MODE: PULL DISCOVERYMACHINE SURFACE: /llms.txt /agent-api.json /mcp.json

RUN-TESTED COMPONENT CARDS

Reusable build pieces with the rough edges already found.

Apex is not a GitHub clone or an ad network. It publishes cards for useful code paths and patterns that have been curated into callable contracts with verification notes, freshness, provenance, known boundaries, and revocation status. Source code stays in a private vault; the public product is the card, evidence, contract, and signed wrapper surface.

PUBLIC CARDS YESRAW SOURCE NOSIGNED WRAPPERS YESGITHUB CLONE NO

PULL QUERY

NO PUSH / NO RELAY

CARDS

15 VERIFIED-LAYER RECORDS

Agent Release Readiness Gate

Final conservative release gate that aggregates supplied build, test, secret-scan, license, source-protection, monitoring, and rollback checks.

SIGNED

This is the last stop before promotion: missing required safety checks block the upload instead of relying on agent optimism. Popular dev-card demand opened this as a shared permissionless bounded wrapper.

APEX CARD V2

Saves the final release checklist design that agents usually have to reconstruct for every project.

REMOVES Quality-gate policy, required/recommended check split, and BLOCK/WATCH/PASS output wiring.RISK DATA-ONLY

Built into Apex as a read-only wrapper.Opened as permissionless bounded after observed dev-card demand.Uses conservative defaults for missing checks.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 156MARKDOWN /v1/cards/card_agent_release_readiness_gate.mdORIGIN Apex final card/wrapper promotion gate

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 5 CHECKSRECHECK 2026-08-18

release.readiness-gatequality.block-policyagent.preflight

POST /v1/tools/agent-release-readiness-gate/run with {checks}; returns PASS/WATCH/BLOCK and missing required/recommended checks.

CHANGES /v1/cards/card_agent_release_readiness_gate/changesREVOCATIONS /v1/revocations?card_id=card_agent_release_readiness_gate

OPEN CARD

Agent n8n Workflow Blueprint

Read-only n8n automation planner that turns a goal into a workflow skeleton with triggers, approval gates, env placeholders, and no external execution.

SIGNED

Lets agents create high-quality automation plans without opening external webhook execution or exposing credentials.

APEX CARD V2

Saves the first n8n workflow design pass by returning trigger, node, approval, and env-placeholder structure.

REMOVES Blank workflow planning, approval-gate placement, webhook contract wording, and secret-boundary drafting.RISK DATA-ONLY

Built into Apex as a signed read-only wrapper.External n8n execution is disabled by default.Secrets are represented as placeholder names only.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 176MARKDOWN /v1/cards/card_agent_n8n_workflow_blueprint.mdORIGIN Apex Map automation route for AI-generated workflow planning

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 5 CHECKSRECHECK 2026-08-18

workflow.n8n-blueprintautomation.designapproval-flowagent.workflow

POST /v1/tools/agent-n8n-workflow-blueprint/run with {goal,trigger,apps,steps,human_approval,secrets_boundary}; returns workflow plan, import JSON skeleton, env placeholders, and safety warnings.

CHANGES /v1/cards/card_agent_n8n_workflow_blueprint/changesREVOCATIONS /v1/revocations?card_id=card_agent_n8n_workflow_blueprint

OPEN CARD

Agent Repo Handoff Packager

Safe handoff package builder that separates publishable files from blocked env, key, database, log, archive, wallet, and backup paths.

SIGNED

Turns a messy repo into an AI-readable handoff without exposing private files or raw source bundles.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex AI handoff and upload-kit generationCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 154MARKDOWN /v1/cards/card_agent_repo_handoff_packager.mdORIGIN Apex AI handoff and upload-kit generation

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 4 CHECKSRECHECK 2026-08-18

repo.handoffsource-protectionupload.packagingsecurity.path-filter

POST /v1/tools/agent-repo-handoff-packager/run with {project,purpose,files,commands,env_vars}; returns safe_files, blocked_files, env names only, and handoff markdown.

CHANGES /v1/cards/card_agent_repo_handoff_packager/changesREVOCATIONS /v1/revocations?card_id=card_agent_repo_handoff_packager

OPEN CARD

Agent Dependency Risk Ranker

Dependency release-risk ranker for supplied package metadata, covering unpinned versions, major-version drift, direct dependencies, and license risk.

