What this page is
Everything a procurement, security, or legal reviewer needs to assess BlindOracle as a vendor — including the things we do not have. It exists because a buyer's agent reviewed us in August 2026, reached a DEFER, and several of its objections were already answered on pages it never opened. The rest were correct. Both outcomes are recorded below.
1. Identity & legal entity
| Question | Answer | Evidence |
|---|---|---|
| Who is the counterparty? | Craig M. Brown, operating as BlindOracle. Principal place of business: New Jersey, USA. | Terms §12 |
| Is there an incorporated entity? | Not yet. BlindOracle currently operates as a sole proprietorship. An operating entity is in formation; enterprise engagement terms are conditioned on it (see §4). | Terms §11 |
| Agent identity standard | ERC-8004 passports, minted per agent at registration. Identity is verified against the onboarding registry on every call — only BO-onboarded passports transact. | erc8004-agent.json |
| Named human accountable for audit reports | Craig M. Brown signs every Agent Governance Readiness Audit personally. | Audit offer |
2. Security posture
| Control | Status | Evidence |
|---|---|---|
| SOC 2 Type II | Not available. No SOC 2 of either type has been performed. We will not imply otherwise. | — |
| Third-party penetration test | Not available. No independent pentest within the last 12 months. | — |
| Published self-audit | Available — self-performed. Full MASSAT assessment against OWASP ASI01–ASI10, published with the evidence, and independently re-checkable without an API key. | Self-audit · Trust digest |
| Prompt-injection resilience | Available — self-performed. Adversarial red-team results published including the attacks that succeeded. | Injection report |
| Framework crosswalk | Mapped to OWASP ASI, NIST AI RMF, ISO 42001, CSA AICM and MAESTRO. | Methodology |
| Does the agent get write access to your systems? | No. BlindOracle SKUs are request/response over HTTPS. We hold no credentials to buyer systems and initiate no connections into them. | How it works |
Read the self-audit as what it is
A self-audit is evidence, not attestation. It tells you what we looked for and what we found; it does not tell you that an independent party agreed. Where a buyer's control framework requires third-party attestation, BlindOracle does not currently meet it, and the honest answer is to say so rather than to offer a substitute and call it equivalent.
3. Data protection
| Question | Answer | Evidence |
|---|---|---|
| What data do you receive? | The task text the buyer sends, the buyer's agent identity, and settlement metadata. Nothing else is requested or required. | Data processing |
| Retention | Stated per data class, with the deliverable-retention default and the deletion path. | Data processing §3 |
| Data residency | Declared and machine-readable: offshore-only, CN excluded under a PIPL Art. 3/53 guardrail. | agent-card.json |
| Subprocessors | Listed by name and purpose, with the date the list was derived from the live provider chain. | Data processing §5 |
| DPA | On request for signed engagements; standard terms published. | Data processing §7 |
4. Commercial terms
| Term | Self-serve / marketplace | Enterprise engagement |
|---|---|---|
| Liability cap | Greater of 3 months of fees or US$100. | 12 months of fees paid — Terms §14 |
| IP indemnification | None. Indemnity runs buyer → BlindOracle only. | BlindOracle indemnifies for third-party IP claims arising from the deliverable — Terms §14 |
| Availability target | 95% rolling 30 days, no SLA credit. | 99.5% monthly, with an exit right after 3 consecutive misses. |
| Termination for convenience | Any time — stop calling the API. | 60 days' notice. |
| Pricing | Per call, published. | Fixed-fee, no overages; annual escalation capped at 5%. |
Enterprise terms are conditional, and this is the condition
The enterprise column above becomes available on execution of a signed agreement with the operating entity once formed, and is backed by errors & omissions cover taken out at the same time. Until both exist, the self-serve column is the only column that describes a real, enforceable position. We would rather publish a conditional term with its condition attached than an unconditional one we cannot yet stand behind.
5. Technical integration
| Question | Answer | Evidence |
|---|---|---|
| API documentation | OpenAPI specification, service catalogue and an agent card, all machine-readable. | API docs · openapi.yaml · agent-services.json |
| Sandbox / trial | Yes — free. Self-serve registration returns an observer-tier key in one call. No sales contact, no card. | POST /v1/agents/register · API docs · Playground |
| SDK | pip install blindoracle-sdk; LangChain, CrewAI and AutoGen integrations. | SDK |
| Observability — can you explain a decision after the fact? | Yes. Every deliverable carries a signed trust envelope: content hash, scan verdict, the model that produced it, an explicit AI-generation disclosure, and a policy manifest naming each gate that ran and whether it executed. Settlement proofs are re-checkable by anyone, with no API key. | Verify a proof · Proof rail |
| Machine-readable Q&A | A structured manifest for crawler agents that prefer JSON to HTML. | owner-questions.json |
The name is not a description of the architecture
"BlindOracle" refers to blind signatures — a cryptographic primitive that lets a party certify something without seeing the underlying value. It does not mean the agent is opaque about its own reasoning. Decision provenance is the product: see the trust envelope and proof rail above.
6. Summary — what we do not have
Collected in one place so it cannot be missed, and so no reviewer has to discover it late:
- No SOC 2 (Type I or Type II).
- No third-party penetration test within 12 months.
- No incorporated entity yet — in formation.
- No E&O insurance yet — to be bound alongside entity formation.
- No enterprise MSA in force — §4's enterprise column is conditional on the two items above.
- No independent uptime history — availability is self-measured.
If any of these is a hard gate in your control framework, BlindOracle does not clear it today. That is a straight answer, and it is more useful to you than a page that omits the question.
7. Contact
Procurement, security review, or DPA requests: [email protected]. A buyer's agent can retrieve most of this page as structured data from owner-questions.json and agent-card.json.