Shomer

X Layer Ship Gate · OKX.AI ASP #6117 · A2MCP

Is this the deployment
you approved?

Agents call Shomer before they ship or trust a deployment. Live X Layer state vs the policy you approved—owner, Safe, upgrade, timelock, implementation— returns Blocked, Review Required, or Policy Matched. Never “safe.” Never “audited.” Free verify for agents; Paid Deep Verification for privilege maps, artifact match, and auditor briefs.

Agent API ↓

Ship Gate · founder loop

How it works

01

See what’s on chain

Paste a real X Layer address. We read who owns it, whether it can upgrade, and related facts—no mock data.

02

Write & lock your rules

Copy from chain or type by hand. Copying is never “approved.” You lock a version, then we can check.

03

Check the live chain

We compare only to the version you locked—not a moving draft. Export a brief for a human reviewer.

For agents · Ship Gate · A2MCP

Call Shomer before you ship

Listed on OKX.AI as ASP #6117. Other agents use Shomer as a ship gate on X Layer.

  • Free — packs · read · draft · verify · ship-gate (verdict + evidence)
  • Paid — Deep Verification: privilege map · reviewed artifact · auditor brief · x402 $0.01 on eip155:196
  • Catalog — GET /api/agent
  • Verdicts: Blocked · Review Required · Policy Matched — never invents a pass

Base shomer-agent-api.mixed-mouse.workers.dev

Free verify · curl 
curl -sS -X POST https://shomer-agent-api.mixed-mouse.workers.dev/api/agent/verify \
  -H 'Content-Type: application/json' \
  -d '{
    "network": "mainnet",
    "contractAddress": "0xcA11bde05977b3631167028862bE2a173976CA11",
    "policy": { "upgradeable": false },
    "projectName": "agent-demo"
  }'

Real RPC. Deterministic checks. Never invents a pass.

What Shomer checks

Deterministic evidence,
not a vibe check

Each check compares a declared field to a precise onchain fact—or is marked out of scope or evidence missing.

  • Owner / Safe threshold
  • Upgrade authority (EIP-1967)
  • Timelock min delay
  • Implementation / code hash
  • Address & chain sanity
  • Source verification recorded
Start with an address ↓

Auditor handoff

Auditor Brief

A printable evidence package: verdict, every check, observed values, RPC sources, remediations. Not an audit certificate.

Start here

Verify a live deployment

Contract-address first. Policy draft and approve live inside the app.

Ship what you approved.

A deployment verdict is not an audit or a promise of safety.

X Layer Ship Gate · ASP #6117 · Free A2MCP for agents

Paste an address ↑

Shomer verifies that the real deployment matches the policy you declared. It does not audit code, find vulnerabilities, or assert that a contract is safe. AccessControl checks are a limited probe only.

New verification

LIVE STATE

Live

1) See what’s on chain · 2) Write the rules you approved · 3) Lock them · 4) Compare again

1 On chain 2 Your rules 3 Lock in 4 Check

Start with a contract

First we look at the real contract. Then you write the rules you approved. We only say “match” when the chain still fits those rules. Not an audit.

  1. On chain — see what’s deployed now
  2. Your rules — write what you meant to approve
  3. Lock in — freeze that list so it can’t drift
  4. Check — does the chain still match?

Mainnet · 0xcA11…CA11 · great for a first live read

Evidence only — not an audit, not a safety claim.

WHAT YOU APPROVED

Your rules

This is the checklist you stand behind—not what the chain happens to show right now. Fill it in, then lock it in. Only after that can we check if the live contract still matches.

In plain English

  1. On chain only shows what’s deployed today. It is not your approval.
  2. Your rules are the promises you made (who owns it, can it upgrade, etc.).
  3. Copy from chain is a shortcut to fill blanks—you still review and lock them.
  4. Lock in freezes a version. Check compares the live chain to that freeze.
  5. Empty boxes mean “we’re not checking that.” We never treat empty as a pass.

Start from a template

Pick a common setup. This only fills a work-in-progress list—it does not lock anything yet.

◆

From chain = we copied what we saw live (still only a draft—not a match). You set this = you typed or changed it. Left blank = we skip that check (we do not treat blanks as “OK”).

From chain You set this

WHO CONTROLS THIS

CAN THE CODE CHANGE LATER?

Optional extras Money flows · oracles · routers — only if you care

MONEY & TOKENS (OPTIONAL)

CONNECTIONS (OPTIONAL)

THE COMPARISON

Results

Live chain vs your locked rules. Skipped / not in scope = you left that rule blank. Missing evidence = you set a rule but we couldn’t read it on chain.

No verification yet

Lock in your rules first, then run Check to see the comparison.

SHAREABLE SUMMARY

Brief

A printable report of what we checked. It is evidence—not a security audit.

REPORTVERDICTCREATED
No brief yet Run Verify vs approved to generate one.