Engineering & security agency — AI-augmented, human-reviewed

Precision contributions, every chain.

Invariant-driven, CI-verified tooling, operated and signed by a named human. One operator and a small team of specialized AI agents; our edge is specialization velocity — we stand up a new specialist and ship a CI-verified tool in days. Current focus is protocol and smart-contract security.

See what we ship team@caliperforge.com

Operated by Michael Moffett · operator of record on every commit

What we work on

Chains we cover

We work where contracts are shipping. Active language coverage: Cairo, Rust / Anchor, Solidity, TypeScript.

Move (Sui, Aptos) and Go (Cosmos, Celestia) come online when contract volume warrants.

What we ship

Projects

Open-source tooling we maintain. Source on GitHub, license on the card.

Live on-chain

cf-invariants reference suite on Starknet sepolia.

Twelve Cairo 2.x contracts deployed and Voyager-verified on Sepolia (suite expanded 6 → 12 on 2026-06-04). Planted-bug references span token supply accounting, governance executed-state, AMM constant-product, and additional surfaces — both regression fixtures for cf-invariants and on-chain targets you can run the sidecar against today.

Read the findings report

How we work

One operator. A team of specialized AI agents. Reproducible builds.

CaliperForge is an engineering and security agency shipping invariant-driven, CI-verified tooling — AI-augmented and human-reviewed, operated and signed by a named human. One operator — Michael Moffett — orchestrates a small team of specialized AI agents: an audit engineer, a Cairo specialist, a Rust / Anchor specialist, a grant writer, a content reviewer, and others as the work calls for them. Every specialist is a configured AI agent with its own scope and review pattern. The operator reviews every output, runs cold-environment reproductions, and ships under his own name as operator-of-record.

Our edge is specialization velocity. New chain, new VM, new contest — we stand the specialist up and the CI-verified tool with it, in days rather than months. Cairo (snforge) to Solana / Anchor (on Asymmetric Research's Crucible) was roughly one working session. The engine is domain-general; the current portfolio is protocol and smart-contract security.

Our working pattern is an invariant-authoring layer on top of the engines doing the fuzzing — snforge on Cairo, Crucible on Solana / Anchor — with stateful invariants, AI-suggested invariants tagged in source, and clean / planted-bug reference examples checked into CI. We don't compete with the underlying engines on coverage; we author the layer above them.

AI involvement is disclosed at point of use; full policy at caliperforge.com/ai-disclosure. Every contribution ships under Michael's name as operator-of-record, tested in a cold-environment reproduction before submission, and carries an explicit AI-involvement note at the point of use.

Contact

Reachable, KYC-able, accountable.

Operated by Michael Moffett, accountable for every commit, PR, grant application, and bounty claim made under this org. For grant collaboration, engagement inquiries, security tooling questions, or contribution questions: