Use it
Start with runnable demos, reference implementations, schemas, and conformance tests. Move from evaluation to a production pilot without waiting for a proprietary platform.
diff --git a/.github/workflows/adoption-data.yml b/.github/workflows/adoption-data.yml index 2088077..be62203 100644 --- a/.github/workflows/adoption-data.yml +++ b/.github/workflows/adoption-data.yml @@ -5,14 +5,14 @@ on: paths: - data/adoption.json - scripts/render-adoption.mjs - - index.html + - community/index.html - .github/workflows/adoption-data.yml push: branches: [main] paths: - data/adoption.json - scripts/render-adoption.mjs - - index.html + - community/index.html permissions: contents: read diff --git a/community/index.html b/community/index.html new file mode 100644 index 0000000..06848ab --- /dev/null +++ b/community/index.html @@ -0,0 +1,389 @@ + + +
+ + +Community
+Partner and sponsor relationships linked to public evidence, how the projects are governed, and how to contribute.
+Start with runnable demos, reference implementations, schemas, and conformance tests. Move from evaluation to a production pilot without waiting for a proprietary platform.
Bring implementation feedback, integrations, threat models, deployment evidence, and research. Public repositories and issue trackers make the contribution path visible.
Grow maintainers, review contributions, document adoption patterns, and share stewardship across organizations so critical governance infrastructure outlives any one team.
Every organization named here has a traceable relationship through a public announcement, open-source repository, or explicit AgenTrust partner statement. The label on each card states that relationship precisely; sponsorship, partnership, contribution, and adoption are distinct relationships, and none implies blanket endorsement of the full stack.
+ +TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means.
Read the project governance ↗OPAQUE funds the engineering, infrastructure and confidential-computing work behind AgenTrust, and contributes to the projects.
+ Review the public project record ↗ +Microsoft hosts the Agent Governance Toolkit, the open runtime-governance foundation that the AgenTrust trust chain builds on.
+ View the repository ↗ +TII is the confirmed AgenTrust founding partner anchoring the work in sovereign-AI deployment requirements.
+ Read the OPAQUE announcement ↗ +AMD is a founding partner of AgenTrust. AMD and OPAQUE published a joint implementation blueprint for hardware-backed Confidential AI, and the implementation verifies SEV-SNP report signatures to the AMD root.
+ Read the joint white paper ↗ +Intel is a founding partner of AgenTrust. The implementation verifies Intel TDX DCAP v4 quotes to the pinned Intel SGX Root CA, hardware-validated on GCP C3.
+ Review the public implementation record ↗ +OPAQUE publicly documents how ServiceNow used its Confidential AI Platform to reduce commission-inquiry workflows from days to seconds.
+ View the OPAQUE customer story ↗ +ATF's author publicly supports positioning AGT as a reference implementation and invited implementation input into the conformance specification.
+ Read the public collaboration thread ↗ +PRONATIVE AI works with AgenTrust to bring verifiable agent governance into enterprise engineering education and adoption. The partnership includes joint educational programming and the planned integration of cMCP, cA2A, and TRACE into PRONATIVE AI's AI-Native Engineering Foundry curriculum. PRONATIVE AI is also adopting the Microsoft Agent Governance Toolkit within its delivery environment and will publish implementation guidance as that work becomes publicly available.
+ View the featured session ↗ +
XRSI brings governance, community-building, and long-term ecosystem sustainability expertise to the AgenTrust adoption programme.

Action State Group is collaborating with AgenTrust on an open contribution path for the TRACE Trust Registry, connecting TRACE runtime evidence with neutral, independently verifiable record and witness infrastructure.
Visit Action State Group ↗Odystra builds an agentic governance, risk, and compliance platform for regulated enterprises.
Visit Odystra ↗o1Labs develops applications and infrastructure powered by zero-knowledge cryptography.
Visit o1Labs ↗AgenTrust develops in public through open repositories, reviewable proposals, implementation evidence, and conformance testing. The goal is not simply to publish specifications: it is to create a contributor community capable of operating, improving, and stewarding the technology.
+AgenTrust
Architecture, implementation, conformance, and maintainer development.
Named organizational partner for community governance, ecosystem adoption, and long-term sustainability. Individual committee appointments will be published only after confirmation.
Adopter, maintainer, research, and public-interest representation will be added as the steering model is formalized.
The fellowship will turn AgenTrust implementation patterns into practical, public playbooks. Each playbook will map governance controls and TRACE evidence to an authoritative framework without claiming certification or legal compliance.
+ +The AgenTrust Fellowship supports emerging maintainers of open infrastructure for verifiable AI systems. Fellows contribute code, tests, integrations, documentation, and adoption guidance across AgenTrust projects, grounded in real issues and verifiable work.
+Applications closed early on 26 August 2026 due to exceptional volume. More than 150 applications are under review. The fellowship will not start in September as originally planned. The schedule and decision timeline are being reviewed and there is no firm notification date yet. Applicants do not need to send anything further; the submitted proposal is what is assessed. A revised timetable will be published here once it is confirmed, and applicants will be contacted directly.
+ +AgenTrust founder Imran Siddique has turned the lessons behind production cloud and AI systems into a practical book. It connects the architecture of distributed systems with the harder problem now in front of us: building AI-native systems that remain observable, governable, and correct when they meet production.
+ +AgenTrust is an open ecosystem for verifiable AI agent governance. It connects reusable technology with the people and practices needed to adopt it: maintainers, implementers, researchers, enterprise operators, conformance testing, integration guidance, and transparent community governance.
+Agent Manifest declares identity and intended authority. cMCP governs tool calls; cA2A governs delegation to another agent. TRACE carries signed runtime evidence for verification against a trust policy. Hardware provenance depends on verified attestation. Use the components required by your trust boundary. Explore each project's specification, reference implementation, and license through the chain on the homepage.
+AgenTrust Telemetry is the integration layer across that chain. It gives runtimes a common, metadata-only contract for governance facts, projects those facts into caller-owned OpenTelemetry, and can turn a complete durable evidence set into TRACE. It does not replace a policy engine, collector, observability backend, or dashboard.
+Open source tools for AI agent governance
-AgenTrust helps you check an AI agent's tool calls against policy and produce signed records of the decisions. Start locally, then explore hardware-backed enforcement.
+Open specifications for verifiable AI
+Open specifications and verifiers that bind model weights, agent identity and every tool call to hardware attestation. Anyone can check the evidence offline, without asking us.
Python 3.11+ · No cloud account · Software demo; no hardware attestation
-Write a policy, get a 403 denial, and inspect the signed session record.
Follow the cMCP tutorial →See where enforcement runs, what a receipt binds, and what a verifier must check.
Understand the trust boundaries →Try a local key-release policy, then explore the requirements for a protected deployment.
Explore Weight Custody Manifest →Start with the boundary you need. Tool calls use cMCP; delegation to another agent uses cA2A. These are separate paths, and neither requires every component below.
-The runtime does not forward a denied call to the tool server.
Check signed evidence against trusted keys, expected policy, and the required attestation level.
Publish commitments and verify inclusion under signed checkpoints. Independent witness receipts add an external observation; they do not certify the record's claims.
A separate agent-to-agent path narrows delegated authority and links provenance across hops.
NoteThis quote proves genuine Intel TDX silicon signed it. Its REPORTDATA holds a manifest hash whose input was not published, so it does not yet tie a specific record to this machine.
+Runs in your browser. Nothing is sent back to us.
A signature establishes who signed a record and whether it changed. Hardware provenance additionally requires verified attestation and a trust policy. See the software demo's expected verification result →
- - -Start with runnable demos, reference implementations, schemas, and conformance tests. Move from evaluation to a production pilot without waiting for a proprietary platform.
Bring implementation feedback, integrations, threat models, deployment evidence, and research. Public repositories and issue trackers make the contribution path visible.
Grow maintainers, review contributions, document adoption patterns, and share stewardship across organizations so critical governance infrastructure outlives any one team.
Every organization named here has a traceable relationship through a public announcement, open-source repository, or explicit AgenTrust partner statement. The label on each card states that relationship precisely; sponsorship, partnership, contribution, and adoption are distinct relationships, and none implies blanket endorsement of the full stack.
- -TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means.
Read the project governance ↗OPAQUE provides funding, engineering time, infrastructure, and confidential-computing contributions. Sponsorship does not confer ownership of AgenTrust projects or governance authority over their technical decisions.
- Review the public project record ↗ -Microsoft hosts the Agent Governance Toolkit, the open runtime-governance foundation that the AgenTrust trust chain builds on.
- View the repository ↗ -TII is the confirmed AgenTrust founding partner anchoring the work in sovereign-AI deployment requirements.
- Read the OPAQUE announcement ↗ -AMD is a founding partner of AgenTrust. AMD and OPAQUE published a joint implementation blueprint for hardware-backed Confidential AI, and the implementation verifies SEV-SNP report signatures to the AMD root.
- Read the joint white paper ↗ -Intel is a founding partner of AgenTrust. The implementation verifies Intel TDX DCAP v4 quotes to the pinned Intel SGX Root CA, hardware-validated on GCP C3.
- Review the public implementation record ↗ -OPAQUE publicly documents how ServiceNow used its Confidential AI Platform to reduce commission-inquiry workflows from days to seconds.