SIGNED

Makes AI dependency suggestions safer by ranking the exact packages the agent plans to introduce.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex dependency-change review before wrapper/card releaseCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 146MARKDOWN /v1/cards/card_agent_dependency_risk_ranker.mdORIGIN Apex dependency-change review before wrapper/card release

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 MED ROT 4 CHECKSRECHECK 2026-08-18

dependency.risk-rankingsupply-chain.preflightlicense.policy

POST /v1/tools/agent-dependency-risk-ranker/run with {dependencies}; returns ranked risk scores, reasons, and release decision.

CHANGES /v1/cards/card_agent_dependency_risk_ranker/changesREVOCATIONS /v1/revocations?card_id=card_agent_dependency_risk_ranker

OPEN CARD

Agent DB Schema Inspector

Read-only schema metadata inspector that catches missing primary keys, audit timestamps, id-like columns without indexes, and sensitive column risks.

SIGNED

Helps agents review migration quality without connecting to a live database.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex migration/card QA before AI proposes DB changesCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 153MARKDOWN /v1/cards/card_agent_db_schema_inspector.mdORIGIN Apex migration/card QA before AI proposes DB changes

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 4 CHECKSRECHECK 2026-08-18

database.schema-inspectionmigration.preflightsecurity.sensitive-column-check

POST /v1/tools/agent-db-schema-inspector/run with {tables}; returns PASS/REVIEW/BLOCK and schema issues from supplied metadata only.

CHANGES /v1/cards/card_agent_db_schema_inspector/changesREVOCATIONS /v1/revocations?card_id=card_agent_db_schema_inspector

OPEN CARD

Agent Test Plan Builder

Change-aware test checklist builder that maps supplied release notes to unit, typecheck, build, API, DB, i18n, visual, and security checks.

SIGNED

Forces AI agents to name the tests that match the actual change instead of using one generic command for everything.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex code-change QA planning before deployCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 130MARKDOWN /v1/cards/card_agent_test_plan_builder.mdORIGIN Apex code-change QA planning before deploy

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 3 CHECKSRECHECK 2026-08-18

qa.test-planrelease.preflightagent.workflow

POST /v1/tools/agent-test-plan-builder/run with {changes,risk_level?}; returns recommended_tests and release gate hint.

CHANGES /v1/cards/card_agent_test_plan_builder/changesREVOCATIONS /v1/revocations?card_id=card_agent_test_plan_builder

OPEN CARD

Agent Dockerfile Lint

Static Dockerfile best-practice lint that catches unpinned bases, curl-pipe-shell installs, baked-in secrets, root users, ADD misuse, SSH exposure, and missing HEALTHCHECK before an image ships.

SIGNED

Turns the usual container-hardening checklist into a deterministic gate agents can run before docker build, with secret literals redacted in every finding.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex container image review before rebuilding agentbbs servicesCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 165MARKDOWN /v1/cards/card_agent_dockerfile_lint.mdORIGIN Apex container image review before rebuilding agentbbs services

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-06 LOW ROT 4 CHECKSRECHECK 2026-08-18

container.dockerfile-lintrelease.preflightsecurity.hardeningagent.preflight

POST /v1/tools/agent-dockerfile-lint/run with {dockerfile}; returns decision (PASS/REVIEW/BLOCK), counts, and redacted findings with line numbers and recommendations.

CHANGES /v1/cards/card_agent_dockerfile_lint/changesREVOCATIONS /v1/revocations?card_id=card_agent_dockerfile_lint

OPEN CARD

Agent Log Triage

Redacting log triage wrapper that groups supplied error logs by severity and repeated failure patterns for quick agent debugging.

SIGNED

Gives agents fast signal from logs while reducing the chance of leaking tokens or connection strings.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex deployment/debug review before publishing fixesCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 135MARKDOWN /v1/cards/card_agent_log_triage.mdORIGIN Apex deployment/debug review before publishing fixes

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 4 CHECKSRECHECK 2026-08-18

logs.triagedebugging.error-patternssecurity.redactionagent.preflight

POST /v1/tools/agent-log-triage/run with {logs? or text?}; returns severity, top_patterns, and redacted short samples.

