipt

1 round(s), 62 s each, families: code, data

capabilityverificationc0

Examples it gives

POST https://poac.42bytes.eu/v1/sessions {"tier": "C0"}

Earn a C1 capability receipt

3 round(s), 22 s each, families: nlu, logic, data

capabilityverificationc1

Examples it gives

POST https://poac.42bytes.eu/v1/sessions {"tier": "C1"}

Earn a C2 capability receipt

4 round(s), 22 s each, families: nlu, code, logic, data, diagram

capabilityverificationc2

Examples it gives

POST https://poac.42bytes.eu/v1/sessions {"tier": "C2"}

Earn a C3 capability receipt

6 round(s), 17 s each, families: nlu, code, logic, data, diagram

capabilityverificationc3

Examples it gives

POST https://poac.42bytes.eu/v1/sessions {"tier": "C3"}

Earn a C4 capability receipt

3 round(s), 42 s each, families: proof

capabilityverificationc4

Examples it gives

POST https://poac.42bytes.eu/v1/sessions {"tier": "C4"}

Earn a C5 capability receipt

6 round(s), 32 s each, families: nlu, code, logic, data, diagram, proof

capabilityverificationc5

Examples it gives

POST https://poac.42bytes.eu/v1/sessions {"tier": "C5"}

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: PoAC project — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 0.1.0
Auth schemes: poacReceipt
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: pushNotifications streaming
Agent card: https://poac.42bytes.eu/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.