
Trifecta Checker is an AI Safety Gate that prevents Lethal Trifecta attacks: when an AI agent reads private data (Gmail), fetches untrusted content (malicious URL), and tries to exfiltrate externally. How it works on Vultr: - rules/trifecta-scoring.js calculates open score 0-100: CLEAN/OK/RISKY/DANGER - rules/shield.js implements Blast Radius Zero: If agent has 3+ Lethal attempts in 1 hour, block ALL Vultr VM creation for 24h - Every block returns HTTP 403 and logs to Concordium wallet 3eLK...z44V for on-chain audit Proof on 【entity-AMD¦canonical_name=AMD】 MI300X GPU (Nov 3): Tested on notebooks.【entity-amd¦canonical_name=AMD】.com Agents 101 - Build AI Agent with MCPs using vLLM, Pydantic AI, MI300X. Safe 【entity-Airbnb¦canonical_name=Airbnb】 search = 20 CLEAN 200, Lethal read_gmail+mcp_airbnb+send_email = 100 DANGER LETHAL 403 BLOCKED. Trusted Source Scoring: .gov=100 .edu=90 concordium_verified=95 .com=40 unknown=10. Web Vault concept: Internet as persistent storage (vector DB), 【entity-AMD¦canonical_name=AMD】 ROCm model, Trifecta Safety Gate. QuantOrb-inspired open rules. Live V2: trifecta-checker-v2-eta.vercel.app GitHub: github.com/altima261/trifecta-checker (5 deploys from mobile, PC broken!) Testnet: 4BdmwCQ1yq...2QM1 (Concordium) DEV: dev.to/altima261/i-ran-trifecta-on-【entity-amd¦canonical_name=AMD】-mi300x-from-an-ipad-web-vault-proof Top 2.3% in 【entity-AMD¦canonical_name=AMD】 AI League (150/6368) - Mobile-first from Jeddah, SA.
8 Nov 2026
.png&w=828&q=75)
Trifecta Checker is an AI safety gate that blocks Lethal Trifecta attacks - the dangerous combination of Private Data + Untrusted Content + External Communication that enables data theft via prompt injection. The problem: AI agents with tools like read_gmail, browse_web, and send_email can be tricked by malicious web content to steal private emails and exfiltrate them. This is called the Lethal Trifecta. Our solution: One API call - POST /api/check-trifecta - analyzes the agent's tool manifest and returns instant verdict: - LETHAL (3/3 tools): 403 Forbidden - BLOCKED - Cannot execute - WARNING (2/3 tools): 200 OK with caution flag - SAFE (1/3 tools): 200 OK - Safe to proceed Live and tested: https://trifecta-checker.vercel.app/ - LETHAL test [read_gmail, browse_web, send_email] -> 403 - WARNING [browse_web, send_email] -> 200 warning - SAFE [read_gmail] -> 200 safe For 【entity-AMD¦canonical_name=AMD】 AI League Match 4 - Intelligent Web Information Retrieval - we extend with Trusted Source Verification: before allowing external communication, we verify web sources are trusted (.gov, .edu, Concordium ID verified). If source is untrusted, block or flag. Tech: Next.js 14 + TypeScript, Vercel Edge, Python/JS SDKs, 【entity-AMD¦canonical_name=AMD】 ROCm ready for LLM inference. GitHub: github.com/altima261/trifecta-checker. Blog: dev.to/altima261. Built by Mohammed Binashwan (altima261) from Jeddah, Saudi Arabia. Team trifecta-checker solo UTC+3. This project also registered in Concordium Trusted Agents (ZK Proofs + on-chain audit) and Vultr Agent Rush (Blast Radius Zero sandbox).
1 Dec 2026