video1.0<iframe src="https://www.loom.com/embed/7862d9947fbc4135ac299d23f08cb37e" frameborder="0" width="3340" height="2505" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>25053340Loomhttps://www.loom.com25053340https://cdn.loom.com/sessions/thumbnails/7862d9947fbc4135ac299d23f08cb37e-d528c472f977e6f0.gif180.114This Loom explains Bitness, a recorder and verifier that detects spoofed tool calls and serious breaches in coding agents. It describes a simulated attack against Meta’s Muse code agent using a decoy token from a fake service, where Bitness watches externally, saves the token to disk, and stops the run based on a stop rule. It also covers Muse Spark 1.3 and Muse Glimmer 30B recording and replaying real calls with deterministic rechecks, producing plain-English advisory outputs. Finally, it notes verification can fail in milliseconds when a signed receipt field is altered, and that the system uses multiple local and MCP read-only tools to enforce signed verdicts.