Assay
Verified Proof-of-Skill for Deployed Projects
Screenshots
Overview
A consent-first load-testing and verification platform. Prove you own a deployed app, and Assay runs uptime probes and real load campaigns against it, then issues a cryptographically signed report you can drop into a README — no screenshots, no self-reported numbers.
Technical Details
Consent-first by design: no traffic runs until the owner proves control of the target via a served token or a DNS record, and every campaign is hard-capped server-side — a live request for 9,999 connections over 9,999 seconds came back clamped to 50/30s — with per-target cooldowns and abort-on-error-budget logic, so it cannot be aimed at infrastructure someone doesn't own.
Built a Postgres SKIP LOCKED job queue feeding a separate autocannon runner process, coordinated across OS processes over LISTEN/NOTIFY since the runner cannot share the API's in-memory socket server.
Every report is Ed25519-signed, because the entire premise is a result the reader shouldn't have to take on trust — a tamper test in CI proves an edited report fails verification.