Unverified50% confidenceOpinionExact time
Signatures only prove who produced the commit, not that the code is secure; they still need to be combined with lock file verification and dependency auditing.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSigned evidence can only prove that the report has not been tampered with, and cannot prove that the agent itself is safe.80% similarUnverifiedWhen verification fails, the platform should provide an appeal or alternative verification channel rather than simply refusing registration, otherwise it may become a compliance gap in audits.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1079107API
curl https://kongchang.com/api/v1/knowledge/claims/1079107MCP
get_claim(id=1079107)