CanopiiCanopiiAll serversEnterprise →
co.ainumbers/tools

co.ainumbers/tools v0.4.8

Security Trust Score
Grade A · Strong posture
Tier 1 · Public sourceHigh confidence · 91%
Declared MCP capabilities
ResourcesPrompts

Host co.ainumbers/tools in a governed environment — SSO in front, every tool call attributed and audited.

Reputation2stars1forks1open issues18d agolast commit<1yage

Security controls

Deterministic, evidence-backed. Score earned from passing controls; a failed guard caps it.

Model–MCP Runtime Guardrails

  • Pass
    Indirect Prompt Injection (IPI) Defensesguardno injection markers

    Tool/prompt/resource text is free of hidden instructions that could hijack the agent.

  • Pass
    Strict JSON Schema EnforcementadditionalProperties:false present

    Tool inputs are constrained (additionalProperties:false), so unexpected arguments can't be smuggled in.

  • Pass
    Tool Definition Integrityguardtool definitions stable; no risky changes in version history

    Every consecutive version pair is diffed for new injection markers or destructive scope — a risky diff anywhere in history is a rug-pull (fail, durable); benign description drift warns.

  • Pass
    User-in-the-Loop / Approval Scopeguardno destructive tool scope

    No over-broad or destructive tools (arbitrary shell, bulk-delete) that warrant human approval.

Application Security Checks

  • Warn
    No path traversalguard35 occurrences

    Naive path checks let tools read/write outside intended directories (EscapeRoute-class).

    data/exporters/vc.mjs:45data/kernels/_hagate.mjs:93data/kernels/_proof.mjs:3047data/kernels/art-04-agent-identity-attestation-checker.kernel.mjs:72

    Fix: Resolve to a canonical path and verify containment; reject ../ and symlinks.

  • Warn
    Credentials sourced from environmentno env-based config detected

    Reading secrets from env/secret stores avoids hardcoding them.

    Fix: Read credentials from environment variables or a secret manager.

  • Warn
    Dependencies pinned (lockfile)no lockfile found

    A lockfile makes installs reproducible and resistant to silent dependency swaps.

    Fix: Commit a lockfile (package-lock.json / pnpm-lock.yaml / poetry.lock).

  • Warn
    Has a security policyno security policy

    A SECURITY.md gives a private path to report vulnerabilities.

    Fix: Add SECURITY.md with a disclosure contact and process.

  • Warn
    Adoption & popularitylimited adoption

    A small, capped nudge from stars/downloads — widely-used servers get more eyes on bugs. It can never offset a real security failure.

    Fix: Adoption grows naturally with real-world use; this never gates the score.

  • Pass
    No command-injection sinksguardno sinks found

    Untrusted tool input reaching a shell yields remote code execution.

  • Pass
    No dynamic code executionguardno sinks found

    eval()/exec()/Function() on tool-derived strings allows arbitrary code execution.

  • Pass
    No SSRF sinksguardno sinks found

    Fetching tool-supplied URLs can pivot into internal networks and metadata services.

  • Pass
    No unsafe deserializationguardno sinks found

    pickle/yaml.load/etc. on untrusted data can execute code.

  • Pass
    No committed secretsguardno secrets found

    Hardcoded keys/tokens in published source are live credentials an attacker can use.

  • Pass
    Actively maintainedrecent commits

    Unmaintained servers don't receive security fixes.

  • Pass
    Repository not archivedguardactive

    Archived repositories will never be patched.

  • Pass
    Declares a licenseMIT

    A clear license is required for legal enterprise use.

  • Not checked
    No known-vulnerable dependenciesno lockfile found

    Runtime dependencies (parsed from the lockfile) are scanned against OSV.dev for published CVEs. Advisory: flagged dependencies lower the score but don't hard-cap it, since transitive reachability is unproven.

  • Not checked
    Signed releasesnot evaluated

    Signed releases let consumers verify artifacts weren't tampered with.

  • N/A
    No install/post-install scriptsguardno published package

    install hooks run arbitrary code on every consumer at install time.

  • N/A
    Package name not typosquattingguardno published package

    Names mimicking popular packages are a common malware delivery vector.

  • N/A
    Published with provenanceno published package

    Build provenance attests the artifact was built from the claimed source by CI.

