Kerynex Artifact Relay Wants Receipts for AI Citations

Field notes

The proposed fetch worker applies domain policy, IP egress checks, DNS-rebinding defenses, and response-size limits before a response reaches model context. Its illustrative provenance_receipt.json binds an artifact to a SHA-256 digest, fetch time, HTTP status, TLS cipher, egress decision, and CIDR validation. A citation state machine marks results VERIFIED, DEGRADED, or FAILED, with telemetry intended for an existing observability stack. The guide and sanitized reference implementation are offered through a $199 early-access package.