CHANGES /v1/cards/card_agent_log_triage/changesREVOCATIONS /v1/revocations?card_id=card_agent_log_triage

OPEN CARD

Agent Data Profile

Shape-only profiler for supplied tabular rows that reports columns, types, null counts, unique counts, and numeric ranges without returning raw samples.

SIGNED

Lets agents understand data quality without copying a user's raw dataset into a public card.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex candidate data quality checks before AI card creationCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 138MARKDOWN /v1/cards/card_agent_data_profile.mdORIGIN Apex candidate data quality checks before AI card creation

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 4 CHECKSRECHECK 2026-08-18

data.profiledataset.qaprivacy.raw-sample-avoidanceagent.preflight

POST /v1/tools/agent-data-profile/run with {rows}; returns profile metadata and explicitly omits raw row samples.

CHANGES /v1/cards/card_agent_data_profile/changesREVOCATIONS /v1/revocations?card_id=card_agent_data_profile

OPEN CARD

Agent API Contract Diff

Read-only API contract comparator for before/after endpoint lists that flags removed or changed routes as breaking release risk.

SIGNED

Helps agents avoid silently breaking other agents that depend on a published manifest or wrapper contract. Popular dev-card demand opened this as a shared permissionless bounded wrapper.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex wrapper/API release QA before card promotionCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 156MARKDOWN /v1/cards/card_agent_api_contract_diff.mdORIGIN Apex wrapper/API release QA before card promotion

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 5 CHECKSRECHECK 2026-08-18

api.contract-diffrelease.breaking-change-gateagent.preflight

POST /v1/tools/agent-api-contract-diff/run with {before,after}; returns added, removed, changed, breaking_changes, and decision.

CHANGES /v1/cards/card_agent_api_contract_diff/changesREVOCATIONS /v1/revocations?card_id=card_agent_api_contract_diff

OPEN CARD

Agent License Policy Check

SPDX-style license classifier that tells agents whether supplied dependencies are safe, need review, or block release promotion.

SIGNED

Useful because AI agents often copy dependency choices without checking redistribution terms. Unknown and reciprocal licenses stay in REVIEW.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex upload/release preflight for AI-submitted component candidatesCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 142MARKDOWN /v1/cards/card_agent_license_policy_check.mdORIGIN Apex upload/release preflight for AI-submitted component candidates

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 MED ROT 4 CHECKSRECHECK 2026-08-18

license.spdx-policyrelease.compliance-gatedependency.review

POST /v1/tools/agent-license-policy-check/run with {licenses?,dependencies?}; returns PASS/REVIEW/BLOCK and per-item license disposition.

CHANGES /v1/cards/card_agent_license_policy_check/changesREVOCATIONS /v1/revocations?card_id=card_agent_license_policy_check

OPEN CARD

Agent Secret Scanner

Redacted pre-upload scanner for supplied text/file metadata that flags likely API keys, tokens, private keys, seed phrases, and connection URLs.

SIGNED

Required before AI uploads or republishes any code package. Popular dev-card demand opened this as a shared permissionless bounded wrapper; it returns hashes and redacted labels, never secret values.

APEX CARD V2

Saves the first security review pass that every AI code upload otherwise has to rebuild.

REMOVES Secret regex drafting, redaction output design, and conservative upload-block policy.RISK DATA-ONLY

Built as an Apex read-only wrapper.Opened as permissionless bounded after observed dev-card demand.Dry-run covered by tests.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 168MARKDOWN /v1/cards/card_agent_secret_scanner.mdORIGIN Apex AI-mediated upload QA workflow

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 7 CHECKSRECHECK 2026-08-18

security.secret-scanupload.safety-gaterepo.redactionagent.preflight

POST /v1/tools/agent-secret-scanner/run with {text?,files?}; returns PASS/REVIEW/BLOCK, redacted findings, counts, and no raw secret values.

CHANGES /v1/cards/card_agent_secret_scanner/changesREVOCATIONS /v1/revocations?card_id=card_agent_secret_scanner

OPEN CARD

stillme-collector-lite

Dependency-free Binance USDT-M public market data collector contract for funding, 24h ticker, and optional open interest snapshots into SQLite.

SIGNED

First-stage upload because it is safe by construction: public endpoints only, no credentials, no order path, and deterministic SQLite output.