  • N/A
    Established maintainerno published package

    Brand-new / single anonymous maintainers raise takeover and malware risk.

Transport & Trust Model

  • Warn
    Execution Sandboxingruns natively (no container image)

    A container/sandbox image limits blast radius; a server that runs natively has full host access.

    Fix: Ship a Dockerfile/Containerfile (or document a sandboxed run) so the server runs isolated.

  • Pass
    Transport Encryption (TLS)guardall remotes use HTTPS

    Plaintext HTTP exposes traffic and bearer tokens to interception.

  • Pass
    IAM / Authentication ScopingOAuth / PRM handling detected

    OAuth 2.1 / Protected Resource Metadata gates who can invoke tools.

  • Pass
    Network Exposureno bind-all detected

    Binding 0.0.0.0 or exposing debug inspectors widens the attack surface.

  • N/A
    Live Endpoint Reachablenot dynamically scanned

    A dynamic scan connected to the declared remote endpoint and it responded — verified live, not a dead URL.

  • N/A
    Authentication Enforced (live)not dynamically scanned

    If the server declares auth is required, it must actually reject anonymous clients. Serving tools to unauthenticated callers is a real exposure.

Tools (638)

vc_issuefind_toolrun_chainfind_chaincompute_irrcompute_npvrecon_matchsdjwt_issueanchor_stampcompute_dscrcompute_dv01compute_xirrredline_diffcalculate_xvacamt053_parselei_kyb_checkotlp_validaterun_kernel_vmsdjwt_presentha_gate_statusmap_pil_flavorredline_verifyacdc_said_checkaudit_mcp_oauthcompute_annuityexport_artifactbuild_chaingraphcheck_sod_matrixcompute_ipfs_cidcompute_mla_maprha_bundle_exportpain001_validatesimulate_frtb_estest_hpml_escrowbuild_cbcr_reportchoose_cc_licensecompose_globe_gircompute_breakevencompute_convexitymap_mt9xx_to_camtotlp_span_receiptrun_mica_casp_fitscreen_je_rulesetsuggest_tool_ideavalidate_emir_upiworkbook_evaluatecompose_ap2_promptcompute_dti_ratioscompute_llpa_stackcompute_ltv_ratioscompute_mlr_rebatedecode_mpp_sessiongenerate_iscc_codeha_record_validatelint_metro2_recordrecompute_fund_navrun_section125_ndtselect_cbe_licensesimulate_x402_flowvalidate_spdx_sbomworkbook_csv_parseassemble_mutual_ndaassess_defi_lendingbuild_evidence_packbuild_rights_recordcompute_perp_margincompute_pt_yt_yielddecode_x402_paymentlint_cbom_structuremap_bhc_schedule_hcmatch_confirmationsmodel_l1_fee_runwaymodel_perp_positionrecompute_bordereaurecompute_fund_feesscan_tool_poisoningscore_mcp_readinessverify_merkle_batchassemble_ai_addendumbuild_workflow_linkscheck_client_portingcheck_dpa_gdpr_art28check_eudi_readinesschecklist_verify_runclassify_nis2_entitycompile_work_mandatecompute_gross_to_netcompute_perp_fundingconvert_tabular_datacustomer_risk_ratinglint_mismo_uldd_uladlist_ainumbers_toolsmap_bhc_schedule_hcrmap_tempo_settlementreconcile_sii_ifrs17resolve_recall_tracerun_pqc_timeline_fitscore_aml_typologiessimulate_ict_cascadetest_hoepa_high_costvalidate_fsma204_cteverify_did_webvh_logverify_ipe_integrityverify_reserve_proofallocate_ihb_interestassess_psd3_readinessassess_restaking_riskbind_attested_subjectbuild_digest_manifestbuild_product_lineagebuild_session_receiptbuild_tdm_reservationcheck_ssi_conformancecompare_corridor_costcompare_rights_matrixcompute_basel31_deltacompute_bond_durationcompute_esrp_exposurecompute_portfolio_varcompute_rwa_erba_2026compute_rwa_scenarioscompute_scra_rate_capconvert_tempo_fee_ammcurrency_basket_indexmodel_buy_in_exposuremodel_x402_settlementplan_attribute_samplerecord_fund_positionsrun_401k_adp_acp_testrun_agent_economy_fitrun_ai_governance_fitrun_digital_trade_fitrun_