docs: document project sponsorship roles

README.md

@@ -5,6 +5,10 @@
 
 The ecosystem front door for cMCP, TRACE, and Agent Manifest. Vendors and community projects integrate here, on their own terms, under published rules - while the core repos stay first-party.
 
+Project support is recognized in [SPONSORS.md](SPONSORS.md). Sponsorship is
+separate from marketplace listing, verification tier, maintainership, and
+project governance.
+
 ## Where things live
 
 | Repo | What belongs there | Who contributes |

SPONSORS.md

@@ -0,0 +1,20 @@
+# Sponsors
+
+AgenTrust Integrations is an open-source project. Sponsors provide funding,
+engineering time, infrastructure, or other in-kind support. Sponsorship does
+not confer project ownership, governance authority, marketplace preference, or
+control over technical decisions.
+
+## Current sponsors
+
+### OPAQUE Systems
+
+Founding engineering and infrastructure sponsor, and contributor to the
+AgenTrust integration ecosystem.
+
+## Recognition policy
+
+Sponsor recognition is separate from integration vendors, maintainers, and
+marketplace tiers. Sponsored products receive no automatic listing,
+verification, featured placement, or exception from the published contribution
+rules.

claude-code/PRIVACY.md

@@ -2,7 +2,7 @@
 
 The AgenTrust Claude Code plugin collects and transmits no personal data.
 
-It runs locally as a Claude Code plugin. It processes only your local Claude configuration, entirely on your machine, and sends no telemetry, analytics, or usage data to agentrust-io, OPAQUE, or any third party. There is no account, login, or tracking, and no cookies or background network calls.
+It runs locally as a Claude Code plugin. It processes only your local Claude configuration, entirely on your machine, and sends no telemetry, analytics, or usage data to the plugin project or any third party. There is no account, login, or tracking, and no cookies or background network calls.
 
 All Agent Manifest and TRACE records, and the drift baseline, are written to files on your machine; nothing is sent anywhere. Signing uses a local key.
 

scheduled-agents/PRIVACY.md

@@ -2,7 +2,7 @@
 
 The AgenTrust scheduled-agents plugin collects and transmits no personal data.
 
-It runs locally as a Claude Code plugin. It processes only your local routine specs and Claude configuration, entirely on your machine, and sends no telemetry, analytics, or usage data to agentrust-io, OPAQUE, or any third party. There is no account, login, or tracking, and no cookies or background network calls.
+It runs locally as a Claude Code plugin. It processes only your local routine specs and Claude configuration, entirely on your machine, and sends no telemetry, analytics, or usage data to the plugin project or any third party. There is no account, login, or tracking, and no cookies or background network calls.
 
 It records names and fingerprints only (routine, tool, MCP, and hook-command names, and SHA-256 hashes of prompts and settings). It never stores secrets, never reads your credentials file, and never records a hook command's output. The drift baseline and any TRACE record are written to files on your machine; nothing is sent anywhere. Signing uses a local key whose private half never leaves the machine.