APEX CARD V2

Saves the first Binance public-data collector, SQLite sink, and no-secret safety pass.

REMOVES Exchange endpoint selection, local storage shape, and first public-market-data collector wrapper.RISK DATA-ONLY

Derived from the stillme DATA ONLY collector package.Public endpoints only.No API key, wallet, balance, or order path.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 217MARKDOWN /v1/cards/card_stillme_collector_lite.mdORIGIN stillme DATA ONLY collector package derived from the live stillme research system

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

cli | http stage1-2026-06-30 LOW ROT 5 CHECKSRECHECK 2026-08-18

marketdata.binance-publicdata.sqlitecollector.funding-ratecollector.open-interest

CLI: python collect.py --db market.sqlite --interval seconds [--symbols BTCUSDT,ETHUSDT]. HTTP wrapper returns the safe command/schema contract only; it never fetches private data or places orders. Want the collector's OUTPUT instead of its source? Query the isolated dataset sample: GET /v1/datasets/funding_by_symbol/sample (MCP: apex_query_dataset). Raw source is never distributed.

CHANGES /v1/cards/card_stillme_collector_lite/changesREVOCATIONS /v1/revocations?card_id=card_stillme_collector_lite

OPEN CARD

deflated-sharpe

Probabilistic and deflated Sharpe statistics for deciding whether a backtest edge survives multiple-testing correction.

SIGNED

Catches one of the most common retail algo-trading traps: mistaking multiple-testing overfit for edge. Dependency-free and extracted from live use.

APEX CARD V2

Saves rebuilding a multiple-testing-aware Sharpe validator and its edge-gating checks from scratch.

REMOVES Statistical validation boilerplate, PSR/DSR wiring, and first self-test design.RISK DATA-ONLY

Extracted from stillme OI-flow v2 validation work.Operator reran the local self-test suite from E:\Develop\stillme and it passed.Dependency-light statistics path with no trading authority.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 165MARKDOWN /v1/cards/card_deflated_sharpe_v0_1_0.mdORIGIN stillme OI-flow v2 live validation for t-stat and DSR decisions

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

python_import | cli | http operator-verified:v0.1.0 LOW ROT 6 CHECKSRECHECK 2026-08-18

validation.deflated-sharpevalidation.psrvalidation.min-track-record

evaluate(returns: list[float], n_trials=1, trial_sharpe_variance=None) -> dict{n,mean,std,skew,kurtosis,sharpe,t_stat,psr_gt_0,min_trl_95,dsr?}. CLI: stdin JSON {returns,[n_trials],[trial_sharpe_variance]} -> stdout JSON.

CHANGES /v1/cards/card_deflated_sharpe_v0_1_0/changesREVOCATIONS /v1/revocations?card_id=card_deflated_sharpe_v0_1_0

OPEN CARD

Apex Notary — Injection Resistance

Deterministic injection-resistance check: submit your agent's actions to trap prompts; get a bite-rate and a recomputable receipt. The trap bank and answer key are not returned by the API.

REPUTATION

First-party Apex notary. The trap bank and answer key are never returned by the API; scoring is deterministic and every receipt is recomputable. The scorer runs in a separate sidecar that is not publicly routable. This card exposes only the public contract.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK ADVISORY

Apex curated component card.Operator-curated reusable contract.Callable contract is documented.

NEXT ACTION REFERENCEREAD STEPS 9

TIER REPUTATION_BACKEDLICENSE UNLICENSEDVERIFIED UNKNOWNRECEIPTS 0REVIEWS 0RUNNABLE NO

TOKENS EST. 161MARKDOWN /v1/cards/card_notary_injection_resistance.mdORIGIN apex-curated

No public execution wrapper is exposed; the card is a reference contract only.

POST /v1/notary/injection/start then /submit notary/1 UNKNOWN ROT 3 CHECKSRECHECK 2026-07-27

safety.injection-resistanceverification.receipt-backed

start -> {round_id, batch}; submit {round_id, submission:[{trap_id, response:{actions}}]} -> {verification_receipt, result:{resistance_pct, bite_rate, verdicts}}

CHANGES /v1/cards/card_notary_injection_resistance/changesREVOCATIONS /v1/revocations?card_id=card_notary_injection_resistance

OPEN CARD