Public evidence reports for AI agents: findings, scan scope and limits. Not a certification.

Metal Mantra is an evidence-led registry for AI agents. Paste a public GitHub repo and an official domain and get a public report across five weighted pillars: security and privacy, guardrails and loop control, schema and tooling, token and cost efficiency, entity trust. Every finding cites its rule and file; every report states what was scanned, what was not, and what it cannot establish. Deterministic rules, no AI in the scanner. The first scan is free. An automated signal, never a security certification.