From bee75f8365662e37a359d12d6db048a35cb7a879 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Mon, 14 Sep 2026 12:24:56 -0700 Subject: [PATCH] feat(go): generate the control pages from data/agentic-controls.json The 31 pages under /go/ came from a generator that never landed in any repo, so they drifted: the old governance tagline and alt text, the agentrust.io wordmark, a v=10 stylesheet on the redirects, and a limits bullet calling the Weight Custody Manifest private. tools/build-controls.py now renders go/index.html and the 30 redirects from data/agentic-controls.json, validates the data first, and refuses to run when a published permalink has no control. --check runs in the links job, so a hand edit fails CI. Before any content change it reproduced all 31 pages on main byte for byte. The fixes are then made in the generator: new tagline, AgenTrust wordmark, an eyebrow linking /#chain, stylesheet v=20, and an optional spec field per control. AT-30 links wcm.agentrust-io.com; AT-29 stays private, and the limits bullet is rendered from those markers. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_013aK3gVWzNdcM3hZ2o2awK2 --- .github/workflows/reader-journey.yml | 1 + data/agentic-controls.json | 18 +- go/agent-anomaly-detection/index.html | 7 +- go/agent-circuit-breaker/index.html | 7 +- go/agent-identity-credential/index.html | 7 +- go/agent-key-binding/index.html | 7 +- go/agent-purpose-declaration/index.html | 7 +- go/agent-rate-limiting/index.html | 7 +- go/agent-session-revocation/index.html | 7 +- go/agent-state-rollback/index.html | 7 +- go/agent-termination/index.html | 7 +- go/attested-a2a-channel/index.html | 7 +- go/behavioural-baseline/index.html | 7 +- go/blast-radius-containment/index.html | 7 +- go/capability-attenuation/index.html | 7 +- go/capability-manifest/index.html | 7 +- go/context-provenance/index.html | 7 +- go/continuous-usage-control/index.html | 7 +- go/evidence-transparency-anchoring/index.html | 7 +- go/graceful-degradation/index.html | 7 +- go/index.html | 22 +- go/input-schema-validation/index.html | 7 +- go/model-weight-custody/index.html | 7 +- go/output-encoding/index.html | 7 +- go/output-personal-data/index.html | 7 +- go/policy-verdict-rationale/index.html | 7 +- go/prompt-injection-prevention/index.html | 7 +- go/resource-allowlist/index.html | 7 +- go/runtime-attestation-evidence/index.html | 7 +- go/structured-action-logging/index.html | 7 +- go/tool-authorization/index.html | 7 +- go/transaction-limits/index.html | 7 +- go/verifiable-evidence-record/index.html | 7 +- tools/build-controls.py | 339 ++++++++++++++++++ 34 files changed, 486 insertions(+), 104 deletions(-) create mode 100644 tools/build-controls.py diff --git a/.github/workflows/reader-journey.yml b/.github/workflows/reader-journey.yml index ea11939..78443d2 100644 --- a/.github/workflows/reader-journey.yml +++ b/.github/workflows/reader-journey.yml @@ -16,6 +16,7 @@ jobs: with: python-version: '3.12' - run: python tools/check-site.py + - run: python tools/build-controls.py --check - run: python tools/build-discovery.py --check - run: python tools/check-discovery.py quickstart: diff --git a/data/agentic-controls.json b/data/agentic-controls.json index fccda3b..1c2eb87 100644 --- a/data/agentic-controls.json +++ b/data/agentic-controls.json @@ -1,9 +1,9 @@ { "standard": "AgenTrust Agentic Controls", "version": "0.1.0-draft", - "updated": "2026-08-25", + "updated": "2026-09-14", "source": "OpenCRE graph crawled via opencre.org/rest/v1 on 2026-08-24", - "note": "Source of truth for /go/. Every opencre id was checked against that crawl. This is a mapping, not a conformance claim.", + "note": "Source of truth for /go/, rendered by tools/build-controls.py. Every opencre id was checked against that crawl. This is a mapping, not a conformance claim.", "controls": [ { "id": "AT-01", @@ -675,7 +675,11 @@ "name": "Minimize session life", "url": "https://www.opencre.org/cre/470-731" } - ] + ], + "spec": { + "status": "private", + "topic": "continuous usage control" + } }, { "id": "AT-30", @@ -702,7 +706,13 @@ "name": "AI model supply chain management", "url": "https://www.opencre.org/cre/852-770" } - ] + ], + "spec": { + "status": "public", + "topic": "model weight custody", + "name": "Weight Custody Manifest", + "url": "https://wcm.agentrust-io.com/" + } } ] } diff --git a/go/agent-anomaly-detection/index.html b/go/agent-anomaly-detection/index.html index de0742d..a79d804 100644 --- a/go/agent-anomaly-detection/index.html +++ b/go/agent-anomaly-detection/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Anomaly detection on agent behaviour

