{
  "schema_version": "hekate.registry_evidence.v1",
  "generated_at": "2026-05-24T00:00:00.000Z",
  "service_id": "hekate-lite",
  "service_name": "Hekate Lite",
  "category": "agent_callable_preflight_api",
  "status": "private_beta",
  "profile_url": "https://hekategate.com/registry/hekate-lite",
  "evidence_url": "https://hekategate.com/registry/evidence/hekate-lite.json",
  "decision_surface": [
    "allow",
    "warn",
    "block"
  ],
  "gate": "MCP preflight, x402 preflight, permissions diff, tool-chain risk, receipt verification, Sage/Ergo checks",
  "receipt_support": "agentsec.security_preflight.v1; Ed25519 signer ready when HEKATE_RECEIPT_* env is configured",
  "checks": [
    {
      "name": "MCP",
      "description": "Inline MCP/tool manifest scanner with dangerous verb, signer, secret, external-output, and tool-chain checks."
    },
    {
      "name": "x402",
      "description": "Price, network, recipient, HTTPS hygiene, sensitive input, and receipt-support checks."
    },
    {
      "name": "Permissions",
      "description": "Requested scopes compared to declared task with minimal-scope recommendations."
    },
    {
      "name": "Receipts",
      "description": "AgentSec-compatible receipt verification and trust bundle discovery."
    }
  ],
  "evidence_refs": [
    "https://hekategate.com/.well-known/hekate.json",
    "https://hekategate.com/openapi.json",
    "https://hekategate.com/examples",
    "https://hekategate.com/security/readiness"
  ],
  "known_risks": [
    {
      "name": "Signer env",
      "description": "Live web receipts remain none.private_beta.v1 until HEKATE_RECEIPT_ED25519_PRIVATE_KEY_PEM is configured."
    },
    {
      "name": "Remote MCP fetch",
      "description": "Public web runtime does not fetch arbitrary remote manifests; submit manifests inline."
    },
    {
      "name": "Mainnet",
      "description": "Mainnet claims are blocked until real custody, proof, and external review exist."
    }
  ],
  "mainnet_certification": "not_certified",
  "claim_boundary": "Private-beta preflight signal. Not a guarantee of agent safety, legal/compliance review, mainnet certification, or enterprise production certification."
}