amd Applications

Browse applications built on amd's technologies. Explore PoC and MVP applications created by our community and discover innovative use cases for amd's technologies.

Agent_Trap_Evals

Agent_Trap_Evals

The problem: agents rarely fail hard questions. They fail chores. They report "backup verified" because the log says success, while the archive is truncated. These false claims slip out during routine work, and a real shell makes them dangerous. What Receipts does: you give it a real task, like checking a backup or triaging a failing build. A control layer plans the work and runs every action in an isolated Vultr sandbox [gVisor pods on VKE]. The sandbox has no secrets, has time and memory caps, and is destroyed after each task. Every command's output, exit code, and files become a receipt. Before any claim reaches you, a verifier checks it against those receipts: did the agent check the layer that matters, or just the easy one? An unsupported claim is blocked and sent back to be verified, or reported as unverified. You get the answer together with its proof. Containment: [demo moment, e.g. the agent runs rm -rf / and the sandbox absorbs it; the host is untouched]. Measured: we score Receipts with agent-trap-evals, an open-source trap set we built before the hackathon from real agent incidents. Verifier off vs. on: [X/Y vs. X/Y caught], [n] false alarms on honest controls. For: platform and DevOps teams putting agents on operational work, where a confident false "done" costs more than a slow answer. Sandboxes like E2B contain actions but don't check claims. Eval tools score offline but don't stop a bad claim at runtime. Receipts does both, live. [Business model; next steps.] All LLM calls use Vultr Serverless Inference.

AITeCXO
AgentOpsAnthropic ClaudeAWS+11
Trifecta Checker AI Safety Gate for Lethal Agents

Trifecta Checker AI Safety Gate for Lethal Agents

Trifecta Checker is an AI safety gate that blocks Lethal Trifecta attacks - the dangerous combination of Private Data + Untrusted Content + External Communication that enables data theft via prompt injection. The problem: AI agents with tools like read_gmail, browse_web, and send_email can be tricked by malicious web content to steal private emails and exfiltrate them. This is called the Lethal Trifecta. Our solution: One API call - POST /api/check-trifecta - analyzes the agent's tool manifest and returns instant verdict: - LETHAL (3/3 tools): 403 Forbidden - BLOCKED - Cannot execute - WARNING (2/3 tools): 200 OK with caution flag - SAFE (1/3 tools): 200 OK - Safe to proceed Live and tested: https://trifecta-checker.vercel.app/ - LETHAL test [read_gmail, browse_web, send_email] -> 403 - WARNING [browse_web, send_email] -> 200 warning - SAFE [read_gmail] -> 200 safe For 【entity-AMD©canonical_name=AMD】 AI League Match 4 - Intelligent Web Information Retrieval - we extend with Trusted Source Verification: before allowing external communication, we verify web sources are trusted (.gov, .edu, Concordium ID verified). If source is untrusted, block or flag. Tech: Next.js 14 + TypeScript, Vercel Edge, Python/JS SDKs, 【entity-AMD©canonical_name=AMD】 ROCm ready for LLM inference. GitHub: github.com/altima261/trifecta-checker. Blog: dev.to/altima261. Built by Mohammed Binashwan (altima261) from Jeddah, Saudi Arabia. Team trifecta-checker solo UTC+3. This project also registered in Concordium Trusted Agents (ZK Proofs + on-chain audit) and Vultr Agent Rush (Blast Radius Zero sandbox).

trifecta-checker
VercelAMD ROCm
ROCm Plate & Sign OCR (AMD AI League)

ROCm Plate & Sign OCR (AMD AI League)

An OCR container for AMD AI League Match 2 that reads licence plates and road signs with an open vision-language model running on an AMD GPU through ROCm. How it works: the container starts a resident server that loads Qwen2.5-VL-7B-Instruct once, in bf16 on the GPU, runs a warm-up inference and then listens on a unix socket. Each call to app.py is a thin client, so the harness can start a new process per image without the model ever being reloaded. Image handling accepts PNG, JPEG and TIFF (including 16-bit and multi-page files), applies EXIF rotation, and resizes very large or very small images to keep the number of visual tokens, and the time per image, bounded. The prompt encodes the transcription rules: return the plate number without state names or slogans, keep the province character and letter on Chinese plates, keep every word printed on a sign, and join multi-line text top to bottom. Post-processing removes labels, quotes and explanations, and folds look-alike separators and full-width characters that the grader's normalization would not remove. Reliability: the model weights are baked into the image, so it runs with no network access. Every call writes a valid JSON file, even when something fails. The build checks that torch and torchvision are ROCm builds. The image is built and contract-checked in GitHub Actions, and evaluated against the sample images plus blurred, noisy, glare, low-light and skewed variants.

