-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathindex.html
More file actions
785 lines (733 loc) · 48.9 KB
/
Copy pathindex.html
File metadata and controls
785 lines (733 loc) · 48.9 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>AgenTrust — An Open Ecosystem for Verifiable AI Agents</title>
<meta name="description" content="AgenTrust is an open ecosystem where developers, researchers, operators, and enterprises build, test, adopt, and sustain verifiable governance for AI agents, with portable telemetry that correlates the evidence.">
<link rel="canonical" href="https://agentrust-io.com/">
<meta name="robots" content="index, follow">
<!-- Icons -->
<link rel="icon" href="/favicon.ico" sizes="any">
<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
<!-- Open Graph -->
<meta property="og:type" content="website">
<meta property="og:site_name" content="AgenTrust">
<meta property="og:title" content="AgenTrust: An Open Ecosystem for Verifiable AI Agents">
<meta property="og:description" content="Build, test, adopt, and sustain open technology for verifiable AI agent governance.">
<meta property="og:url" content="https://agentrust-io.com/">
<meta property="og:locale" content="en_US">
<meta property="og:image" content="https://agentrust-io.com/og.png">
<meta property="og:image:width" content="1200">
<meta property="og:image:height" content="630">
<meta property="og:image:alt" content="AgenTrust: an open ecosystem for verifiable AI agents">
<!-- Twitter -->
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:title" content="AgenTrust: An Open Ecosystem for Verifiable AI Agents">
<meta name="twitter:description" content="Build, test, adopt, and sustain open technology for verifiable AI agent governance.">
<meta name="twitter:image" content="https://agentrust-io.com/og.png">
<!-- Structured data: Organization + WebSite -->
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@graph": [
{
"@type": "Organization",
"@id": "https://agentrust-io.com/#organization",
"name": "AgenTrust",
"url": "https://agentrust-io.com/",
"description": "An open ecosystem where developers, researchers, operators, and enterprises build, test, adopt, and sustain verifiable governance for AI agents.",
"sameAs": [
"https://github.com/agentrust-io",
"https://trace.agentrust-io.com",
"https://manifest.agentrust-io.com",
"https://cmcp.agentrust-io.com",
"https://github.com/agentrust-io/agentrust-telemetry"
]
},
{
"@type": "WebSite",
"@id": "https://agentrust-io.com/#website",
"name": "AgenTrust",
"url": "https://agentrust-io.com/",
"publisher": { "@id": "https://agentrust-io.com/#organization" }
}
]
}
</script>
<!-- Structured data: the open standards -->
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "ItemList",
"name": "AgenTrust open standards",
"itemListElement": [
{
"@type": "ListItem",
"position": 1,
"item": {
"@type": "TechArticle",
"name": "TRACE",
"url": "https://trace.agentrust-io.com/",
"description": "Trust, Runtime Attestation, and Compliance Evidence. Hardware-rooted cryptographic receipts for every agent action, signed by the TEE and verifiable by anyone."
}
},
{
"@type": "ListItem",
"position": 2,
"item": {
"@type": "TechArticle",
"name": "Agent Manifest",
"url": "https://manifest.agentrust-io.com/",
"description": "A structured, machine-readable declaration of an agent's capabilities, permissions, and data access policies that operators and orchestrators can verify before invocation."
}
},
{
"@type": "ListItem",
"position": 3,
"item": {
"@type": "TechArticle",
"name": "Confidential MCP (cMCP)",
"url": "https://cmcp.agentrust-io.com/",
"description": "An extension to the Model Context Protocol that runs tool calls inside a Trusted Execution Environment so the host process cannot observe inputs, outputs, or intermediate state."
}
},
{
"@type": "ListItem",
"position": 4,
"item": {
"@type": "TechArticle",
"name": "Confidential A2A (cA2A)",
"url": "https://ca2a.agentrust-io.com/",
"description": "A trust profile on the Agent2Agent (A2A) protocol that makes agent-to-agent delegation verifiable and confidential: attested, attenuated delegation, a sealed peer channel, and an offline-verifiable provenance record for every hop."
}
}
]
}
</script>
<!-- Structured data: FAQ -->
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "FAQPage",
"mainEntity": [
{
"@type": "Question",
"name": "What is AgenTrust?",
"acceptedAnswer": {
"@type": "Answer",
"text": "AgenTrust is an open ecosystem for verifiable AI agent governance. Developers, researchers, operators, and enterprises can use its open specifications, implementations, test suites, and adoption guidance; contribute improvements; and help maintain the shared infrastructure over time."
}
},
{
"@type": "Question",
"name": "What is TRACE?",
"acceptedAnswer": {
"@type": "Answer",
"text": "TRACE stands for Trust, Runtime Attestation, and Compliance Evidence. It defines hardware-rooted cryptographic receipts for every agent action, signed by the Trusted Execution Environment and verifiable by anyone."
}
},
{
"@type": "Question",
"name": "What is Agent Manifest?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Agent Manifest is a structured, machine-readable declaration of an agent's capabilities, permissions, and data access policies. Operators and orchestrators can verify an agent's manifest before invocation."
