diff --git a/community/index.html b/community/index.html
index c5fb0cb..bf4799f 100644
--- a/community/index.html
+++ b/community/index.html
@@ -111,7 +111,7 @@
- Neutral host
TRACE Specification is an LF Project
TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means.
Read the project governance ↗
+ Neutral host
TRACE Specification is an LF Project
TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means. It has also been proposed to the Agentic AI Foundation at the Sandbox stage.
Read the project governance ↗
Each step links to its project site. No step requires the others; use the ones your trust boundary needs.
@@ -336,7 +336,7 @@
- TRACE is its own Series of LF Projects, announced by the Linux Foundation on 25 August 2026 and developed with AMD, Intel, Microsoft, OPAQUE and TII.
+ TRACE is its own Series of LF Projects, announced by the Linux Foundation on 25 August 2026 and developed with AMD, Intel, Microsoft, OPAQUE and TII. It has also been proposed to the Agentic AI Foundation at the Sandbox stage (aaif/project-proposals #42, opened 14 September 2026).

diff --git a/llms.txt b/llms.txt
index c6d365e..40c196f 100644
--- a/llms.txt
+++ b/llms.txt
@@ -19,7 +19,7 @@ AgenTrust is the ecosystem at https://agentrust-io.com and the GitHub organizati
- [Agent Manifest](https://manifest.agentrust-io.com/): Declares agent identity, capabilities, and intended authority. Verification of a declaration does not prove that every runtime action complied with it.
- [Confidential MCP (cMCP)](https://cmcp.agentrust-io.com/): Evaluates routed tool calls against policy and records the decisions. Hardware deployments place the runtime inside a Trusted Execution Environment; confidentiality also depends on egress policy and deployment configuration. The agent and upstream tool server are separate boundaries.
- [Confidential A2A (cA2A)](https://ca2a.agentrust-io.com/): A developer-preview trust profile for Agent2Agent delegation, with attenuated authority, attestation, sealed channels, and provenance. Assurance depends on the evidence and checks performed by the deployment.
-- [TRACE](https://trace.agentrust-io.com/): Portable, signed runtime evidence. Hardware provenance requires attestation verification against a trusted root. A signature alone does not establish hardware origin or the truth of all recorded claims.
+- [TRACE](https://trace.agentrust-io.com/): Portable, signed runtime evidence. A Series of LF Projects, with an AAIF Sandbox proposal open. Hardware provenance requires attestation verification against a trusted root. A signature alone does not establish hardware origin or the truth of all recorded claims.
- [WCM public SDK and demos](https://wcm.agentrust-io.com/): Public evaluation path for weight custody. Key release, encrypted artifact delivery, runtime leases, and key-copy handling are separate responsibilities. The specification is in pre-standardization review; use the public material linked from this page.
- [AgenTrust Telemetry](https://agentrust-io.com/telemetry/): An alpha, backend-neutral event contract and reference SDKs for governance facts, caller-owned OpenTelemetry, and evidence finalization. It is not a policy engine or a proof that recorded events are true.
- [TRACE Registry](https://agentrust-io.com/registry/): Public anchors and signed checkpoints for offline verification. Inclusion, a signer's stated time, independent time evidence, and consistency of log history are different checks. A registry entry does not validate a record's claims.