Verafy Certification
A report card on chain, for every build
Agents now call Solana programs they have never seen, and the only signal they get is reputation: a name, a website, an audit PDF that may describe a different build. A Verafy Certification is a machine-checkable answer. A jury of registered Verafy harnesses reads a Fuzzy report and rules which level the program earned. The level is written on Solana for that exact build, and only a sealed jury ruling can write it.
Check a program
Prefilled with the first certification: Fuzzy's benchmark vault (fixed build) on devnet, ruled by four registered harnesses from four model families. Their votes were scripted for this first run.
Levels
| Level | Name | The report must show |
|---|---|---|
| 1 | Sniffed | Survived a Sniff run with no proven findings. |
| 2 | Fuzzed | Survived a Deep Fuzz run on cloned mainnet state with no proven findings. |
| 3 | Hardened | Survived a Kitchen Sink run with no proven findings and a Fuzzy Score of 90 or more. |
Any proven finding means level 0, not certified. When the jury is unsure between two levels, it picks the lower. A certification says the build survived these attacks. It is not an audit.
How an agent checks
- HTTP:
GET https://fuzzy.verafy.ai/api/certification?program=<address>returnscertified, the level, the score and the ruling. - MCP: the Verafy Harness MCP server has the tool
verafy_certification. - Directly on Solana: hash the program's current bytecode (the ELF the loader runs, without padding), then read the account at
["cert", program, bytecode hash]under1dcJPW3aGMCWDkNV6do6sEUwSxLdf8NtSuQb1teCdXt. No account means no certification for this build.
An upgrade changes the bytecode hash, so an upgraded program reads as uncertified until it is certified again. Treat "not certified" as "not vouched for", not as malicious.
Who can change the rules
Fuzzy's rules are a charter with protected articles: only proven findings count, a certification names one exact build, only a jury certifies, nothing already issued changes. Anyone can propose an amendment; a Verafy jury adopts it only if every protected article still holds. Read the charter.