}
},
{
"@type": "Question",
"name": "What is Confidential MCP (cMCP)?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Confidential MCP is an extension to the Model Context Protocol that runs tool calls inside a Trusted Execution Environment, so the host process cannot read tool-call plaintext from enclave memory. That protection is structural only where the Cedar egress policy denies telemetry and APM endpoints, and it covers the tool-call boundary rather than model inference or the agent's context window."
}
},
{
"@type": "Question",
"name": "What is Confidential A2A (cA2A)?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Confidential A2A is a trust profile layered on the Agent2Agent (A2A) protocol, not a competing transport. Where A2A's Signed Agent Card verifies only the domain owner, cA2A adds attested, attenuated delegation (each hop's authority is a provable subset of its parent's), runtime attestation of the peer, a sealed channel that binds the task payload to the peer's attested measurement, and a linked provenance record per hop that forms an offline-verifiable delegation DAG. It is a developer preview."
}
},
{
"@type": "Question",
"name": "How do the AgenTrust standards relate to each other?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Agent Manifest establishes who an agent is and what it is allowed to do, cMCP executes tool calls confidentially inside a Trusted Execution Environment, cA2A carries that trust across agent-to-agent delegation on A2A, and TRACE produces hardware-signed receipts that prove what actually happened. Together they cover identity, intent, delegation, and behavior."
}
},
{
"@type": "Question",
"name": "Are the AgenTrust standards open source?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Yes. TRACE, Agent Manifest, cMCP, and cA2A are open source, with source, schemas, and examples on GitHub at github.com/agentrust-io."
}
},
{
"@type": "Question",
"name": "What is the secure version of MCP?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Confidential MCP (cMCP) is the security-hardened way to run the Model Context Protocol. It executes MCP tool calls inside a Trusted Execution Environment (TEE), so tool-call plaintext is not readable from the host, and it emits a signed TRACE receipt for every call that anyone can verify. Two bounds worth stating: the plaintext guarantee holds where the egress policy denies telemetry and APM endpoints, and the receipt is hardware-attested when the gateway runs in a TEE and signed-only in software mode. If you need a secure or confidential MCP deployment, cMCP is the AgenTrust profile for it."
}
},
{
"@type": "Question",
"name": "What is the secure version of A2A?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Confidential A2A (cA2A) is the security profile for the Agent2Agent (A2A) protocol. A2A authenticates a peer's domain but not what it does with a delegated task. cA2A adds attested, attenuated delegation, runtime attestation of the peer, a sealed peer channel, and offline-verifiable provenance, so agent-to-agent delegation is secure and confidential end to end, not just authenticated at the front door."
}
}
]
}
</script>
<link rel="stylesheet" href="/design-system.css?v=12">
</head>
<body class="agentrust-hub" id="top">
<!-- Header -->
<header>
<div class="header-inner">
<a href="/" class="logo">agentrust<span class="logo-dot">.</span>io</a>
<nav>
<ul class="header-nav">
<li><a href="#ecosystem">Ecosystem</a></li>
<li><a href="/marketplace/">Marketplace</a></li>
<li><a href="#standards">Technology</a></li>
<li><a href="#tools">Tools</a></li>
<li><a href="#fellowship">Fellowship</a></li>
<li><a href="https://github.com/agentrust-io">GitHub</a></li>
</ul>
</nav>
</div>
</header>
<!-- Section rail: jump list for a long page. Ticks only until hovered or focused. -->
<nav class="railnav" aria-label="Sections on this page">
<ul>
<li><a href="#top"><span class="railnav-tick"></span><span class="railnav-label">Top</span></a></li>
<li><a href="#trust-stack"><span class="railnav-tick"></span><span class="railnav-label">Trust chain</span></a></li>
<li><a href="#ecosystem"><span class="railnav-tick"></span><span class="railnav-label">Ecosystem</span></a></li>
<li><a href="#adoption"><span class="railnav-tick"></span><span class="railnav-label">Who's involved</span></a></li>
<li><a href="#community"><span class="railnav-tick"></span><span class="railnav-label">Governance</span></a></li>
<li><a href="#playbooks"><span class="railnav-tick"></span><span class="railnav-label">Compliance</span></a></li>
<li><a href="#standards"><span class="railnav-tick"></span><span class="railnav-label">Technology</span></a></li>
<li><a href="#tools"><span class="railnav-tick"></span><span class="railnav-label">Tools</span></a></li>
<li><a href="#status"><span class="railnav-tick"></span><span class="railnav-label">What's launched</span></a></li>
<li><a href="#fellowship"><span class="railnav-tick"></span><span class="railnav-label">Fellowship</span></a></li>
<li><a href="#about"><span class="railnav-tick"></span><span class="railnav-label">About</span></a></li>
<li><a href="#faq"><span class="railnav-tick"></span><span class="railnav-label">FAQ</span></a></li>
</ul>
</nav>
<!-- Hero -->
<div class="fellowship" data-fellowship-banner data-closes="2026-08-30T00:00:00-07:00">
<div class="fellowship-inner">
<span class="fellowship-tag">Now hiring</span>
<span class="fellowship-text"><strong>AgenTrust Fellowship 2026.</strong> A six-month paid, part-time programme that develops maintainers for the verifiable AI ecosystem. Applications open 1 August and close 29 August 2026; the cohort starts in September.</span>
