From 8ea6c93599e130652e8860ac8c98d4d54bacef87 Mon Sep 17 00:00:00 2001
From: Imran Siddique <45405841+imran-siddique@users.noreply.github.com>
Date: Sat, 22 Aug 2026 21:36:53 -0700
Subject: [PATCH] docs: document project sponsorship roles

Signed-off-by: Imran Siddique <45405841+imran-siddique@users.noreply.github.com>
---
 README.md   |  4 ++++
 SPONSORS.md | 20 ++++++++++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100644 SPONSORS.md

diff --git a/README.md b/README.md
index 0261356..8996c29 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,10 @@
 
 End-to-end integration examples showing cMCP, Agent Manifest, and TRACE working together across deployment scenarios. Each example is self-contained and runnable on a fresh cloud VM. Running them shows how the projects compose: cMCP enforces policy at the tool call boundary, Agent Manifest carries the identity and capability declaration, cA2A attenuates authority at the agent-to-agent boundary, and TRACE emits a signed Trust Record for every tool invocation so you can see what the full audit trail looks like in practice.
 
+Project support is recognized in [SPONSORS.md](SPONSORS.md). Sponsorship is
+separate from example authorship, fixture identities, partner provenance,
+adoption, and project governance.
+
 ## Examples
 
 | Example | What it shows | Platform | Compliance |
diff --git a/SPONSORS.md b/SPONSORS.md
new file mode 100644
index 0000000..245f017
--- /dev/null
+++ b/SPONSORS.md
@@ -0,0 +1,20 @@
+# Sponsors
+
+AgenTrust Examples is an open-source project. Sponsors provide funding,
+engineering time, infrastructure, or other in-kind support. Sponsorship does
+not confer project ownership, governance authority, or control over technical
+decisions or example results.
+
+## Current sponsors
+
+### OPAQUE Systems
+
+Founding engineering and infrastructure sponsor, and contributor to the
+AgenTrust example ecosystem.
+
+## Recognition policy
+
+Sponsor recognition is separate from example authorship, partner provenance,
+and adoption. Vendor names and identities inside example manifests, policies,
+fixtures, and deployment profiles describe the scenario being exercised; they
+do not identify the owner of this repository or its projects.