-
-
What is TRACE?
-
TRACE defines portable, signed runtime evidence. Hardware provenance requires attestation verification against a trusted root; software-mode records do not provide that guarantee.
-
-
-
What is the Weight Custody Manifest?
-
The Weight Custody Manifest (WCM) is an open, pre-1.0 specification for protecting model weights a builder deploys into a customer's own or sovereign infrastructure. It binds weight identity and custody terms to key-release policy. Against an operator who physically owns the hardware it provides accountability, not cryptographic custody.
-
-
-
What is Agent Manifest?
-
Agent Manifest is a structured, machine-readable declaration of an agent's capabilities, permissions, and data access policies. Operators and orchestrators can verify an agent's manifest before invocation.
-
-
-
What is Confidential MCP (cMCP)?
-
Confidential MCP (cMCP) evaluates routed MCP tool calls against policy and records the decisions. In a hardware deployment, the runtime is inside a Trusted Execution Environment (TEE); the agent and upstream tool server remain separate. Host confidentiality also depends on the egress policy. Software mode provides no hardware isolation.
-
-
-
What is Confidential A2A (cA2A)?
-
Confidential A2A is a trust profile on the Agent2Agent (A2A) protocol. Where A2A's Signed Agent Card verifies only the domain owner, cA2A adds attested, attenuated delegation, a sealed peer channel that binds the task payload to the peer's attested measurement, and an offline-verifiable provenance record per hop. It is a developer preview.
-
-
-
Can I try it without confidential-computing hardware?
-
Yes. The
10-minute quickstart runs cMCP in software mode: write a policy, observe a denied tool call, and inspect the signed session record. It provides no hardware isolation or hardware-backed provenance. The
verify page checks a genuine Intel TDX quote in your browser with no hardware of your own.
-
-
-
Are the AgenTrust specifications open source?
-
Yes, though not all under one licence. Agent Manifest, the Weight Custody Manifest and the TRACE conformance suite are Apache 2.0, cMCP and cA2A are MIT, and the TRACE specification is under the Community Specification License 1.0 with its code under Apache 2.0. Source, schemas, and examples are on GitHub at github.com/agentrust-io.
-
-
-