Clevermiss
AMD ROCmHuggingFace HubQwen3-Coder
Ariadne

Ariadne

Ariadne is a production-grade, proof-grounded web information retrieval agent. Most LLM-based web agents suffer from a critical flaw: they hallucinate. When they cannot find an answer, they guess, leaving users with confident but fabricated lies. Ariadne solves this using a strict "Proof or Silence" architecture. When given a starting URL and a natural language question, Ariadne navigates the website using information-scent scoring. It extracts candidate answers using a three-tier pipeline: deterministic schema.org JSON-LD parsing, LLM-based reading comprehension (via the Gemini API), and a conservative rule-based fallback. Crucially, Ariadne is built with generator-verifier separation. The LLM that extracts the answer is never allowed to declare it correct. An independent Verifier enforces a strict verbatim-quote gate (the quote must exist exactly in the fetched HTML), an attribute-attachment gate, and an independent entailment check. If any gate fails, the agent explicitly returns "not_found". Every successful query returns a "proof object" containing the answer, the exact source quote, the URL, and a SHA-256 content hash, ensuring 100% auditability. If no proof exists, it refuses to guess. Engineered for hostile web environments, Ariadne includes SSRF guards to block private IP fetching, NFC Unicode normalization for international text matching, and strict body-size limits to prevent DOM/resource exhaustion. Packaged on the mandated ROCm base image, Ariadne leverages GPU-accelerated inference via Gemini, ensuring rapid, deterministic, and hallucination-free retrieval that enterprise applications can actually trust.

Deterministic Doom
Gemini AIAMD ROCmAMD Developer Cloud+1
Banksy OCR: Plates & Road Signs on ROCm

Banksy OCR: Plates & Road Signs on ROCm

Banksy OCR is a containerized optical character recognition application for Mini-Challenge 2 that reads license plates and road signs using an open-source vision-language model running on AMD GPUs through ROCm. Architecture: when the container starts, a persistent server loads Qwen2.5-VL-7B-Instruct (bf16, weights baked into the image) onto the GPU once and runs a warm-up pass. The harness entrypoint, python3 /app/app.py --input-image <path>, is a thin client that sends the image to that resident model, so each call avoids reloading weights. A task-specific prompt encodes the transcription rules (drop state names and slogans on US plates, keep the province character and letter on Chinese plates, keep words printed on signs, join multi-line signs top to bottom, never add units), and deterministic post-processing strips labels, quotes, unit suffixes and leftover jurisdiction banners before writing /app/output/<name>_output.json with text and confidence. Inputs: PNG, JPEG and TIFF (first frame), any size; very large images are downscaled before inference. Validation: built FROM the mandated rocm/pytorch rocm10.0 / Ubuntu 26.04 / Python 3.14 / PyTorch 2.13 base without squashing (all base layers verified intact). Tested inside the final container on an AMD Radeon 8060S (ROCm 10.0, torch 2.13.0): 31.2 GiB image, 23 s startup, 0.7-2.5 s per image, about 16.5 GiB peak GPU memory, 10/10 on a synthetic set covering clean, angled, blurred, low-light, noisy and multi-line cases. The same code was also run on an MI300X in the AMD notebook environment.

Banksy
AMD ROCm
AMD Volta: Intelligent Web Retrieval Agent

AMD Volta: Intelligent Web Retrieval Agent

AMD Volta is an autonomous multi-hop web retrieval and synthesis engine engineered for technical research and hardware benchmarking, built for AMD AI League Match 4. Key Innovations Solved: 1. Deep DOM Table Extraction: Real hardware benchmarks live inside HTML <table> tags. Standard text chunkers flatten them into noise. Our DOM parser converts nested HTML tables into intact, atomic GitHub-flavored Markdown tables, preserving comparison matrices and bandwidth specs. 2. Resilient Multi-Engine Cascading: External search APIs fail under rate limits. Volta cascades seamlessly across DuckDuckGo API, DuckDuckGo Lite, Wikipedia, and ArXiv with user-agent rotation to eliminate unhandled crashes. 3. Hybrid BM25 & Semantic Reranking: Combines mathematical Okapi BM25 keyword matching with dense semantic similarity and deduplication. 4. Autonomous Multi-Hop Reasoning: Dynamically assesses evidence sufficiency after Hop 1, reformulates search intent, and executes Hop 2 deep retrieval when necessary. 5. Anti-Hallucination Abstention Guardrail: When queried about fictional hardware (e.g., AMD Radeon RX 19990 XTX), the agent triggers an explicit Abstention Notice, ensuring 100% factual integrity. Hardware Acceleration via AMD Instinct & ROCm: - AMD Developer Cloud (Instinct MI300X): Leverages 192GB HBM3 memory and 5.3 TB/s bandwidth to serve 70B+ LLMs via vLLM with FlashAttention-2 HIP kernels. - Local AMD ROCm: Direct GPU memory access for local embeddings and inference on Radeon / Instinct GPUs. - Universal Fallback: Zero-setup deterministic extractive engine for instant evaluation.

