Unauthorized execution
A request expected to be denied changes simulator state.
OPEN SECURITY VALIDATION PROGRAM
Intelligence is
not permission.
Can a machine prove it had permission before it acted? Run nine executable tests against KineGrant's local authorization gate and verify the JSON evidence independently.
Run the interactive testVerify evidence or receiptDownload challenge packetSubmit an external resultGitHub Release · mpt-v0.5 ↗
22executable cases
12founding slots open
0verified external reports
v0.5experimental draft
01 / THE QUESTION
Ability is not authority.
AI is moving from generating text to controlling robots and devices. KineGrant separates a machine's ability to execute from its authority to act with short-lived, request-bound capabilities, local verification, replay protection, and signed receipts.
No grant. No action. Verifiable receipt.
02 / INTERACTIVE TEST
Don't endorse it.
Try to break it.
This interface mirrors the executable runner. The packet contains the tested source, 22-case runner, strict evidence schema, independent verifier, and safe validation rules.
MPT-003 / LOCAL SANDBOXEXPECTED: DENY REPLAY
ATTEMPT
Submit the same capability after its first valid execution.
- 01
first call completed
✓ - 02
capability already consumed
✓ - 03
replay rejected
✓ - 04
count remains one
✓
DECISIONDENY_REPLAY
The second attempt is denied and the actuator count remains one.
03 / WHAT COUNTS
A finding must change the result.
Excess execution
A one-time capability produces more than one state change.
Wrong target
Permission for one target controls another target.
Fail open
Missing or invalid verification information still permits action.
Audit failure
An invalid receipt verifies or an execution cannot be traced.
Policy inconsistency
Identical input and state produce unexplained opposite decisions.
04 / PARTICIPATE
Evidence before attention.
Download
Get the commit-bound challenge packet and verify its SHA-256.
Download packet ↓Run with no setup
Open the checked-in Python 3.12 environment. It installs, generates the source-bound packet, and verifies it.
Open in Codespaces ↗Reproduce independently
Generate a source-bound report and checksum, run the independent verifier, then publish PASS or FAIL.
Open reproduction request →Release commit 304fe33a4050af22dd20a2597afc368f6f57946e
Packet SHA-256 3757ecc35161c9751bbd3cdb039c8e0a40eb1be39d7d52eeca97bc6f96d2695e
Reference evidence · All checksums · Release notes · Source-bound reproduction packet
05 / FOUNDING IMPLEMENTERS
12 permanent early contribution records.
Numbers cannot be bought, reserved, or transferred. They do not represent equity, investment returns, certification, or endorsement. A number is assigned only after a reproducible external implementation, accepted adapter, confirmed issue, or adopted technical proposal.
01OPEN
02OPEN
03OPEN
04OPEN
05OPEN
06OPEN
07OPEN
08OPEN
09OPEN
10OPEN
11OPEN
12OPEN
06 / SAFE SCOPE
Challenge the protocol, not the public.
IN SCOPE
- Official local simulator
- Your own isolated instance
- Low-power LED or desktop prop you own
- Generated test identities and keys
- Minimal, privacy-safe evidence
OUT OF SCOPE
- Vehicles, drones, boats, or transport
- Industrial, medical, energy, or water systems
- Door locks, access control, elevators, or alarms
- Weapons, dangerous tools, or high-power actuators
- Third-party devices, accounts, networks, or production systems
KGP-001 is an experimental open draft, not a recognized standard or safety certification. Do not deploy the current draft as the sole control for hazardous machinery.
MACHINE PERMISSION TEST