Unauthorized execution
A request expected to be denied changes simulator state.
OPEN SECURITY VALIDATION PROGRAM
Intelligence is
not permission.
Can a machine prove it had permission before it acted? Run twenty-two executable tests (MPT v0.5) against KineGrant's local authorization gate and verify the JSON evidence independently.
Run the interactive testVerify evidence or receiptDownload challenge packetSubmit an external resultGitHub Release · mpt-v0.1 ↗
09executable cases
12founding slots open
0verified external reports
v0.1experimental draft
01 / THE QUESTION
Ability is not authority.
AI is moving from generating text to controlling robots and devices. KineGrant separates a machine's ability to execute from its authority to act with short-lived, request-bound capabilities, local verification, replay protection, and signed receipts.
No grant. No action. Verifiable receipt.
02 / INTERACTIVE TEST
Don't endorse it.
Try to break it.
This interface mirrors the executable runner. The packet contains the tested source, twenty-two-case runner (MPT v0.5), strict evidence schema, independent verifier, and safe validation rules.
MPT-003 / LOCAL SANDBOXEXPECTED: DENY REPLAY
ATTEMPT
Submit the same capability after its first valid execution.
- 01
first call completed
✓ - 02
capability already consumed
✓ - 03
replay rejected
✓ - 04
count remains one
✓
DECISIONDENY_REPLAY
The second attempt is denied and the actuator count remains one.
03 / WHAT COUNTS
A finding must change the result.
Excess execution
A one-time capability produces more than one state change.
Wrong target
Permission for one target controls another target.
Fail open
Missing or invalid verification information still permits action.
Audit failure
An invalid receipt verifies or an execution cannot be traced.
Policy inconsistency
Identical input and state produce unexplained opposite decisions.
04 / PARTICIPATE
Evidence before attention.
Download
Get the commit-bound challenge packet and verify its SHA-256.
Download packet ↓Run with no setup
Open the checked-in Python 3.12 environment. It installs, generates the source-bound packet, and verifies it.
Open in Codespaces ↗Reproduce independently
Generate a source-bound report and checksum, run the independent verifier, then publish PASS or FAIL.
Open reproduction request →Release commit 0e84cd2b53e8bfe0b8c147fb9feb62c91aac30ed
Packet SHA-256 9ac9803bc2691e9e1a6b0a6ffef698d28dceff076f414c6f92c0fcd0577951b0
Reference evidence · All checksums · Release notes · Source-bound reproduction packet
05 / FOUNDING IMPLEMENTERS
12 permanent early contribution records.
Numbers cannot be bought, reserved, or transferred. They do not represent equity, investment returns, certification, or endorsement. A number is assigned only after a reproducible external implementation, accepted adapter, confirmed issue, or adopted technical proposal.
01OPEN
02OPEN
03OPEN
04OPEN
05OPEN
06OPEN
07OPEN
08OPEN
09OPEN
10OPEN
11OPEN
12OPEN
06 / SAFE SCOPE
Challenge the protocol, not the public.
IN SCOPE
- Official local simulator
- Your own isolated instance
- Low-power LED or desktop prop you own
- Generated test identities and keys
- Minimal, privacy-safe evidence
OUT OF SCOPE
- Vehicles, drones, boats, or transport
- Industrial, medical, energy, or water systems
- Door locks, access control, elevators, or alarms
- Weapons, dangerous tools, or high-power actuators
- Third-party devices, accounts, networks, or production systems
KGP-001 is an experimental open draft, not a recognized standard or safety certification. Do not deploy v0.1 as the sole control for hazardous machinery.
MACHINE PERMISSION TEST