Skip to content

feat(home): lead with evidence a stranger can check - #62

Closed
imran-siddique wants to merge 1 commit into
feat/verify-tdx-in-browserfrom
feat/homepage-verifiable-supply-chain
Closed

imran-siddique wants to merge 1 commit into
feat/verify-tdx-in-browserfrom
feat/homepage-verifiable-supply-chain

Conversation

@imran-siddique

Copy link
Copy Markdown
Member

Stacked on the /verify/ PR. Merge that one first, because the hero runs its verifier.

The homepage opened on "Control agent actions. Verify the evidence." and a software-mode quickstart, which read as one more policy gateway. This rebuilds it around the verifiable AI supply chain.

The new homepage, top to bottom

  • Hero with a live run of the /verify/ TDX check on the committed GCP capture, and the note that it proves genuine silicon only.
  • Why now: spoofed agent transcripts (METR, 26 Aug 2026), a token-stealing package around a coding-agent CLI, weights on hardware somebody else owns.
  • The chain: weights (WCM), agent (Agent Manifest), actions (cMCP, cA2A), evidence (TRACE, Registry, conformance suite).
  • Where it runs: SEV-SNP (agent-manifest #227), TDX (the capture itself), H100 (weight-custody-manifest Link an operator guide for running a witness #54).
  • What the evidence proves and what it does not, in one section instead of a caveat in every sentence.
  • Who it is for, open by construction, build and steward, FAQ.

Moved to /community/ unchanged: partner and supporter cards, community governance, the NSF submission, compliance playbook plans, fellowship status, Architecting at Scale, and the two non-technical FAQ entries. render-adoption.mjs and its workflow now target community/index.html.

Facts corrected

  • The FAQ said the TRACE specification is CC BY 4.0. trace-spec/LICENSE is the Community Specification License 1.0, with code under Apache 2.0.
  • The status strip said "cA2A v0.1 · preview". 0.2.0 shipped on 2026-08-18.

Also

  • OPAQUE is named as sponsor without the ownership disclaimer on the homepage, /community/, the registry footer and data/adoption.json.
  • supernav.js gains Verify, which reaches every subdomain.
  • llms.txt anchors follow the move, and the marketplace link to /#standards now points at /#chain. A grep of 15 local clones of the org's repositories found no other link into the removed anchors.
  • design-system.css gains the hero panel, scope list, logo row and build band. The two hub pages load ?v=20.

Not in this PR: og.png still reads "An open ecosystem for verifiable AI agents".

Checked locally

  • check-site.py (43 pages, 645 links), check-discovery.py, build-discovery.py --check, render-adoption.mjs --check, check-dashes.js, marketplace tests
  • Chrome: the hero panel fills in with PASS on steps 1 to 4 and ACCEPTED; no horizontal overflow at 1656px or in 400px frames for / and /community/
  • slopcheck on the page copy: OK, 978 words

Generated with Claude Code

https://claude.ai/code/session_013aK3gVWzNdcM3hZ2o2awK2

The homepage opened on "Control agent actions. Verify the evidence." with a
software-mode quickstart as the first click, which read as one more policy
gateway. What AgenTrust actually has that others do not, hardware validation
on three platforms, WCM, TRACE at the Linux Foundation and offline
verification, sat far down the page or on other hosts.

The new homepage names the category as the verifiable AI supply chain: four
questions from weights to agent to actions to evidence, the silicon each is
validated on with the PR that shows it, and one section on what the evidence
proves and what it does not. The hero runs the /verify/ TDX check live on the
committed GCP capture.

Partner cards, community governance, the NSF submission, playbook plans, the
fellowship and the book move to /community/ unchanged, and
render-adoption.mjs now writes there.

Also:
- OPAQUE is named as sponsor, without the ownership disclaimer, on the
  homepage, /community/ and the registry footer.
- The FAQ gave the TRACE specification licence as CC BY 4.0. trace-spec's
  LICENSE is the Community Specification License 1.0, code Apache 2.0.
- "cA2A v0.1 preview" goes with the status strip; the chain cites 0.2.0.
- supernav gains Verify, so every subdomain links to the check.
- llms.txt anchors follow the move, and the marketplace link to /#standards
  now points at /#chain.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013aK3gVWzNdcM3hZ2o2awK2
@imran-siddique
imran-siddique deleted the branch feat/verify-tdx-in-browser September 14, 2026 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant