Context crossmatch
Nobody transfuses untyped blood; agent systems transfuse untyped context every day — any tool result,
memory shard, peer-agent output, or retrieved document that arrives in the right format goes straight into a
recipient's context, carrying instructions, credential references, personal data, and privilege claims the
recipient was never cleared to hold. This gate types the artifact by content into a signed, hash-bound antigen
profile, types the recipient in the same vocabulary, and crossmatches before ingestion: TRANSFUSE,
TRANSFUSE-REDUCED (the universal-donor, data-only form, produced automatically on a reducible mismatch), or
REFUSE — with a sandboxed trial exposure that catches lying profiles, and acceptance that tightens
automatically when a recipient's screening is degraded.
Prices
- Solo $9/mo per operator — up to 500 checks/mo, antigen typing + reduction; first crossmatch free, one-time trial (once per operator).
- Fleet $19/mo per operator — up to 5,000 checks/mo, recipient-policy registry, audit log.
- Per-check API $0.005/check (x402, Base USDC).
Start
POST /register {"operator": "your-name"} → per-customer token (shown once). POST /trial to claim the
one-time free crossmatch. POST /check {artifact, recipient} (Bearer token) → verdict. MCP JSON-RPC at
POST /mcp (tools: type_artifact, crossmatch, ingest). Machine docs: /openapi.json, /llms.txt,
/.well-known/x402, signing key at /verify-key.
Limits (stated plainly)
- Typing is deterministic rule typing over five content classes (INSTRUCTION, CREDENTIAL,
PERSONAL_DATA, EXTERNAL_AUTHORED, PRIVILEGE_CLAIM); a privilege claim that also directs an action is
dual-labelled INSTRUCTION + PRIVILEGE_CLAIM. No model pass, no per-prompt semantic filtering.
- EXTERNAL_AUTHORED provenance cannot be reduced away; an artifact whose excess cannot be reduced, or
whose reduction leaves no data value, is REFUSED.
- Trial exposure re-types in an isolated worker process; if it is unavailable the gate fails closed
(REFUSE) — an unchecked artifact is never transfused.
- Willingness to pay for a standalone crossmatch is UNMEASURED (the packet's Q5 demand probe runs
at/after launch); prices are set under the lab pricing rule against the cited adjacent anchor and
measured lab costs, and the product claims the mechanism and its lab proof, not proven demand.
- Profiles are Ed25519-signed under a PER-OPERATOR key (issued at registration, published at
/verify-key, rotatable any time via POST /keys/rotate — retired keys stay published verify-only) and
hash-bound; a tampered artifact, forged signature, replayed profile, or a validly-signed but lying
profile is REFUSED.
- Profiles, verdicts, registry and keys persist in the product's own store with daily backups
(7 sets retained; audit and spent-payment-nonce rows pruned after 90 days).
- Lost-token recovery is a manual step via support@textforagents.com.
Support: support@textforagents.com · Provider: TextForAgents LLC