rate_shock_ladderscore_clause_coveragesimulate_output_floorsimulate_spend_policysimulate_vop_matchingvalidate_acp_checkoutvalidate_mletr_recordverify_a2a_agent_cardverify_etf_pcf_basketverify_execution_hashverify_kya_x402_scopeworkbook_range_digestapply_climate_scenarioassemble_license_termsassess_traiga_exposurecalculate_csdr_penaltycalculate_repo_haircutchecklist_step_receiptclassify_dora_incidentclassify_eccn_dual_usecompute_15c3_3_reservecompute_experience_modcompute_options_greeksevaluate_irrbb_sot_eveevaluate_irrbb_sot_niilint_trace_cat_reportslint_x12_claim_recordslint_x402_v2_migrationmodel_arc_stablefx_rfqplan_tls_pki_migrationrecompute_csdr_penaltyreconcile_emir_pairingrun_arc_fit_diagnosticrun_audit_recalc_suiterun_emir_reporting_fitrun_eudr_readiness_fitrun_model_test_batteryrun_regrpt_edit_checksrun_umr_aana_readinessscore_payee_name_matchsweep_docket_deadlinesvalidate_c2pa_manifestvalidate_royalty_splitverify_eth_state_proofverify_saleable_returnverify_slsa_provenanceagentic_mandate_sandboxap2_aml_mandate_builderbuild_dora_roi_registercheck_agent_attestationcheck_agent_token_scopecheck_camera_provenancecheck_cash_leg_finalitycheck_irrbb_csrbb_scopeclassify_sco60_exposurecompute_escrow_analysiscompute_globe_topup_taxcompute_oprisk_sma_2026explain_regrpt_varianceintoto_record_chain_runlookup_reg_z_thresholdsmodel_arc_cpn_economicspredict_settlement_failrdarr_quality_scorecardreplicate_model_outputsrun_ai_act_highrisk_fitrun_slate_reporting_fitscore_eudr_country_riskselect_embedded_licensesimulate_consent_stresssweep_fedwire_addressesvalidate_a2a_agent_cardvalidate_ap2_mcp_policyvalidate_cyclonedx_sbomvalidate_ebam_acmt_flowvalidate_einvoice_batchvalidate_eugb_factsheetvalidate_private_inputsvalidate_pvp_settlementverify_anchored_extractverify_license_electionassess_ai_act_conformityaudit_agent_key_rotationbaas_provider_comparatorbuild_ai_conformity_packbuild_conversion_receiptbuild_google_ap2_mandatecalculate_mica_own_fundscertify_license_electioncheck_mcp_registry_entrycheck_qm_points_and_feesclassify_agentic_ai_riskclassify_carf_reportablecompose_workpaper_bundlecompute_globe_sbie_topupcompute_hmda_rate_spreadcompute_raroc_loan_pricecompute_rbc_action_levelemit_chaingraph_artifactlint_arc_xreserve_configlint_lei_payment_bindinglint_mcp_tool_definitionoracle_price_aggregationprice_embedded_insurancerecompute_best_executionrun_irrbb_disclosure_fitrun_tempo_fit_diagnosticscore_taxonomy_alignmentscreen_sanctions_privatesimulate_app_fraud_graphsimulate_var_monte_carlotest_hedge_effectivenessvalidate_a2a_trust_chainvalidate_einvoice_formatvalidate_fund_collateralvalidate_mcp_server_jsonvalidate_mt700_lc_fieldsverify_einvoice_vat_calcverify_revocation_statusverify_trid_apr_accuracyaggregate_ownership_50pctanalyze_prediction_marketanchor_document_integritybind_agreement_acceptancebuild_agent_test_evidencebuild_ai_workpaper_recordbuild_disclosure_manifestbuild_idv_session_receiptbuild_pld_disclosure_packbuild_vop_session_receiptcheck_digital_trade_rulescheck_nis2_art21_measurescheck_sb53_frontier_scopecompute_cross_border_feescompute_disparity_metricscompute_flsa_regular_ratecompute_lcr_nsfr_leverageconvert_markdown_documentderive_beacon_fair_samplediagnose_canton_readinessfind_prediction_arbitragelint_ucp_checkout_payloadmap_agent_payment_mandatemap_nist_ai_rmf_functionsmodel_tempo_gas_economicsrecompute_pe_waterfall_lprecord_index_constituentsrun_carbon_compliance_fitrun_liquidity_stress_testrun_treasury_clearing_fitscore_credit_default_riskvalidate_a2a_x402_mandatevalidate_cctp_v2_transfervalidate_dpp_data_carriervalidate_eudr_