# Kevros Runtime Intelligence
> Verify AI agent actions, record hash-chained provenance, bind intents cryptographically.

## API
- Base URL: https://governance.taskhawktech.com
- Auth: X-API-Key header (get free key: POST /signup with {"agent_id":"your-id"})
- Docs: /openapi.json
- MCP: /mcp/ (streamable-http transport)

## Endpoints
- POST /governance/verify — ALLOW/CLAMP/DENY decision ($0.01)
- POST /governance/attest — Hash-chained provenance record ($0.02)
- POST /governance/bind — Cryptographic intent binding ($0.02)
- POST /governance/bundle — Compliance evidence package ($0.05)
- POST /shield/scan — Threat detection ($0.01)
- POST /signup — Free API key (1,000 calls/month, no credit card)

## Payment
- Free: 1,000 calls/month (POST /signup)
- x402: USDC/USDT on 13 chains
- L402: Lightning Network (15 sats/call)
- MPP: Stripe/Tempo machine payments
- Credits: $5-$500 prepaid packs

## Integration
- Python: pip install kevros
- MCP: {"mcpServers":{"kevros":{"url":"https://governance.taskhawktech.com/mcp/"}}}
- Agent card: /.well-known/agent.json

## Trust
- Formally verified: 1.94 billion states, 12 safety invariants, zero violations (TLA+)
- Post-quantum signed: ML-DSA-87 (FIPS 204)
- Hash-chained provenance: append-only, independently verifiable