## Phase 8: Enterprise Extractor Improvements ✅ - 14 security extractors (TLS, JWT, SQL injection, XSS, etc.) - 10 framework-specific extractors (Spring, Django, Rails, etc.) - Config file security detection (YAML, TOML) ## Phase 9: Autonomous Extractor Generation ✅ - Shadow mode executor with TP/FP tracking - Graduation pipeline with confidence thresholds - Auto-rollback on regression detection - Cross-project pattern syncing ## UAT Suite Complete (14 scripts, 90 tests) - test-core-detection.sh (6 tests) - test-declarative-extractors.sh (5 tests) - test-domain-frameworks.sh (5 tests) - test-domain-unreal.sh (3 tests) - test-llm-extraction.sh (6 tests) - test-eval-harness.sh (5 tests) - test-cross-language.sh (3 tests) - test-precommit-performance.sh (4 tests) - test-output-formats.sh (8 tests) - test-drift-detection.sh (6 tests) - test-exit-codes.sh (12 tests) + 3 more scripts ## Other Changes - Updated roadmap to mark Phase 8-9 complete - Added .gitignore entries for build artifacts - Updated pre-commit: 800 line limit, exclude tests/data/cmd Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
4.3 KiB
Demo Agent Keypairs
DO NOT USE THESE KEYS IN PRODUCTION
This directory contains pre-generated Ed25519 keypairs for reproducible demos. These keys are deterministic (derived from agent names) and publicly visible.
Quick Reference
| Agent Name | Tier | Public Key (Agent ID) |
|---|---|---|
fda:drug-label-ingestor |
T0 (Regulatory) | 31cf051e3d7c9cae93277a2f0cb2dd1d09b7a0a7167b8782a49b4ac57c6fa7b3 |
pubmed:abstract-indexer |
T1 (Clinical) | 83b7c1e6394cc46b1cad352a49bfcceab78dd592a1cebfa03800a9af99fd6d52 |
clinicaltrials:study-importer |
T1 (Clinical) | aa6f11e80dd787498528eccc00ab46b3d19c3d8d5c30417498fff14b0302bac5 |
internal:clinical-ops-reviewer |
T3 (Expert) | 7f781705c56047037db522c47691c3fc4b38e77a7d7f654ca644155a59993e59 |
reddit:health-discussion-scraper |
T5 (Anecdotal) | 29cb285fdcdac0eb623812b63bde48b7be98d1ac07c14d7d402abdc1ec031402 |
Agent Details
fda:drug-label-ingestor (Tier 0 - Regulatory)
Role: Ingests FDA drug label data from official regulatory sources.
Sources: DailyMed, FDA Orange Book
Typical Assertions:
- Drug indications and approved uses
- Contraindications and warnings
- Adverse reaction rates from clinical trials
- Dosage and administration guidelines
Public Key: 31cf051e3d7c9cae93277a2f0cb2dd1d09b7a0a7167b8782a49b4ac57c6fa7b3
pubmed:abstract-indexer (Tier 1 - Clinical)
Role: Indexes clinical trial abstracts from peer-reviewed literature.
Sources: PubMed, MEDLINE
Typical Assertions:
- Clinical trial outcomes and efficacy data
- Study methodology and population characteristics
- Statistical significance of findings
- Comparison of treatment modalities
Public Key: 83b7c1e6394cc46b1cad352a49bfcceab78dd592a1cebfa03800a9af99fd6d52
clinicaltrials:study-importer (Tier 1 - Clinical)
Role: Imports trial protocols and results from the federal registry.
Sources: ClinicalTrials.gov
Typical Assertions:
- Ongoing and completed trial statuses
- Enrollment numbers and demographics
- Primary and secondary endpoint results
- Sponsor and investigator information
Public Key: aa6f11e80dd787498528eccc00ab46b3d19c3d8d5c30417498fff14b0302bac5
internal:clinical-ops-reviewer (Tier 3 - Expert)
Role: Internal clinical expert providing manual review and annotations.
Sources: Internal review, Manual annotations
Typical Assertions:
- Expert interpretation of conflicting data
- Clinical practice recommendations
- Safety signal assessments
- Off-label use observations
Public Key: 7f781705c56047037db522c47691c3fc4b38e77a7d7f654ca644155a59993e59
reddit:health-discussion-scraper (Tier 5 - Anecdotal)
Role: Scrapes patient experience reports from health communities.
Sources: Reddit r/loseit, r/Ozempic, health forums
Typical Assertions:
- Patient-reported side effects
- Real-world dosing experiences
- Treatment satisfaction ratings
- Community sentiment about medications
Public Key: 29cb285fdcdac0eb623812b63bde48b7be98d1ac07c14d7d402abdc1ec031402
Source Tier System
StemeDB uses a 6-tier source hierarchy for trust-weighted resolution:
| Tier | Class | Description | Weight |
|---|---|---|---|
| T0 | Regulatory | FDA, EMA, regulatory agencies | Highest |
| T1 | Clinical | Peer-reviewed trials, registries | High |
| T2 | Academic | Research papers, meta-analyses | Medium-High |
| T3 | Expert | Domain experts, professional opinion | Medium |
| T4 | Journalistic | News, fact-checked reporting | Low-Medium |
| T5 | Anecdotal | Social media, patient forums | Low |
When claims conflict, the Authority lens prefers higher-tier sources. The Skeptic lens shows all claims regardless of tier.
Regenerating Keys
Keys are deterministically generated from agent names using SHA-256:
cd demo/keys
go run keygen.go
This will overwrite agents.json with the same keys (deterministic).
Using in Demo Seed
The cmd/demo-seed program loads these keys and creates realistic demo data:
go run ./cmd/demo-seed --api-url http://localhost:18180
Security Notice
These keys are:
- Publicly visible in this repository
- Deterministic (anyone can regenerate them)
- For demos only (not for production use)
For production deployments, generate unique keypairs and store them securely.