---
title: "pi-casefile"
description: "Offensive security case ledger for Pi Agent, evidence tracking with machine-verified PoC gates."
canonical: https://agentpluginsdirectory.com/plugins/pi-casefile
last-updated: 2026-10-08
---

# pi-casefile
Offensive security case ledger for Pi Agent, evidence tracking with machine-verified PoC gates.
- Slug: pi-casefile
- Publisher: xaccefy
- Repository: https://github.com/xaccefy/pi-casefile
- Manifest: plugin.json
- Version: 0.11.1
- License: MIT
- Category (editorial): security
- Skills: 0
- MCP servers: 0
- Stars: 0
- Repository created: 2026-08-25
- Repository last pushed: 2026-09-22
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/pi-casefile
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What pi-casefile does, in the publisher's words

Security case ledger for the Pi agent, evidence tracking with machine-verified PoC gates.

A structured ledger for offensive-security work, bug bounties, CTFs, audits, built around one idea: an agent's claim is not evidence until the machine replays it.

Cases move hypothesis → investigating → confirmed → reported. Promotion between phases is gated:

- Zero exit is necessary but never proof: direct-response findings require nonce-bound body evidence plus a DNS-pinned, conclusive target_only replay against an operator-approved control
- Differential confirmation: inter_host (attack vs control host) or intra_target (attack vs baseline request) so "it worked" means the discriminator fired, not "the agent said so"
- Blind/OOB classes confirm through an operator-run oracle with per-run tokens and source-separation attestation

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/xaccefy/pi-casefile/HEAD/README.md