Status & trust

Project status

• StageEarly. Synthe is the trust layer for AI agents. Its checker, integrations and commit broker are published at github.com/rohansiddam/Synthe. The spec, checker, clients and integrations are open source under Apache-2.0. The commit broker is source-available under FSL-1.1 and in beta, with design partners helping shape it (how it's licensed).
• Public todayThe checker, v0.5: signed handoffs, approvals that pin their target, pinned evidence, wait-for dependencies, exclusive paths, and an exactly-once claim ledger. 1408 public tests pass.
• Public betaThe commit broker, public since October 7, 2026. It holds the credentials, re-checks each action at the moment of commit, pushes with compare-and-swap, and signs a receipt for every allow and every deny. git_push ships first.
• Proven in betaOn a real Mac with real GitHub, every live attack from the agent's account was refused or contained (30 of 30, each one listed), and each of the 13 refusals the broker handled left a signed receipt. The broker ran as its own hidden user, the agent in its own account with no GitHub access, and the setup check passed all 8 of its checks (October 7, 2026).
• Private buildDesign-partner beta. The next release candidate, private commit c83d52a, passed its full test suite on October 19, 2026: 2729 tests on macOS, 2728 on Linux as an ordinary user, and 2667 on Python 3.14, with none failing. These run on code that isn't public yet, so you can't reproduce them until it is.
• ProvenExactly-once claims on real GitHub runners (receipts); all 8 shipped attacks rejected with named reason codes.
• Not yetNo hosted service and no SLA. You run Synthe where your agents run.

What we haven't proven yet

• Model behaviorIn our first run with a real model (an OpenClaw agent), it followed the rules, proposed its push and stopped for approval. One run is not a measurement. A refusal stops the action either way.
• Real-world speedWe only quote speed numbers we measured ourselves, and we haven't measured the overhead against real GitHub pushes yet.
• macOS isolationThe broker's isolation is verified on Linux, with two real users, in Docker, and, since October 7, 2026, on macOS with the setup's own installer. Setup on a fresh Mac by someone new hasn't been timed yet.

What Synthe can't stop

• Approved actionsAn action a human approved will do exactly what was approved. Synthe narrows a compromised sender to that one action; it can't remove it.
• Which model wrote itReceipts prove which key and which connector acted, not which model produced the work.
• Agents that go around itIf an agent still holds its own push rights, the barrier is optional. Take those credentials away.
• Root on the same machineOn a shared laptop in same-user dev mode, Synthe is a seatbelt, not a wall, and every receipt says so. Root, passwordless sudo and the docker group defeat any isolation.

What it is not

• Not a certificateSynthe produces the evidence auditors and underwriters ask for. It doesn't make anyone certified, compliant or insured.
• Not an orchestratorSynthe doesn't run or schedule your agents. It's the commit step for whatever does.
• Not a blockchainNo chain, no tokens, no consensus. Signed packets, a registry, a ledger and hash-chained receipts.
• Not tamper-proofTamper-evident. Synthe detects alteration and names the broken link; it can't stop someone from altering their own copy.
• Not a truth machineIt checks that evidence matches its pinned hash, not that the evidence itself is true.
• Not an endorsementCompany names on the homepage show compatibility only: anything that emits JSON works. No endorsement or partnership is implied.

Your data

• This site collectsNothing on its own. No accounts, no analytics, no cookies, no tracking pixels. Fonts and scripts are served from synthe.live itself, so loading a page sends no request anywhere else.
• The demosThe race, forge, playground and tamper demos run entirely in your browser. Demo keys never leave the tab.
• The partner formRequesting access opens your email app with your request ready to send. Nothing is stored or sent on its own.
• Light or darkIf you pick a theme, the choice is saved in your browser's local storage. It never leaves your device.

Security contact

Found a flaw in the checker, the broker or the threat model? Email rohansiddam@synthe.live first, and give us a chance to fix it before you publish. For anything that isn't a security issue, GitHub issues are fine. Our security.txt says the same.

• Bug bountyNone paid yet. We credit every reporter by name (or not, as you prefer) in the advisory.
• Third-party auditNone yet. When one happens, the firm, the scope and the full report go on this page.
• AdvisoriesNone published so far. Each one will get an ID (SYN-YYYY-NNN) and say what happened, who was affected and what to do.