docs: say TRACE has an AAIF Sandbox proposal open

community/index.html

@@ -111,7 +111,7 @@ <h2 class="section-title">Relationships the public record supports</h2>
   <!-- adoption:generated:start -->
     <article class="partner-card lf-card">
       <div class="partner-logo-wrap"><img src="/assets/lf-logo-stacked-color.svg" alt="The Linux Foundation" loading="lazy"></div>
-      <div><div class="partner-kicker">Neutral host</div><h3>TRACE Specification is an LF Project</h3><p>TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means.</p><a class="evidence-link" href="https://github.com/agentrust-io/trace-spec/blob/main/GOVERNANCE.md">Read the project governance ↗</a></div>
+      <div><div class="partner-kicker">Neutral host</div><h3>TRACE Specification is an LF Project</h3><p>TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means. It has also been proposed to the Agentic AI Foundation at the Sandbox stage.</p><a class="evidence-link" href="https://github.com/agentrust-io/trace-spec/blob/main/GOVERNANCE.md">Read the project governance ↗</a></div>
     </article>
   <div class="adoption-grid">
     <article class="adoption-card">

data/adoption.json

@@ -6,7 +6,7 @@
       "logo": "/assets/lf-logo-stacked-color.svg",
       "label": "Neutral host",
       "title": "TRACE Specification is an LF Project",
-      "description": "TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means.",
+      "description": "TRACE is hosted at the Linux Foundation as its own series. Its specification, IP, trademark, and conformance mark sit with the series under the Community Specification License and LF Projects policies, so no single vendor decides what conformance means. It has also been proposed to the Agentic AI Foundation at the Sandbox stage.",
       "evidenceUrl": "https://github.com/agentrust-io/trace-spec/blob/main/GOVERNANCE.md",
       "evidenceLabel": "Read the project governance"
     },

index.html

@@ -248,7 +248,7 @@ <h2 class="section-title">Four questions, each with evidence a stranger can chec
       <span class="trust-number">04 · EVIDENCE</span>
       <strong>Can a third party verify all of it offline, years later?</strong>
       <p><a href="https://trace.agentrust-io.com">TRACE</a>, <a href="/registry/">TRACE Registry</a>, <a href="https://tests.agentrust-io.com">conformance suite</a></p>
-      <span class="trust-home">TRACE spec v0.2 at the Linux Foundation, agentrust-trace 0.10.0, signed registry checkpoints with an external witness receipt</span>
+      <span class="trust-home">TRACE spec v0.2, a Series of LF Projects with an AAIF Sandbox proposal open, agentrust-trace 0.10.0, signed registry checkpoints with an external witness receipt</span>
     </div>
   </div>
   <p class="trust-note">Each step links to its project site. No step requires the others; use the ones your trust boundary needs.</p>
@@ -336,7 +336,7 @@ <h3>Security, audit and risk teams</h3>
     <h2 class="section-title">Anyone can read it, run it and check it.</h2>
   </div>
   <article class="adoption-card">
-    <p>TRACE is its own Series of LF Projects, announced by the Linux Foundation on 25 August 2026 and developed with AMD, Intel, Microsoft, OPAQUE and TII.</p>
+    <p>TRACE is its own Series of LF Projects, announced by the Linux Foundation on 25 August 2026 and developed with AMD, Intel, Microsoft, OPAQUE and TII. It has also been proposed to the Agentic AI Foundation at the Sandbox stage (<a href="https://github.com/aaif/project-proposals/issues/42">aaif/project-proposals #42</a>, opened 14 September 2026).</p>
     <div class="logo-row">
       <img src="/assets/lf-logo-stacked-color.svg" alt="The Linux Foundation" loading="lazy">
       <img src="/assets/amd-mark.svg" alt="AMD" loading="lazy">

llms.txt

@@ -19,7 +19,7 @@ AgenTrust is the ecosystem at https://agentrust-io.com and the GitHub organizati
 - [Agent Manifest](https://manifest.agentrust-io.com/): Declares agent identity, capabilities, and intended authority. Verification of a declaration does not prove that every runtime action complied with it.
 - [Confidential MCP (cMCP)](https://cmcp.agentrust-io.com/): Evaluates routed tool calls against policy and records the decisions. Hardware deployments place the runtime inside a Trusted Execution Environment; confidentiality also depends on egress policy and deployment configuration. The agent and upstream tool server are separate boundaries.
 - [Confidential A2A (cA2A)](https://ca2a.agentrust-io.com/): A developer-preview trust profile for Agent2Agent delegation, with attenuated authority, attestation, sealed channels, and provenance. Assurance depends on the evidence and checks performed by the deployment.
-- [TRACE](https://trace.agentrust-io.com/): Portable, signed runtime evidence. Hardware provenance requires attestation verification against a trusted root. A signature alone does not establish hardware origin or the truth of all recorded claims.
+- [TRACE](https://trace.agentrust-io.com/): Portable, signed runtime evidence. A Series of LF Projects, with an AAIF Sandbox proposal open. Hardware provenance requires attestation verification against a trusted root. A signature alone does not establish hardware origin or the truth of all recorded claims.
 - [WCM public SDK and demos](https://wcm.agentrust-io.com/): Public evaluation path for weight custody. Key release, encrypted artifact delivery, runtime leases, and key-copy handling are separate responsibilities. The specification is in pre-standardization review; use the public material linked from this page.
 - [AgenTrust Telemetry](https://agentrust-io.com/telemetry/): An alpha, backend-neutral event contract and reference SDKs for governance facts, caller-owned OpenTelemetry, and evidence finalization. It is not a policy engine or a proof that recorded events are true.
 - [TRACE Registry](https://agentrust-io.com/registry/): Public anchors and signed checkpoints for offline verification. Inclusion, a signer's stated time, independent time evidence, and consistency of log history are different checks. A registry entry does not validate a record's claims.