geolocationverify_conversion_receiptverify_trade_document_setworkbook_roundtrip_verifyaggregate_reputation_scoreaggregate_taxonomy_kpi_garassess_mica_casp_readinessaudit_acp_ucp_product_feedbuild_agent_traffic_policybuild_claim_dispute_bundlebuild_etr_possession_chainbuild_fria_monitoring_plancalculate_irrbb_eve_shockscheck_ai_act_art50_markingcheck_etr_control_evidencecheck_fido_pqc_conformancecheck_nway_balance_closurecompare_basel_2023_vs_2026compute_cfpb_1071_coverageinspect_visa_tap_signaturelink_traceability_lot_codelint_stock_token_valuationmap_robinhood_chain_regimemobilize_margin_collateralreconcile_mpp_subscriptionresolve_cbam_default_valuescore_mcp_server_readinesstest_bifsg_bias_thresholdstest_nav_error_materialityvalidate_agent_audit_trailvalidate_agent_obo_mandatevalidate_ap2_mandate_chainvalidate_emir_trade_reportvalidate_openvex_statementverify_ap2_payment_receiptverify_finp2p_ledger_proofamortize_asc606_commissionsattest_daily_reconciliationbuild_adverse_action_noticebuild_agent_incident_recordbuild_amortization_schedulebuild_model_inventory_entrybuild_no_russia_clause_packcheck_assessor_independencecheck_conforming_loan_limitcheck_emir_uti_completenesscheck_g20_corridor_cost_gapcheck_gpai_code_conformancecheck_license_compatibilityclassify_qm_apr_apor_spreadcompute_canton_traffic_costcompute_cdd_ownership_25pctcompute_federal_withholdingcompute_fha_mip_eligibilitycompute_fund_expense_ratioscompute_lcm_rate_derivationcompute_note_h_margin_debitcompute_pqc_deadline_laddercompute_trid_tolerance_curedetect_timeseries_anomaliesdispose_carf_status_messagegenerate_attribution_stringlint_aiuc1_control_evidencelint_mcp_server_conformancemap_call_report_schedule_rcmodel_cbam_certificate_costoptimize_settlement_capitalplan_aml_disposition_sampleprove_metadata_sanitizationrdarr_aggregation_recomputerecompute_garnishment_stackrecompute_payment_waterfallrecompute_section16b_profitrecompute_tmpg_fails_chargereplay_supervisory_scenarioroute_vida_oss_registrationrun_call_report_edit_checksrun_insurance_reporting_fitrun_sanctions_screening_fitrun_t1_readiness_diagnosticscreen_tip20_transfer_batchsimulate_agent_spend_policysimulate_stablecoin_reservevalidate_form5500_schedulesvalidate_input_attestationsvalidate_mcp_task_lifecycleverify_disclosure_inclusionverify_product_authenticityverify_webbotauth_signatureverify_witness_cosignaturesaggregate_execution_receiptsassemble_aiuc1_evidence_packassemble_ocg_evidence_bundleattest_margin_call_lifecyclebuild_ai_decision_log_recordcalculate_cecl_ecl_allowancecheck_allocation_affirmationcheck_debt_validation_noticecheck_ifrs17_risk_adjustmentcheck_iso20022_pqc_readinessclassify_safeguarding_methodclassify_settlement_finalityclassify_t1_posttrade_timingcompare_cross_ccp_pqd_fieldscompute_fdic_assessment_ratecompute_fx_netting_positionscompute_multilateral_nettingcompute_reg_z_appendix_j_aprdetect_transaction_anomaliesdraft_ap2_mandate_credentialestimate_ficc_margin_nettinggenerate_zk_compliance_prooflint_cbpr_structured_addresslint_crypto_asset_whitepapermap_call_report_schedule_rcrmap_iso20022_to_evm_calldatamap_nmd_behavioral_repricingmodel_agent_service_meteringparse_camt053_reconciliationprecheck_reserve_attestationreconcile_erc8056_multiplierrun_tokenized_settlement_fitrun_vop_readiness_diagnosticscope_mica_token_and_servicescore_cash_forecast_accuracyscore_credit_model_quantizedsize_ccp_default_fund_cover2validate_fdic370_output_filevalidate_mcp_server_identityvalidate_nft_metadata_art209validate_regf_call_frequencyvalidate_signature_directoryvalidate_slate_report_fieldsverify_acdc_delegation