<a class="fellowship-link" href="https://www.opaque.co/resources/articles/opaque-announces-applications-for-agentrust-fellowship-to-advance-open-standards-for-verifiable-ai-agents">Read the announcement →</a>
</div>
</div>
<div class="hero">
<div class="hero-inner">
<p class="hero-eyebrow">Open Technology · Shared Stewardship · Real Adoption</p>
<h1>Build the ecosystem for verifiable AI agents</h1>
<div class="hero-promo">
<span class="hero-promo-tag">New · Hands-on</span>
<span class="hero-promo-text">Don't just read the spec: <b>run cMCP yourself.</b> Write a policy, watch it block a data leak, verify a signed receipt.</span>
<a class="hero-promo-link" href="/quickstart/">Try cMCP in under 10 minutes →</a>
</div>
<p>AgenTrust brings developers, researchers, operators, and enterprises together to turn open governance technology into infrastructure people can adopt and sustain. Build with the specifications, correlate governance evidence with portable telemetry, prove interoperability with the test suites, and help maintain the ecosystem.</p>
<div class="hero-actions">
<a href="/quickstart/" class="btn btn-primary">Run the 10-minute demo →</a>
<a href="#trust-stack" class="btn btn-ghost">Understand the trust stack</a>
<a href="#ecosystem" class="btn btn-ghost">Find your adoption path</a>
</div>
</div>
</div>
<section class="section" id="trust-stack">
<div class="section-header">
<div class="section-label">How it fits together</div>
<div class="section-title">One verifiable trust chain</div>
</div>
<div class="trust-flow">
<div class="trust-step"><span class="trust-number">01 · DECLARE</span><strong>Agent Manifest</strong><p>Binds identity, code, model, tools, policy, and provenance before the agent runs.</p><span class="trust-home">CoSAI WS4 → OASIS Open · Phase 1 review open</span></div>
<div class="trust-step"><span class="trust-number">02 · ENFORCE</span><strong>cMCP</strong><p>Attests the runtime and evaluates every MCP tool call against policy inside a TEE.</p><span class="trust-home">Proposed → AAIF · contribution path</span></div>
<div class="trust-step"><span class="trust-number">03 · DELEGATE</span><strong>cA2A</strong><p>Carries attenuated authority and attested provenance across every agent-to-agent hop.</p><span class="trust-home">Proposed → AAIF · contribution path</span></div>
<div class="trust-step"><span class="trust-number">04 · PROVE</span><strong>TRACE</strong><p>Emits portable signed evidence that anyone can verify without trusting the operator.</p><span class="trust-home">TRACE Specification, a Series of LF Projects, LLC</span></div>
</div>
<div class="trust-base trust-observe"><span class="trust-base-label">OBSERVE & CORRELATE</span><span class="trust-base-text"><a href="/telemetry/"><strong>AgenTrust Telemetry</strong></a> normalizes policy, approval, action, data-flow, usage, and evidence events and correlates them with the application's OpenTelemetry traces.</span></div>
<div class="trust-base"><span class="trust-base-label">AGT FOUNDATION</span><span class="trust-base-text">A common runtime policy substrate: open, portable, and framework-neutral.</span></div>
<p class="trust-note">One architecture, neutral standards homes, interoperable by design.</p>
</section>
<hr class="divider">
<section class="section" id="ecosystem">
<div class="section-header">
<div class="section-label">From open technology to durable infrastructure</div>
<div class="section-title">An ecosystem built around adoption</div>
</div>
<div class="ecosystem-grid">
<article class="ecosystem-card"><h3>Use it</h3><p>Start with runnable demos, reference implementations, schemas, and conformance tests. Move from evaluation to a production pilot without waiting for a proprietary platform.</p></article>
<article class="ecosystem-card"><h3>Improve it</h3><p>Bring implementation feedback, integrations, threat models, deployment evidence, and research. Public repositories and issue trackers make the contribution path visible.</p></article>
<article class="ecosystem-card"><h3>Sustain it</h3><p>Grow maintainers, review contributions, document adoption patterns, and share stewardship across organizations so critical governance infrastructure outlives any one team.</p></article>
</div>
<div class="pathway"><strong>Adoption pathway:</strong> explore a ten-minute demo → test against the open suites → pilot one trust boundary → contribute results and integrations → help govern and maintain the shared infrastructure.</div>
<aside class="marketplace-callout"><div><span>New · Open ecosystem</span><h3>Explore the AgenTrust Marketplace</h3><p>Find plugins, adapters, policy tools, and evidence exporters for the agent stacks you already use.</p></div><a href="/marketplace/" class="btn btn-primary">Browse integrations →</a></aside>
</section>
<hr class="divider">
<section class="section" id="adoption">
<div class="section-header">
<div class="section-label">Verified ecosystem evidence</div>
<div class="section-title">Relationships the public record supports</div>
</div>
<p class="lead-copy">Every organization named here has a traceable relationship through an official OPAQUE publication, a public open-source repository, or an explicit AgenTrust partner statement. The label on each card states that relationship precisely; none implies blanket endorsement of the full stack.</p>
<aside class="partner-card lf-card">
