Zero-Trust AI Provenance Firewall & Automatic Humanizer Engine: Strips zero-width watermarks, C2PA metadata, and automatically converts AI text into a natural human tone.
Aphanis has 5 tools with reasonable naming (verb_noun pattern) and descriptions (100-200 chars), but critical gaps undermine quality. Input schemas are present but lack proper type definitions for several parameters, 'mode' and 'tone' are described as strings with enum-like values but not formally constrained as enums in JSON Schema. Parameters lack descriptions in some cases (e.g., 'perturb_statistical_watermarks' is described but its purpose is cryptic). No output schemas are documented, LLMs cannot predict what these tools return. Error handling is absent; no guidance on retryability, user-fixable errors, or recovery paths. The 'sanitize_file' tool modifies state (WRITE risk) but lacks confirmation/dry-run patterns. Overall, definitions are skeletal, suitable for a CLI but insufficient for reliable LLM agent integration.
Evaluates the 4-Vector Stego Risk Matrix (Unicode, Statistical Model, Metadata, Spatial Frequency).
Generates a signed SHA-256 Zero-Trust Clean Certificate JSON.
Transforms formal robotic AI output into natural conversational human text (contractions, phrase reduction).
Sanitizes file metadata, C2PA manifests, comments, and humanizes text content.
Sanitizes text and automatically humanizes tone using Stealth Engine profiles.
No output schemas documented. LLMs cannot predict return types, forcing them to guess what fields are available for downstream tool calls or user display.
Enum-like parameters ('mode', 'tone') are described as strings but not formally constrained in JSON Schema. LLMs may hallucinate invalid values like 'mode=stealth' instead of the documented 'paranoid|aggressive|standard|minimal'.
Parameter descriptions are cryptic or missing context. 'perturb_statistical_watermarks' and 'disrupt_image_pixels' lack explanation of when/why an LLM should enable them. No guidance on dependencies (e.g., does 'disrupt_image_pixels' require 'mode=paranoid'?).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 50 | 2026-07-28+ | v2 |
Destructive tool 'sanitize_file' (WRITE risk) lacks confirmation/dry-run pattern. No error handling guidance. Agents cannot safely retry or understand failure modes.
Tool 'humanize_text_tool' has a generic name ('_tool' suffix is redundant). Conflicts with 'humanize_text' parameter in 'sanitize_text'. LLMs may conflate the two.