_chainverify_dual_layer_disclosureverify_timestamp_attestationanalyze_dc_vs_lc_cost_benefitassess_suspect_product_statusbuild_art5_diligence_evidencebuild_traiga_safe_harbor_packcalculate_solvency2_scr_ratiocheck_card_act_ability_to_paycheck_cra_annex1_completenesscheck_icm_quorum_forgery_riskcheck_mica_reserve_disclosurecheck_screening_list_coveragechecklist_validate_definitionclassify_ai_system_governanceclassify_eudr_commodity_scopecompose_control_test_evidencecompute_large_exposures_limitcompute_remittance_disclosurecompute_stress_test_scenariosestimate_cross_margin_benefitlint_besu_settlement_contractmodel_arc_paymaster_economicsmodel_tempo_payment_economicsrun_dora_readiness_diagnosticrun_vida_readiness_diagnosticscore_fuzzy_match_calibrationvalidate_ai_impact_assessmentvalidate_canton_dvp_atomicityvalidate_commission_hierarchyvalidate_emir_lifecycle_eventvalidate_signature_agent_cardvalidate_w8_series_structuralverify_migration_completenessadjudicate_emir_reconciliationage_emir_reconciliation_breaksassess_circumvention_diligenceassess_mar_crypto_surveillanceassess_model_validation_statusattest_calc_agent_independencebuild_mastercard_agentic_tokencalculate_basis_risk_nii_shockcalculate_claims_stp_economicscheck_capital_adequacy_privatecheck_linea_l2_finality_windowcheck_purpose_code_requirementclassify_redline_round_changescompare_agentic_rail_protocolscompare_model_outcome_analysismap_ai_act_procurement_clausesprevalidation_readiness_scorerreconcile_commission_statementscreen_onledger_transfer_batchsimulate_gpi_tracker_lifecyclestress_test_ap_redemption_pathvalidate_adverse_action_noticevalidate_tempo_zone_disclosurevalidate_tfr_travel_rule_batchvalidate_tip20_memo_commitmentverify_address_migration_batchaggregate_solvency2_scr_modulesaudit_mcp_tool_scope_revocationcalculate_nis2_penalty_exposurecheck_agency_eligibility_matrixcheck_genius_reserve_disclosurecheck_nis2_governance_readinesscheck_operator_exit_portabilitycompile_model_risk_lineage_packcompute_va_funding_fee_residuallint_fedwire_structured_addressmap_irrbb_standardised_approachmodel_clearing_access_economicsrecompute_ccp_default_waterfallrecompute_certified_payroll_pwarecompute_stock_loan_rebate_feereconcile_x402_batch_settlementscore_tempo_validator_readinessvalidate_ap2_mandate_credentialvalidate_canton_party_allowlistvalidate_cat_bond_trigger_termsvalidate_dtc_tokenized_treasuryvalidate_ifrs17_csm_rollforwardvalidate_qfc_recordkeeping_filevalidate_tempo_token_complianceverify_settlement_asset_backingassess_iso42001_aims_conformancebenchmark_tp_interquartile_rangebuild_dual_control_certificationcheck_cscf_control_applicabilityclassify_blockchain_quantum_riskclassify_bold_challenge_finalitycompare_pension_lump_sum_annuitycompose_eval_attestation_receiptcompute_asset_liability_coveragecompute_counterparty_limit_checkcompute_discount_window_capacitycompute_globe_jurisdictional_etrcompute_rbc_action_level_privateexamine_lc_document_presentationregister_mra_remediation_closureroll_up_aml_lookback_dispositionroute_mica_transitional_deadlinerun_agentic_readiness_diagnosticrun_mcp_deployability_diagnosticscore_mt_mx_translation_fidelityscore_nis2_incident_significanceselect_agentic_checkout_protocolvalidate_x402_deferred_handshakeassess_naic_ais_program_readinessbuild_226j_response_evidence_packbuild_allocation_decision_receiptbuild_safeguarding_audit_evidencecalculate_cbam_embedded_emissionscheck_mt101_coexistence_readinesscheck_reg_e_remittance_disclosurecheck_safeguarding_reconciliationclassify_digital_asset_regulatoryclassify_ifrs17_measurement_modelcompare_agentic_payment_protocolscompute_custody_segregation_ratiocompute_parametric_trigger_payoutcompute_por_liabilities_compositecompute_settlement_efficiency_kpievaluate_globe_safe_harbour_testslint_insurance_evidence_freshnessregister_source_arrival_freshnessrollforward_y14_capital_worksheetrun_illustration_selfsupport_testscore_agent_insurability_evidencescore_nis2_supply_chain_diligencescore_sanctions_screening_qualitytest_reg_w_affiliate_transactionsvalidate_audit_trail_completenessvalidate_cross_network_settlementvalidate_deposit_token_compliancevalidate_dtcc_ca_iso20022_messageaggregate_cbam_precursor_emissionsattest_bulk_disbursement_integritycheck_producer_license_reciprocityclassify_emir3_simm_approval_scopeclassify_ledger_consensus_finalityclassify_reward_flow_related_partyclassify_settlement_asset_finalitycompute_canton_app_reward_estimatecompute_tempo_mainnet_fee_capacitycompute_var_backtest_traffic_lightcrosswalk_agent_payment_rail_trustlint_securities_settlement_messagelookup_mletr_jurisdiction_adoptionoptimize_social_security_claim_agerecompute_trustee_report_waterfallreconcile_report_to_general_ledgerresolve_provenance_ingredient_treerun_robinhood_chain_fit_diagnosticscore_partner_stablecoin_readinessvalidate_content_binding_assertionvalidate_openids_homeowners_recordvalidate_vida_einvoice_conformanceverify_dscsa_transaction_statementassess_cra_vuln_reporting_readinessbuild_einvoice_transmission_receiptcheck_securitization_risk_retentionestimate_cross_venue_margin_capitalinspect_visa_trusted_agent_protocollink_eudr_supply_chain_traceabilitymodel_stablecoin_corridor_economicsrecompute_exchange_fee_tier_invoicereconcile_aml_lookback_completenessroute_einvoice_jurisdiction_mandatevalidate_agent_commerce_conformancevalidate_mcp_authorization_metadatavalidate_pacs008_party_completenessverify_content_credential_signatureassess_vida_drr_reporting_obligationassess_vida_recapitulative_migrationcheck_iolta_three_way_reconciliationcheck_retail_installment_disclosuresclassify_avax_permissioning_controlsclassify_emir3_active_account_statusdetermine_deposit_insurance_coveragelint_ab2013_training_data_disclosurevalidate_canton_selective_disclosurevalidate_collateral_swap_eligibilityverify_proof_of_reserves_consistencybuild_ai_training_data_lineage_recordbuild_public_money_settlement_receiptcheck_official_statement_completenesscompare_receivables_finance_economicscompute_aca_affordability_safe_harborcompute_intraday_liquidity_monitoringderive_parametric_index_from_receiptslint_compelling_evidence_ce30_agenticroute_partner_stablecoin_jurisdictionvalidate_eudr_due_diligence_statementvalidate_tokenized_security_lifecyclebuild_idv_verification_incident_recordbuild_validator_change_control_receiptcheck_credit_concentration_topn_sectorcheck_fatca_crs_submission_conformancecheck_private_student_loan_disclosurescheck_tokenized_collateral_eligibilityclassify_vida_platform_deemed_suppliercompute_stock_token_collateral_haircutrecompute_corporate_action_entitlementrecompute_lease_schedule_asc842_ifrs16track_fatca_crs_ro_remediation_closurebuild_sanctions_screening_evidence_packcheck_muni_arbitrage_spending_exceptionclassify_annex3_decisioning_obligationscompute_basel_haircut_adjusted_exposuretrack_ifrs17_loss_component_rollforwardassess_agent_directory_publish_readinesslint_settlement_orchestrator_conformancecompute_cyber_incident_notification_clockcompute_identity_proofing_assurance_levelbuild_conditional_relief_collateral_receiptcheck_genius_reserve_disclosure_conformancecompute_fr2052a_inflow_outflow_classificationclassify_dora_ict_incident_and_clock_deadlines