<div class="partner-logo-wrap"><img src="/assets/lf-logo-stacked-color.svg" alt="The Linux Foundation" loading="lazy"></div>
<div><div class="partner-kicker">Neutral host</div><h3>TRACE Specification is an LF Project</h3><p>TRACE is hosted at the Linux Foundation as its own series, <strong>TRACE Specification, a Series of LF Projects, LLC</strong>. The specification, its IP, its trademark, and the conformance mark sit with the series under the Community Specification License and <a href="https://lfprojects.org/policies/">LF Projects policies</a>, so no single vendor decides what conformance means.</p><a class="evidence-link" href="https://github.com/agentrust-io/trace-spec/blob/main/GOVERNANCE.md">Read the project governance ↗</a></div>
</aside>
<div class="adoption-grid">
<article class="adoption-card">
<div class="adopter-mark microsoft-mark">Microsoft</div>
<div class="adopter-stage">Open-source project home</div>
<p>Microsoft hosts the Agent Governance Toolkit, the open runtime-governance foundation that the AgenTrust trust chain builds on.</p>
<a class="evidence-link" href="https://github.com/microsoft/agent-governance-toolkit">View the repository ↗</a>
</article>
<article class="adoption-card">
<div class="adopter-mark uae-mark">Technology Innovation Institute</div>
<div class="adopter-stage">Confirmed founding partner</div>
<p>TII is the confirmed AgenTrust founding partner anchoring the work in sovereign-AI deployment requirements.</p>
<a class="evidence-link" href="https://www.opaque.co/resources/articles/opaque-extends-the-agent-governance-toolkit-with-verifiable-identity-and-first-ever-verifiably-governed-and-secure-mcp">Read the OPAQUE announcement ↗</a>
</article>
<article class="adoption-card">
<div class="adopter-mark amd-mark">AMD</div>
<div class="adopter-stage">Founding member and hardware partner</div>
<p>AMD is a founding partner of AgenTrust. AMD and OPAQUE published a joint implementation blueprint for hardware-backed Confidential AI, and the implementation verifies SEV-SNP report signatures to the AMD root (VCEK then ASK then ARK).</p>
<a class="evidence-link" href="https://www.opaque.co/resources/downloadables/from-risk-to-resilience-confidential-computing-with-amd-and-opaque">Read the joint white paper ↗</a>
</article>
<article class="adoption-card">
<div class="adopter-mark intel-mark">Intel</div>
<div class="adopter-stage">Founding member and hardware partner</div>
<p>Intel is a founding partner of AgenTrust. The implementation verifies Intel TDX DCAP v4 quotes to the pinned Intel SGX Root CA, hardware-validated on GCP C3.</p>
<a class="evidence-link" href="https://github.com/agentrust-io">Review the public implementation record ↗</a>
</article>
<article class="adoption-card">
<div class="adopter-mark servicenow-mark">ServiceNow</div>
<div class="adopter-stage">OPAQUE customer implementation</div>
<p>OPAQUE publicly documents how ServiceNow used its Confidential AI Platform to reduce commission-inquiry workflows from days to seconds.</p>
<a class="evidence-link" href="https://www.opaque.co/resources">View the OPAQUE customer story ↗</a>
</article>
<article class="adoption-card">
<div class="adopter-mark atf-mark">CSA Agentic Trust Framework</div>
<div class="adopter-stage">Public framework collaboration</div>
<p>ATF's author publicly supports positioning AGT as a reference implementation and invited implementation input into the conformance specification.</p>
<a class="evidence-link" href="https://github.com/microsoft/agent-governance-toolkit/discussions/301">Read the public collaboration thread ↗</a>
</article>
</div>
<aside class="partner-card">
<div class="partner-logo-wrap"><img src="/assets/xrsi-logo-black.png" alt="XRSI — Human Intelligence In The Loop" loading="lazy"></div>
<div><div class="partner-kicker">Ecosystem partner</div><h3>Governance and Ecosystem Sustainability Partner</h3><p>XRSI brings governance, community-building, and long-term ecosystem sustainability expertise to the AgenTrust adoption programme.</p></div>
</aside>
</section>
<hr class="divider">
<section class="section" id="community">
<div class="section-header">
<div class="section-label">Community governance</div>
<div class="section-title">Open work, visible decisions, more maintainers</div>
</div>
<p class="lead-copy">AgenTrust develops in public through open repositories, reviewable proposals, implementation evidence, and conformance testing. The goal is not simply to publish specifications: it is to create a contributor community capable of operating, improving, and stewarding the technology.</p>
<div class="governance-grid">
<article class="governance-card"><div class="governance-role">Technical stewardship</div><h3>Imran Siddique</h3><p>AgenTrust / Opaque Systems<br>Architecture, implementation, conformance, and maintainer development.</p></article>
<article class="governance-card"><div class="governance-role">Governance & sustainability</div><h3>XRSI</h3><p>Named organizational partner for community governance, ecosystem adoption, and long-term sustainability. Individual committee appointments will be published only after confirmation.</p></article>
<article class="governance-card open-seat"><div class="governance-role">Committee formation</div><h3>Community seats</h3><p>Adopter, maintainer, research, and public-interest representation will be added as the steering model is formalized.</p></article>
</div>
<div class="governance-actions">
<a class="path-link" href="https://github.com/agentrust-io">Contribute code, tests, and documentation <span>↗</span></a>
