{"uid":"cap_0VQfsl3REaeIJDBnH1skJ","slug":"salt19-agent-decision-preflight-2d9c172e","name":"SALT19 Agent Decision Preflight","description":"SALT19 is an independent applied AI systems lab behind EvoMind governed cognition, the MCP-native Agent Utility Grid, the ARCS research community, AeroClear UAS flight intelligence, and practical software for real-world work.","url":"https://api.salt19.com/v1/agent-decision-preflight","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"target":{"type":"object","properties":{"repo":{"type":"string","maxLength":512},"package":{"type":"string","maxLength":214,"minLength":1},"version":{"type":"string","maxLength":64}},"additionalProperties":false},"constraints":{"type":"object","properties":{"require_latest":{"type":"boolean"},"require_license":{"type":"boolean"},"max_days_since_push":{"type":"integer","maximum":3650,"minimum":1},"max_vulnerabilities":{"type":"integer","maximum":100,"minimum":0}},"additionalProperties":false},"decision_type":{"enum":["npm_dependency","github_repository"],"type":"string"}}},"responseSchema":{"type":"json","example":{"score":100,"reasons":["No OSV vulnerability records returned for this package/version."],"receipt":{"evidence_sha256":"...","verification_url":"https://api.salt19.com/receipts/..."},"verdict":"GO","evidence":{"package":"hono","version":"4.13.3","vulnerabilities":0},"confidence":0.95}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.45","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.45/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.45","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.45","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_qbqnbJ7La96Hqd6PJzr64","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.45","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a pre-flight safety and compliance check on an npm package or GitHub repository, returning a GO/NO-GO verdict with vulnerability data and a signed evidence receipt.","exampleAgentPrompt":"Before I install hono@4.13.3 as an npm dependency, run a decision preflight check on it — flag any OSV vulnerabilities, make sure it has a license, and tell me if it's a GO or NO-GO.","exampleUseCases":[{"title":"Pre-install npm package security check","prompt":"I want to add express@4.18.2 to my project — run a preflight on it as an npm_dependency, require it has a license, and flag anything if it has more than 0 known vulnerabilities."},{"title":"Vetting a GitHub repo before forking","prompt":"Can you run a preflight check on the GitHub repository github.com/honojs/hono? I want to make sure it's been pushed to in the last 90 days and is safe to use."},{"title":"Automated CI dependency gating","prompt":"Before my pipeline installs lodash@4.17.21, do a decision preflight check on it as an npm_dependency — require the latest version and reject it if there are any known vulnerabilities."}],"resultDescription":"Returns a JSON object with a numeric safety score (0–100), a verdict string ('GO' or 'NO-GO'), a list of human-readable reasons, a confidence float (0–1), an evidence object with package name, version, and vulnerability count, and a receipt containing an evidence SHA-256 hash and a verification URL for auditing.","failureModes":["Unknown or misspelled package name returns an error or low-confidence result","Version string not found in registry causes evidence lookup failure","OSV database unavailable may result in degraded confidence score","Missing required fields (decision_type or target.package) returns a 400-level error","Payment not completed (x402 flow failure) prevents response delivery"],"whenToPreferThis":"Choose this endpoint when an AI agent or automated pipeline needs a structured, signed GO/NO-GO decision on an npm package or GitHub repository before installation or use — especially when you need an auditable evidence receipt, vulnerability scoring, and license/recency constraints evaluated in a single call. Prefer it over raw OSV or GitHub API queries when you want a confidence-scored verdict with cryptographic provenance rather than raw data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:44:27.778Z","isFirstParty":false}