Registry now open

Certified skills.
Behavioral contracts.
Zero trust by design.

The certification registry for AI agent skills. Every SKILL.md package gets a behavioral contract, an automated test suite, a CLR-ID certificate, and a 402X micropayment gate. Human review flags every mismatch.

CLR-IDPer-package certificate
402XNative micropayment gate
3-layerFirewall isolation
On-chainEnterprise+ registry

From SKILL.md to certified package.

Every skill passes through a four-stage pipeline. The firewall layer enforces zero context bleed between Spec Team and Build Team LLMs.

01 — Ingest

SKILL.md Parse

The submitted SKILL.md is parsed into a structured behavioral contract — trigger conditions, capabilities, tool calls, and I/O schema. No implementation included.

Behavioral Contract
02 — Isolate

Firewall Layer

The Spec Team LLM context is hermetically sealed. The Build Team LLM receives only the behavioral contract — never the original SKILL.md source.

Firewall Layer
03 — Test

Behavioral Test Suite

An automated test suite runs the rebuilt skill against every trigger condition in the behavioral contract. Any mismatch raises a human review flag immediately.

Human Review Flag
04 — Certify

CLR-ID Issued

On full pass, a CLR-ID certificate is issued — a unique base-36 identifier binding the skill package to its behavioral contract, test results, and issuer signature.

CLR-ID

Every skill, one certificate.

CLR-IDs are immutable records binding a skill package to its behavioral contract and test results. Enterprise+ tier mirrors every cert to Base (L2) for on-chain verification.

CLR-4X9KZ2M
CERTIFIED
skill_nameweb-search-v2
issued_at2026-03-28T00:00:00Z
behavioral_contractbc_sha256:a3f9d2...
test_suite_pass48/48 ✓
human_reviewCLEARED
firewall_layerVERIFIED
on_chain_mirrorBase L2 — 0x4f9d...
payment_gate402X · $0.0012/call

Human review flag on mismatch

Any behavioral deviation between the original contract and the rebuilt skill halts certification and routes to a human reviewer. No cert is issued until cleared.

On-chain mirror for Enterprise+

PostgreSQL is the primary store for Dev and Team tiers. Enterprise+ certs are additionally mirrored to Base (L2) — tamper-proof, publicly verifiable, forever.

402X micropayment gate

Every certified skill is wrapped with an HTTP 402X payment gate. Callers pay per invocation. Float is held between collection and inference provider settlement via OpenRouter.

Three tiers. One registry.

Start with a single skill. Scale to a sovereign deployment. All tiers include behavioral contracts, automated test suites, and CLR-ID certificates.

Dev

Developer

$49/mo
Up to 10 certified skills
  • SKILL.md ingestion & parsing
  • Behavioral contract generation
  • Automated test suite (48 checks)
  • CLR-ID certificate per skill
  • PostgreSQL primary registry
  • 402X payment gate
  • Human review on mismatch
Start free trial
Enterprise+

Sovereign

Custom
Air-gapped · self-hosted
  • Everything in Team
  • Full Sovereign Tier deployment
  • Air-gapped, self-hosted pipeline
  • On-chain cert mirror (Base L2)
  • Regulated/classified environments
  • Redundant cert registry (no SPOF)
  • Dedicated SLA & support
Contact us

Built for production agent systems.

Every design decision optimises for correctness, isolation, and verifiability at scale.

📋

Behavioral Contract JSON Schema

Trigger conditions, capabilities, tool calls, and I/O schemas captured as a formal JSON contract. The contract — never the source — is the unit of trust.

🚩

Automated mismatch detection

Test suite runs the rebuilt skill against every declared behavior. Divergence from the behavioral contract triggers an immediate human review flag before any cert is issued.

🔒

Firewall layer enforcement

Spec Team and Build Team LLM contexts are hermetically isolated. Zero source code exposure during reconstruction — the same legal protection as semiconductor cleanrooms.

On-chain cert registry (Base)

Enterprise+ certs are mirrored to Base L2. Immutable, publicly verifiable, independent of any single infrastructure provider. Eliminates registry as a single point of failure.

402X micropayment gate

HTTP 402 Payment Required as an API-native payment gate. Callers pay per invocation. Skill publishers receive float proceeds after OpenRouter inference settlement.

🛡

Sovereign Tier deployment

Air-gapped, self-hosted deployment of the full CleanSkills pipeline for regulated or classified environments. No cloud dependency. No external cert authority required.

Terms of the trade.

Precise definitions for every concept in the CleanSkills platform.

Clean Room
A documented legal methodology for producing an independent implementation with zero exposure to the original source. Validated by courts since Baker v. Selden (1879).
SKILL.md
The standard file format for agent skills in Claude Code, Codex CLI, and compatible agents. The unit of submission to the CleanSkills registry.
Behavioral Contract
A JSON schema capturing trigger conditions, capabilities, tool calls, and I/O schema — but no implementation. The firewall between Spec and Build teams.
Firewall Layer
The enforced separation between the Spec Team LLM context and the Build Team LLM context. Neither context can read from the other's window.
402X
HTTP 402 Payment Required used as an API-native payment gate. The X suffix denotes the micropayment extension — per-call billing at sub-cent granularity.
CLR-ID
Certificate ID — a unique base-36 identifier for each certified skill package. Binds the skill to its behavioral contract, test results, and issuer signature.
Float
Working capital held between customer payment collection and inference provider payment. Managed via OpenRouter to minimise direct provider exposure.
OpenRouter
LLM inference aggregator used as the intermediary to minimise direct provider float and enable model arbitrage across the inference market.
Sovereign Tier
Air-gapped, self-hosted deployment of the full CleanSkills pipeline for regulated or classified environments. No external registry dependency.
Human Review Flag
Triggered automatically when a rebuilt skill's behavior diverges from its behavioral contract during the test suite. Certification is halted until a human reviewer clears the flag.

Join the registry.

Be first to certify your skills. Early access includes free CLR-ID issuance for your first 5 packages.