<a class="path-link" href="https://github.com/search?q=org%3Aagentrust-io+is%3Aissue+is%3Aopen&type=issues">Browse open contribution pathways <span>↗</span></a>
<a class="path-link" href="https://github.com/orgs/agentrust-io/repositories">Follow the public project roadmap <span>↗</span></a>
</div>
</section>
<hr class="divider">
<section class="section" id="playbooks">
<div class="section-header">
<div class="section-label">Compliance adoption roadmap</div>
<div class="section-title">From runtime evidence to compliance playbooks</div>
</div>
<p class="lead-copy">The fellowship will turn AgenTrust implementation patterns into practical, public playbooks. Each playbook will map governance controls and TRACE evidence to an authoritative framework without claiming certification or legal compliance.</p>
<div class="playbook-grid">
<a href="https://www.iso.org/standard/42001" class="playbook-card"><span>Management system</span><strong>ISO/IEC 42001</strong><small>Planned playbook</small></a>
<a href="https://eur-lex.europa.eu/eli/reg/2024/1689/oj?locale=en" class="playbook-card"><span>Transparency</span><strong>EU AI Act · Article 50</strong><small>Planned playbook</small></a>
<a href="https://commission.europa.eu/law/law-topic/data-protection/information-business-and-organisations/principles-gdpr_en" class="playbook-card"><span>Data protection</span><strong>GDPR</strong><small>Planned playbook</small></a>
<a href="https://www.aicpa-cima.com/resources/download/2017-trust-services-criteria-with-revised-points-of-focus-2022" class="playbook-card"><span>Assurance controls</span><strong>SOC 2</strong><small>Planned playbook</small></a>
<a href="https://www.nist.gov/itl/ai-risk-management-framework" class="playbook-card"><span>Risk management</span><strong>NIST AI RMF</strong><small>Planned playbook</small></a>
</div>
</section>
<hr class="divider">
<!-- Products -->
<section class="section" id="standards">
<div class="section-header">
<div class="section-label">Open Technology</div>
<div class="section-title">Specifications, protocols, and shared building blocks</div>
</div>
<div class="product-grid">
<!-- TRACE -->
<a href="https://trace.agentrust-io.com" class="product-card">
<div class="card-accent" style="background: var(--blue);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--blue);">Attestation Standard</div>
<div class="card-name">TRACE</div>
<div class="card-desc">Trust, Runtime Attestation, and Compliance Evidence. Hardware-rooted cryptographic receipts for every agent action — signed by the TEE, verifiable by anyone.</div>
</div>
<div class="card-footer">
<span class="card-url">trace.agentrust-io.com</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-live">Live</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- Agent Manifest -->
<a href="https://manifest.agentrust-io.com" class="product-card">
<div class="card-accent" style="background: var(--green);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--green);">Identity Standard</div>
<div class="card-name">Agent Manifest</div>
<div class="card-desc">A structured declaration of an agent's capabilities, permissions, and data access policies. Machine-readable identity that operators and orchestrators can verify before invocation.</div>
</div>
<div class="card-footer">
<span class="card-url">manifest.agentrust-io.com</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-live">Live</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- cMCP -->
<a href="https://cmcp.agentrust-io.com" class="product-card">
<div class="card-accent" style="background: var(--purple);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--purple);">Protocol Extension</div>
<div class="card-name">Confidential MCP</div>
<div class="card-desc">The confidential, security-hardened way to run the Model Context Protocol. MCP tool calls are evaluated against policy inside a Trusted Execution Environment, so tool-call plaintext is not readable from the host. The guarantee is bounded: it holds where the egress policy denies telemetry endpoints, and it covers the tool boundary, not model inference.</div>
</div>
<div class="card-footer">
<span class="card-url">cmcp.agentrust-io.com</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-live">Live</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- cA2A -->
<a href="https://ca2a.agentrust-io.com" class="product-card">
<div class="card-accent" style="background: #0D9488;"></div>
<div class="card-body">
<div class="card-tag" style="color: #0D9488;">Delegation Profile</div>
<div class="card-name">Confidential A2A</div>
<div class="card-desc">The secure, confidential profile for the Agent2Agent (A2A) protocol. Adds attested, attenuated delegation, a sealed peer channel, and offline-verifiable provenance per hop, so agent-to-agent delegation is verifiable and confidential, not just authenticated at the front door.</div>
</div>
<div class="card-footer">
<span class="card-url">ca2a.agentrust-io.com</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-live">Live</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- Awesome AI Governance -->
<a href="https://governance.agentrust-io.com" class="product-card">
<div class="card-accent" style="background: var(--orange);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--orange);">Curated Resource</div>
<div class="card-name">Awesome AI Governance</div>
<div class="card-desc">A community-curated list of tools, frameworks, standards, and research for governing autonomous AI agents. Covers policy engines, audit frameworks, risk assessments, and deployment guidance.</div>
