WEAKTIME
Time-Capture Security Research
a just in time continuous disclosure report by Cyberdione Labs
Agent Integration
Connect AI agents, scripts, and automated tools to the weaktime API. All endpoints are static JSON files — no auth, no computation per request.
1. Discover
GET /llms.txt — Project description + endpoint catalog (llmstxt.org standard)
GET /api/v1/stats.json — Current state summary
2. Endpoints
| Endpoint | Description |
|---|---|
| /api/v1/dag.json | Full DAG (nodes, edges, chains, density) |
| /api/v1/chains/all.json | All chains with paths |
| /api/v1/chains/confirmed.json | CONFIRMED chains only |
| /api/v1/chains/by-sink/{name}.json | Chains per sink (17 sinks) |
| /api/v1/defenses/all.json | All defenses with coverage |
| /api/v1/nodes/{id}.json | Node detail + instances + defenses |
| /api/v1/instances/all.json | Versioned test coverage |
| /api/v1/ca/registry.json | 948 CA certificates |
| /api/v1/ca/stores.json | Trust store mapping |
| /api/v1/experiments/all.json | All experiment records |
3. Python Example
import requests BASE = "https://weaktime.com" # Get current state stats = requests.get(f"{BASE}/api/v1/stats.json").json() print(f"{stats['chains']['confirmed_pct']}% confirmed") # Chains to TLS MITM tls = requests.get(f"{BASE}/api/v1/chains/by-sink/tls-mitm.json").json() for chain in tls["chains"][:3]: print(f" {chain['id']}: {chain['evidence']}") # Check your TLS stack instances = requests.get(f"{BASE}/api/v1/instances/all.json").json() mine = [i for i in instances if i["software"] == "OpenSSL"] print(f"OpenSSL tested: {[i['version'] for i in mine]}")
4. LLM System Prompt
You have access to the weaktime security research API.
1. GET /llms.txt — project overview and endpoints
2. GET /api/v1/stats.json — current state
3. GET /api/v1/chains/by-sink/{sink}.json — chains to a consequence
4. GET /api/v1/nodes/{node-id}.json — node detail
5. GET /api/v1/defenses/all.json — defense registry
6. GET /api/v1/instances/all.json — versioned coverage
All endpoints return JSON. No authentication required.
Evidence: CONFIRMED (tested), INFERRED (modeled), REVERSED (tested, fails).
Evidence Classes
CORS: Access-Control-Allow-Origin: * — browser agents can fetch directly.
Data is a static snapshot from ./build.sh. The generated field in stats.json shows freshness.
Research data: all experiments conducted in isolated lab environments for defensive research.
Support & Expanded Access
Cyberdione Labs builds security programs that hold up against real adversaries.
Infrastructure Security
Attack surface assessments, hardening programs, and defensive architecture reviews across network, cloud, and enterprise environments. We find the dependencies your systems silently trust — and help you decide which ones to keep monitoring.
Emerging Threat Detection
We research how autonomous and agentic systems exploit infrastructure trust — covert channels, protocol abuse, and supply-chain dependencies — and build detection capabilities that catch what signature-based tools miss.
Expanded data access, custom analysis, and collaborative research available.