- View the OPAQUE customer story ↗ -ATF's author publicly supports positioning AGT as a reference implementation and invited implementation input into the conformance specification.
- Read the public collaboration thread ↗ -PRONATIVE AI works with AgenTrust to bring verifiable agent governance into enterprise engineering education and adoption. The partnership includes joint educational programming and the planned integration of cMCP, cA2A, and TRACE into PRONATIVE AI's AI-Native Engineering Foundry curriculum. PRONATIVE AI is also adopting the Microsoft Agent Governance Toolkit within its delivery environment and will publish implementation guidance as that work becomes publicly available.
- View the featured session ↗ -
XRSI brings governance, community-building, and long-term ecosystem sustainability expertise to the AgenTrust adoption programme.

Action State Group is collaborating with AgenTrust on an open contribution path for the TRACE Trust Registry, connecting TRACE runtime evidence with neutral, independently verifiable record and witness infrastructure.
Visit Action State Group ↗An independent evaluator's incident report (METR, 26 August 2026) found roughly 7% of the agent transcripts it reviewed had been successfully spoofed, and could not rule out agents deleting logs after the fact.
+ Read the incident report ↗Odystra builds an agentic governance, risk, and compliance platform for regulated enterprises.
Visit Odystra ↗In June 2026 a remote UI package for a popular coding-agent CLI, at about 29,000 weekly npm downloads, shipped code that exfiltrated users' non-expiring OAuth refresh tokens.
o1Labs develops applications and infrastructure powered by zero-knowledge cryptography.
Visit o1Labs ↗Sovereign and on-premises deployment puts a model builder's weights on hardware somebody else owns. Weight-security research recommends confidential computing for the highest protection levels, and current silicon still falls to an operator with physical access.
+ Read the weight-security research ↗AgenTrust develops in public through open repositories, reviewable proposals, implementation evidence, and conformance testing. The goal is not simply to publish specifications: it is to create a contributor community capable of operating, improving, and stewarding the technology.
-AgenTrust
Architecture, implementation, conformance, and maintainer development.
Named organizational partner for community governance, ecosystem adoption, and long-term sustainability. Individual committee appointments will be published only after confirmation.
Adopter, maintainer, research, and public-interest representation will be added as the steering model is formalized.
TRACE, TRACE Registry, conformance suite
+ TRACE spec v0.2 at the Linux Foundation, agentrust-trace 0.10.0, signed registry checkpoints with an external witness receipt +Each step links to its project site. No step requires the others; use the ones your trust boundary needs.
The fellowship will turn AgenTrust implementation patterns into practical, public playbooks. Each playbook will map governance controls and TRACE evidence to an authoritative framework without claiming certification or legal compliance.
-Azure confidential VM. Report signatures verify to the AMD root.
+ agent-manifest #227, merged 2026-07-21 ↗ +GCP C3. Quotes verify offline to the pinned Intel SGX Root CA, no collateral service needed.
+ Check the 2026-07-21 capture yourself → +Through the Weight Custody Manifest path.
+ weight-custody-manifest #54, merged 2026-07-28 ↗ +We verify signature chains. We do not appraise whether a platform's TCB is current.
Deploying weights into customer or sovereign infrastructure.
+ Start with the Weight Custody Manifest → +Who need identity, tool-call policy and delegation they can show to someone else.
+ Start with Agent Manifest and cMCP → +Who have to check another party's claims.
+ Start with the TRACE verifier and the registry → +TRACE is its own Series of LF Projects, announced by the Linux Foundation on 25 August 2026 and developed with AMD, Intel, Microsoft, OPAQUE and TII.
+Sponsored by OPAQUE, which funds the engineering, infrastructure and confidential-computing work behind these projects. Organisations that want to support open, verifiable AI infrastructure are welcome to join as sponsors.
+ Talk to us about sponsoring → +The AgenTrust Fellowship supports emerging maintainers of open infrastructure for verifiable AI systems. Fellows contribute code, tests, integrations, documentation, and adoption guidance across AgenTrust projects, grounded in real issues and verifiable work.
-Applications closed early on 26 August 2026 due to exceptional volume. More than 150 applications are under review. The fellowship will not start in September as originally planned. The schedule and decision timeline are being reviewed and there is no firm notification date yet. Applicants do not need to send anything further; the submitted proposal is what is assessed. A revised timetable will be published here once it is confirmed, and applicants will be contacted directly.
- -AgenTrust founder Imran Siddique has turned the lessons behind production cloud and AI systems into a practical book. It connects the architecture of distributed systems with the harder problem now in front of us: building AI-native systems that remain observable, governable, and correct when they meet production.
-