</div>
<div class="card-footer">
<span class="card-url">governance.agentrust-io.com</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-live">Live</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
</div>
</section>
<hr class="divider">
<!-- Tools -->
<section class="section" id="tools">
<div class="section-header">
<div class="section-label">Infrastructure</div>
<div class="section-title">Test Suite & Tooling</div>
</div>
<div class="product-grid">
<!-- AgenTrust Telemetry -->
<a href="/telemetry/" class="product-card">
<div class="card-accent" style="background: var(--orange);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--orange);">Governance Telemetry · Alpha</div>
<div class="card-name">AgenTrust Telemetry</div>
<div class="card-desc">A backend-neutral event contract and reference SDKs for policy decisions, approvals, actions, classified data flow, usage and cost, and evidence lifecycle—correlated with OpenTelemetry and able to finalize complete evidence into TRACE.</div>
</div>
<div class="card-footer">
<span class="card-url">agentrust-io.com/telemetry</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-oss">OSS</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- Demos -->
<a href="/demos/" class="product-card">
<div class="card-accent" style="background: var(--green);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--green);">Runnable Demos</div>
<div class="card-name">Ten Demos, About Twelve Minutes</div>
<div class="card-desc">Run the specs on your own machine, no hardware required. Block a data leak, verify a signed receipt, refuse tampered model weights, and govern OpenAI-compatible model calls.</div>
</div>
<div class="card-footer">
<span class="card-url">agentrust-io.com/demos</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-oss">OSS</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- TRACE Tests -->
<a href="https://tests.agentrust-io.com" class="product-card">
<div class="card-accent" style="background: var(--amber);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--amber);">Test Infrastructure</div>
<div class="card-name">TRACE Test Suite</div>
<div class="card-desc">Conformance tests and integration harness for TRACE implementations. Verify that your attestation receipts meet the spec before shipping to production.</div>
</div>
<div class="card-footer">
<span class="card-url">tests.agentrust-io.com</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-oss">OSS</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- AGT -->
<a href="https://github.com/microsoft/agent-governance-toolkit" class="product-card">
<div class="card-accent" style="background: var(--muted);"></div>
<div class="card-body">
<div class="card-tag" style="color: var(--muted);">Microsoft Open Source</div>
<div class="card-name">Agent Governance Toolkit</div>
<div class="card-desc">GitHub Actions, policy checks, and CI integrations for governing agent behavior in software repositories. Contributor reputation, workflow provenance, and supply-chain verification.</div>
</div>
<div class="card-footer">
<span class="card-url">github.com/microsoft/agt</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-ext">External ↗</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
<!-- GitHub Org -->
<a href="https://github.com/agentrust-io" class="product-card">
<div class="card-accent" style="background: #24292F;"></div>
<div class="card-body">
<div class="card-tag" style="color: #6B7F94;">Source Code</div>
<div class="card-name">GitHub Organization</div>
<div class="card-desc">All spec source, examples, registry entries, and integration guides. TRACE spec, Agent Manifest schema, cMCP protocol, cA2A profile, and the full awesome-ai-governance curated list.</div>
</div>
<div class="card-footer">
<span class="card-url">github.com/agentrust-io</span>
<div style="display:flex;gap:0.5rem;align-items:center;">
<span class="card-badge badge-oss">OSS</span>
<svg class="card-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7"/></svg>
</div>
</div>
</a>
</div>
</section>
<hr class="divider">
<!-- Quick stats -->
<section class="section" id="status">
<div class="section-header">
<div class="section-label">At a Glance</div>
<div class="section-title">What's Launched</div>
</div>
<div class="spec-row">
<div class="spec-card">
<div class="spec-label">Attestation Standard</div>
<div class="spec-value">TRACE v0.2</div>
</div>
<div class="spec-card">
<div class="spec-label">Identity Standard</div>
<div class="spec-value">Agent Manifest spec v0.1</div>
</div>
<div class="spec-card">
<div class="spec-label">Protocol Extension</div>
<div class="spec-value">cMCP v0.3.0</div>
</div>
<div class="spec-card">
<div class="spec-label">Delegation Profile</div>
<div class="spec-value">cA2A v0.1 · preview</div>
</div>
<div class="spec-card">
<div class="spec-label">Launched</div>
<div class="spec-value">June 23, 2026</div>
</div>
<div class="spec-card">
<div class="spec-label">License</div>
<div class="spec-value">Apache 2.0, MIT, CC BY 4.0</div>
</div>
<div class="spec-card">
<div class="spec-label">Standardization</div>
<div class="spec-value"><a href="https://github.com/cosai-oasis/ws4-secure-design-agentic-systems/issues/149">CoSAI WS4 RFC #149</a></div>
</div>
<div class="spec-card">
<div class="spec-label">Hardware Evidence</div>
<div class="spec-value"><a href="https://github.com/agentrust-io/cmcp/blob/main/docs/testing/hardware-validation.md">SEV-SNP + TDX validation</a></div>
</div>
<div class="spec-card">
<div class="spec-label">Conformance</div>
<div class="spec-value"><a href="https://tests.agentrust-io.com/">Run the TRACE suite</a></div>
</div>
</div>
</section>
<hr class="divider">
<!-- What is AgenTrust -->
<section class="section" id="fellowship" data-fellowship-section data-closes="2026-08-30T00:00:00-07:00">
<div class="section-header">
<div class="section-label">Get Involved</div>
<h2>AgenTrust Fellowship 2026</h2>
</div>
<p class="lead-copy">A six-month paid, part-time fellowship (20 hours per week) for three to five emerging maintainers of open infrastructure for verifiable AI systems. It is aimed at security engineers, distributed systems researchers, AI governance and compliance professionals, and Ph.D. students. Fellows ship code, tests, integrations, documentation, and adoption guidance across AgenTrust projects while learning how to review contributions and sustain an open technical community. Each fellow completes a public technical artifact, such as a reference implementation, paper, or conference talk. Mentored by Imran Siddique, Chief Platform Officer at OPAQUE and creator of the Agent Governance Toolkit.</p>
<p class="lead-copy" data-fellowship-status><strong>Applications are open through 29 August 2026</strong>, with the cohort starting in September. Selection is based on a technical proposal describing what you plan to contribute, so it is worth looking at the work before you apply: issues labelled <a href="https://github.com/search?q=org%3Aagentrust-io+is%3Aissue+is%3Aopen+label%3Afellowship&type=issues"><code>fellowship</code></a> across trace-spec, cmcp, cA2A, and agent-manifest are real, currently-open work rather than exercises.</p>
<div class="hero-actions">
<a href="https://www.opaque.co/resources/articles/opaque-announces-applications-for-agentrust-fellowship-to-advance-open-standards-for-verifiable-ai-agents" class="btn btn-primary">Read the announcement →</a>
<a href="https://github.com/search?q=org%3Aagentrust-io+is%3Aissue+is%3Aopen+label%3Afellowship&type=issues" class="btn btn-ghost">Browse fellowship issues</a>
</div>
</section>
<section class="section" id="about">
<div class="section-header">
<div class="section-label">Overview</div>
<div class="section-title">What is AgenTrust?</div>
</div>
<p class="lead-copy">AgenTrust is an open ecosystem for verifiable AI agent governance. It connects reusable technology with the people and practices needed to adopt it: maintainers, implementers, researchers, enterprise operators, conformance testing, integration guidance, and transparent community governance.</p>
<p class="lead-copy">Four specifications work together, in the order an agent actually runs. <strong>Agent Manifest</strong> declares who an agent is and what it is allowed to do. <strong>Confidential MCP (cMCP)</strong> enforces that by evaluating tool calls against policy inside a Trusted Execution Environment, so tool-call plaintext is not readable from the host. <strong>Confidential A2A (cA2A)</strong> carries attenuated authority and attested provenance when work is delegated to another agent. <strong>TRACE</strong> proves what actually happened with signed receipts, hardware-attested when the gateway runs in a TEE. All four are open source, under Apache 2.0 for Agent Manifest, MIT for cMCP and cA2A, and CC BY 4.0 plus Apache 2.0 for TRACE.</p>
<p class="lead-copy"><strong>AgenTrust Telemetry</strong> is the integration layer across that chain. It gives runtimes a common, metadata-only contract for governance facts, projects those facts into caller-owned OpenTelemetry, and can turn a complete durable evidence set into TRACE. It does not replace a policy engine, collector, observability backend, or dashboard.</p>
</section>
<hr class="divider">
<!-- FAQ -->
<section class="section" id="faq">
<div class="section-header">
<div class="section-label">FAQ</div>
<div class="section-title">Frequently Asked Questions</div>
</div>
<div class="qa">
<div class="qa-item">
<div class="qa-q">Is AgenTrust a standards-development programme?</div>
<div class="qa-a">No. AgenTrust is an open-source ecosystem focused on adoption, implementation, interoperability, maintainer development, and long-term sustainability. Its open specifications are shared technical building blocks; community implementations, test infrastructure, integrations, documentation, and deployment evidence make those building blocks useful in practice.</div>
</div>
<div class="qa-item">
<div class="qa-q">What is TRACE?</div>
<div class="qa-a">TRACE stands for Trust, Runtime Attestation, and Compliance Evidence. It defines hardware-rooted cryptographic receipts for every agent action, signed by the Trusted Execution Environment and verifiable by anyone.</div>
</div>
<div class="qa-item">
<div class="qa-q">What is Agent Manifest?</div>
<div class="qa-a">Agent Manifest is a structured, machine-readable declaration of an agent's capabilities, permissions, and data access policies. Operators and orchestrators can verify an agent's manifest before invocation.</div>
</div>
<div class="qa-item">
<div class="qa-q">What is Confidential MCP (cMCP)?</div>
<div class="qa-a">Confidential MCP is an extension to the Model Context Protocol that runs tool calls inside a Trusted Execution Environment, so the host process cannot read tool-call plaintext from enclave memory. That protection is structural only where the Cedar egress policy denies telemetry and APM endpoints, and it covers the tool-call boundary rather than model inference or the agent's context window.</div>
</div>
<div class="qa-item">
