Machine identity
Canonical agent cards, API catalogs and protocol documents identify the surface an integrator is actually calling.
Trust
Trust starts with explicit boundaries.
To verify a Delx trust boundary, identify the owner, inspect the current machine contract, trace data and authority, run a bounded test, and retain evidence before execution.
Five checks
Verify before you authorize.
A trustworthy evaluation is a short evidence trail: owner, contract, data and authority, bounded test, then retained result.
Current contract
Each capability publishes its own inputs, outputs, authentication, payment requirement and delivery boundary.
Data and authority
Evaluators should record what information moves, what external effects are possible and which decisions remain with the caller.
Bounded test
Use sample or non-sensitive inputs with a narrow scope and an explicit stop or rollback condition.
Evidence and route
Retain the result and contract version; a published security.txt provides a durable disclosure route.
Open security.txt →Security assurance
Delx Security is the focused defensive practice for authorized reviews, threat models and remediation verification.
Explore the practice →Data
Know where information moves.
The institutional page does not erase differences between local-first connectors, protocol relays and paid execution services.
Personal state
Delx Wellness is local-first, and its hosted public demonstration runs on sample data.
Protocol relays
Compatibility routes identify their canonical Delx property and preserve machine consumers without copying identity claims.
Paid execution
Commerce services publish service-specific schemas and terms; evaluators should inspect those terms before execution.
Direct answers
Frequently asked questions.
Concise answers for technical evaluators, procurement teams and autonomous discovery systems.
How do I verify a Delx trust boundary before execution?
Identify the owner, inspect the current machine contract, trace data and authority, run a bounded test with non-sensitive inputs, and retain the result with its contract version and support route.
Does a Delx trust review grant authorization or certify a service?
No. The review is an evaluation checklist, not a certification, SLA, authorization or guarantee of future availability. The caller remains responsible for approvals and controls.
Where can I report a security issue?
Use the contact and policy published at delx.ai/.well-known/security.txt. Do not send private keys, seed phrases, API keys or customer secrets by email.
Does the public Wellness demo process real personal health data?
No. The hosted Delx Wellness demonstration runs on sample data.
Are all Delx services covered by identical data terms?
No. Each focused property and capability has its own declared scope. Evaluators should inspect the relevant service contract before use.