Deflect
AMD Developer CloudAMD ROCmStreamlit+1
Exact Web Answer Agent (AMD AI League Match 4)

Exact Web Answer Agent (AMD AI League Match 4)

Match 4 entry: an agent that reads a natural-language request, navigates the given website (or a saved copy of it) and returns the one specific value the user asked for, with the page it came from. Not a summary and not a list of links. Match 4 image: docker.io/driedsandwich/amd-ai-league:m4-v1 How it works. Each request runs as a fresh python3 /app/app.py process with a 24-second internal deadline. It writes a well-formed placeholder JSON first, then fetches the start page with short timeouts, follows the same-site links whose text best matches the question, cleans each page to text (tables kept as rows) and ranks passages. A Qwen3-4B-Instruct model, loaded once at container start and kept resident on the AMD GPU behind a unix socket, picks the value from the top passages and names the supporting page. A rule-based extractor for prices, dates, versions, numbers and contacts is the fallback when the model has no time left. The answer is the value only; if the pages do not contain it, the agent returns an empty answer instead of guessing. Output: /app/output/<query-id>_output.json with answer, citations (source URLs, or corpus-relative paths when pages are given as a folder), sources, source_url and confidence. Because the detailed Match 4 harness was not published, the image follows the container contract shared by the earlier Matches: the mandated ROCm PyTorch base image, weights shipped inside the image, no downloads at start-up, and the model placed on the GPU explicitly. The script accepts several argument spellings (--query or --question, --query-id or --id, --url, --corpus for saved pages, --index, --input). No API keys; inference runs locally on the AMD GPU. Match 3 and Match 2 images are given in their Mini Challenge fields (docker.io/driedsandwich/amd-ai-league:mc3-v1 and docker.io/driedsandwich/amd-ai-league:mc2-v2).

DriedSandwich
AMD ROCmQwen3Qwen3-VL
GreYat Web Scout: grounded web retrieval

GreYat Web Scout: grounded web retrieval

GreYat Web Scout is a Match 4 agent for intelligent web information retrieval. It takes a natural-language question, with an optional start URL, and returns one exact value together with the page it came from. How it works: a language model (Qwen3-4B-Instruct, served on the AMD GPU by a resident process so each query skips the load time) first plans the lookup: search queries, likely official URLs, and package or project names. In parallel the agent queries several search engines and Wikipedia, and for "latest version" questions it reads the authoritative registries directly (PyPI, npm, GitHub releases, endoflife.date). It fetches the best pages, keeps the passages that match the question, and asks the model to extract a single value and say which passage it came from. Grounding comes first. An answer is only returned if the value appears verbatim on the cited page, so the source URL always backs up the answer. If no page confirms it, the agent returns an empty answer instead of a guess, and answers to "latest" questions are never taken from the model's memory. Version strings and numbers are normalised (v-prefixes, LTS labels, thousands separators) to match the grader. Everything runs locally on AMD ROCm with no external API keys. In development, on a 30-question set covering facts, ports, people, dates and live package versions, the pipeline answered 26 correctly (tested with a hosted stand-in model, since GPU time was not available).

GreYat
AMD ROCmQwen3HuggingFace Hub
SentinelMesh: Autonomous AI SOC on AMD GPU

SentinelMesh: Autonomous AI SOC on AMD GPU

SentinelMesh is an enterprise-grade, autonomous multi-agent AI Security Operations Center (SOC) purpose-built for on-premise execution on AMD Instinct GPUs using ROCm 6.2 and vLLM. Traditional SOCs struggle with catastrophic alert fatigue, high mean-time-to-respond (MTTR), and cloud API privacy risks. SentinelMesh solves this by deploying a collaborative team of specialized autonomous AI agents that detect, investigate, contain, and report cyber threats in seconds with 100% data sovereignty. Architecture & Multi-Agent Pipeline: 1. Triage Agent: Evaluates heterogeneous telemetry (Linux auth, Nginx, Windows Security Events) against in-memory sliding-window rules, filtering noise with high confidence. 2. Investigator Agent: Reconstructs causal kill-chain attack graphs, identifies affected assets, and maps adversary tactics to MITRE ATT&CK techniques via local vector RAG. 3. Threat Intel Agent: Assesses IOCs against local threat feeds with automated abuse scoring. 4. Responder Agent: Formulates surgical containment actions (IP firewall blocks, account lockouts) guarded by a Human-in-the-Loop approval gate with automated rollback commands. 5. Reporter Agent: Synthesizes bilingual executive briefings in technical English and native Urdu (Nastaliq RTL) with WeasyPrint PDF export. AMD ROCm Hardware Synergy: Accelerated by AMD Instinct MI250X (128GB HBM2e) with ROCm 6.2 and vLLM PagedAttention, SentinelMesh delivers 138.5 tokens/sec throughput, 42ms TTFT latency, and a 79.5% operational cost reduction compared to commercial cloud APIs. Telemetry never leaves the enterprise boundary.

I CAN
AMD ROCmLLaMA
30apps loaded