<div class="qa-q">What is Confidential A2A (cA2A)?</div>
<div class="qa-a">Confidential A2A is a trust profile on the Agent2Agent (A2A) protocol. Where A2A's Signed Agent Card verifies only the domain owner, cA2A adds attested, attenuated delegation, a sealed peer channel that binds the task payload to the peer's attested measurement, and an offline-verifiable provenance record per hop. It is a developer preview.</div>
</div>
<div class="qa-item">
<div class="qa-q">What is the secure version of MCP?</div>
<div class="qa-a">Confidential MCP (cMCP) is the security-hardened way to run the Model Context Protocol. It executes MCP tool calls inside a Trusted Execution Environment (TEE), so tool-call plaintext is not readable from the host, and it emits a signed TRACE receipt for every call that anyone can verify. Two bounds worth stating: the plaintext guarantee holds where the egress policy denies telemetry and APM endpoints, and the receipt is hardware-attested when the gateway runs in a TEE and signed-only in software mode. If you need a secure or confidential MCP deployment, cMCP is the AgenTrust profile for it.</div>
</div>
<div class="qa-item">
<div class="qa-q">What is the secure version of A2A?</div>
<div class="qa-a">Confidential A2A (cA2A) is the security profile for the Agent2Agent (A2A) protocol. A2A authenticates a peer's domain but not what it does with a delegated task. cA2A adds attested, attenuated delegation (each hop's authority is a provable subset of its parent's), runtime attestation of the peer, a sealed peer channel, and offline-verifiable provenance, so agent-to-agent delegation is secure and confidential end to end, not just authenticated at the front door.</div>
</div>
<div class="qa-item">
<div class="qa-q">How do the AgenTrust standards relate to each other?</div>
<div class="qa-a">Agent Manifest covers identity, cMCP covers confidential execution, and TRACE covers verifiable behavior. Manifest says who an agent is and what it may do, cMCP runs its tool calls confidentially, and TRACE produces hardware-signed receipts of what actually happened.</div>
</div>
<div class="qa-item">
<div class="qa-q">Are the AgenTrust standards open source?</div>
<div class="qa-a">Yes, though not all under one licence. Agent Manifest and the TRACE conformance suite are Apache 2.0, cMCP and cA2A are MIT, and the TRACE specification text is CC BY 4.0 with its reference code under Apache 2.0. Source, schemas, and examples are on GitHub at github.com/agentrust-io.</div>
</div>
</div>
</section>
<!-- Footer -->
<footer>
<div class="footer-inner">
<div class="footer-copy">© 2026 AgenTrust Contributors. Open source; licences vary by project.</div>
<div class="footer-links">
<a href="https://trace.agentrust-io.com">TRACE</a>
<a href="https://manifest.agentrust-io.com">Manifest</a>
<a href="https://cmcp.agentrust-io.com">cMCP</a>
<a href="https://ca2a.agentrust-io.com">cA2A</a>
<a href="https://governance.agentrust-io.com">Governance</a>
<a href="https://tests.agentrust-io.com">Tests</a>
<a href="https://github.com/agentrust-io">GitHub</a>
<a href="https://github.com/microsoft/agent-governance-toolkit">AGT ↗</a>
</div>
</div>
</footer>
<script src="/supernav.js"></script>
<script>
// Mark the rail entry for whichever section is in the reading band. Falls
// back to no highlight at all if IntersectionObserver is missing: the rail
// still works as a plain jump list.
(() => {
const rail = document.querySelector('.railnav');
if (!rail || !('IntersectionObserver' in window)) return;
const topLink = rail.querySelector('a[href="#top"]');
const targets = new Map();
rail.querySelectorAll('a[href^="#"]:not([href="#top"])').forEach(link => {
const section = document.getElementById(link.getAttribute('href').slice(1));
if (section) targets.set(section, link);
});
let current = null;
const setCurrent = (link) => {
if (link === current) return;
if (current) current.removeAttribute('aria-current');
current = link || null;
if (current) current.setAttribute('aria-current', 'true');
};
const inBand = new Set();
const resolve = () => {
// Topmost section in the band wins, so the rail follows reading order
// rather than whichever observer entry fired last.
const first = [...inBand].sort((a, b) => a.offsetTop - b.offsetTop)[0];
if (first) setCurrent(targets.get(first));
else if (window.scrollY < 240) setCurrent(topLink);
// Otherwise keep the last section marked: the gaps between sections
// should not blank the rail out.
};
const observer = new IntersectionObserver((entries) => {
entries.forEach(e => e.isIntersecting ? inBand.add(e.target) : inBand.delete(e.target));
resolve();
}, { rootMargin: '-15% 0px -55% 0px' });
targets.forEach((_, section) => observer.observe(section));
addEventListener('scroll', () => { if (window.scrollY < 240) resolve(); }, { passive: true });
resolve();
})();
</script>
<script>
(() => {
const section = document.querySelector('[data-fellowship-section]');
if (!section) return;
const closes = Date.parse(section.dataset.closes);
if (Number.isNaN(closes) || Date.now() < closes) return;
document.querySelector('[data-fellowship-banner]')?.remove();
const status = section.querySelector('[data-fellowship-status]');
if (status) status.innerHTML = '<strong>Applications closed on 29 August 2026.</strong> Follow the open fellowship issues and project repositories for cohort work and future opportunities.';
const primary = section.querySelector('.btn-primary');
if (primary) primary.textContent = 'Read the 2026 announcement →';
})();
</script>
</body>
</html>