WEAKTIME

WEAKTIME

Time-Capture Security Research

a just in time continuous disclosure report by Cyberdione Labs

Turn Back Time

Agent Integration

Connect AI agents, scripts, and automated tools to the weaktime API. All endpoints are static JSON files — no auth, no computation per request.

1. Discover

GET /llms.txt — Project description + endpoint catalog (llmstxt.org standard)

GET /api/v1/stats.json — Current state summary

2. Endpoints

EndpointDescription
/api/v1/dag.jsonFull DAG (nodes, edges, chains, density)
/api/v1/chains/all.jsonAll chains with paths
/api/v1/chains/confirmed.jsonCONFIRMED chains only
/api/v1/chains/by-sink/{name}.jsonChains per sink (17 sinks)
/api/v1/defenses/all.jsonAll defenses with coverage
/api/v1/nodes/{id}.jsonNode detail + instances + defenses
/api/v1/instances/all.jsonVersioned test coverage
/api/v1/ca/registry.json948 CA certificates
/api/v1/ca/stores.jsonTrust store mapping
/api/v1/experiments/all.jsonAll experiment records

3. Python Example

import requests
BASE = "https://weaktime.com"

# Get current state
stats = requests.get(f"{BASE}/api/v1/stats.json").json()
print(f"{stats['chains']['confirmed_pct']}% confirmed")

# Chains to TLS MITM
tls = requests.get(f"{BASE}/api/v1/chains/by-sink/tls-mitm.json").json()
for chain in tls["chains"][:3]:
    print(f"  {chain['id']}: {chain['evidence']}")

# Check your TLS stack
instances = requests.get(f"{BASE}/api/v1/instances/all.json").json()
mine = [i for i in instances if i["software"] == "OpenSSL"]
print(f"OpenSSL tested: {[i['version'] for i in mine]}")

4. LLM System Prompt

You have access to the weaktime security research API.

1. GET /llms.txt — project overview and endpoints
2. GET /api/v1/stats.json — current state
3. GET /api/v1/chains/by-sink/{sink}.json — chains to a consequence
4. GET /api/v1/nodes/{node-id}.json — node detail
5. GET /api/v1/defenses/all.json — defense registry
6. GET /api/v1/instances/all.json — versioned coverage

All endpoints return JSON. No authentication required.
Evidence: CONFIRMED (tested), INFERRED (modeled), REVERSED (tested, fails).

Evidence Classes

CONFIRMED — 759 tested INFERRED — 49 modeled REVERSED — 5 disproven

CORS: Access-Control-Allow-Origin: * — browser agents can fetch directly.
Data is a static snapshot from ./build.sh. The generated field in stats.json shows freshness.
Research data: all experiments conducted in isolated lab environments for defensive research.

Support & Expanded Access

Cyberdione Labs builds security programs that hold up against real adversaries.

Infrastructure Security

Attack surface assessments, hardening programs, and defensive architecture reviews across network, cloud, and enterprise environments. We find the dependencies your systems silently trust — and help you decide which ones to keep monitoring.

Emerging Threat Detection

We research how autonomous and agentic systems exploit infrastructure trust — covert channels, protocol abuse, and supply-chain dependencies — and build detection capabilities that catch what signature-based tools miss.

Expanded data access, custom analysis, and collaborative research available.