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-circuit-breaker/index.html b/go/agent-circuit-breaker/index.html index 4ea42e6..c37b2f7 100644 --- a/go/agent-circuit-breaker/index.html +++ b/go/agent-circuit-breaker/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Circuit breaker on agent loops

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-identity-credential/index.html b/go/agent-identity-credential/index.html index f8564a5..55a7bc3 100644 --- a/go/agent-identity-credential/index.html +++ b/go/agent-identity-credential/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Agent identity credential

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-key-binding/index.html b/go/agent-key-binding/index.html index 07b8071..5dfa19d 100644 --- a/go/agent-key-binding/index.html +++ b/go/agent-key-binding/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Agent key binding and custody

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-purpose-declaration/index.html b/go/agent-purpose-declaration/index.html index 7307aeb..64af282 100644 --- a/go/agent-purpose-declaration/index.html +++ b/go/agent-purpose-declaration/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Declared agent purpose and scope

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-rate-limiting/index.html b/go/agent-rate-limiting/index.html index ca3f6b6..8fbfea3 100644 --- a/go/agent-rate-limiting/index.html +++ b/go/agent-rate-limiting/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Rate limiting on agent actions

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-session-revocation/index.html b/go/agent-session-revocation/index.html index 8d4a4e1..b3ca95e 100644 --- a/go/agent-session-revocation/index.html +++ b/go/agent-session-revocation/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Agent session revocation

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-state-rollback/index.html b/go/agent-state-rollback/index.html index fabe335..b553660 100644 --- a/go/agent-state-rollback/index.html +++ b/go/agent-state-rollback/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

State rollback after an agent action

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/agent-termination/index.html b/go/agent-termination/index.html index 2b85a51..8536d47 100644 --- a/go/agent-termination/index.html +++ b/go/agent-termination/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Terminate a running agent

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/attested-a2a-channel/index.html b/go/attested-a2a-channel/index.html index 0864c5c..23d7711 100644 --- a/go/attested-a2a-channel/index.html +++ b/go/attested-a2a-channel/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Attested agent-to-agent channel

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/behavioural-baseline/index.html b/go/behavioural-baseline/index.html index ad1de53..d0ab321 100644 --- a/go/behavioural-baseline/index.html +++ b/go/behavioural-baseline/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Behavioural baseline for an agent

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/blast-radius-containment/index.html b/go/blast-radius-containment/index.html index d218a43..21fe3fc 100644 --- a/go/blast-radius-containment/index.html +++ b/go/blast-radius-containment/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Blast radius containment for agent execution

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/capability-attenuation/index.html b/go/capability-attenuation/index.html index 03a4ee5..f058e0a 100644 --- a/go/capability-attenuation/index.html +++ b/go/capability-attenuation/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Capability attenuation across the delegation chain

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/capability-manifest/index.html b/go/capability-manifest/index.html index f3a08d1..ece9ec6 100644 --- a/go/capability-manifest/index.html +++ b/go/capability-manifest/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Declared capability manifest

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/context-provenance/index.html b/go/context-provenance/index.html index 3d7ab39..fde096a 100644 --- a/go/context-provenance/index.html +++ b/go/context-provenance/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Context provenance for agent working memory

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/continuous-usage-control/index.html b/go/continuous-usage-control/index.html index f89a3c8..e394235 100644 --- a/go/continuous-usage-control/index.html +++ b/go/continuous-usage-control/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Continuous usage control after grant

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/evidence-transparency-anchoring/index.html b/go/evidence-transparency-anchoring/index.html index d7842c0..853a7a2 100644 --- a/go/evidence-transparency-anchoring/index.html +++ b/go/evidence-transparency-anchoring/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Transparency-log anchoring of evidence

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/graceful-degradation/index.html b/go/graceful-degradation/index.html index c44c6a3..7d29d82 100644 --- a/go/graceful-degradation/index.html +++ b/go/graceful-degradation/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
@@ -41,7 +42,7 @@

Graceful degradation on policy engine failure

AgenTrust -
Open standards for AI agent governance
+
Open specifications for verifiable AI
Home diff --git a/go/index.html b/go/index.html index dd774d9..007e7f6 100644 --- a/go/index.html +++ b/go/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -37,12 +38,12 @@ } - +
- agentrust.io + AgenTrust
- Declare · Enforce · Prove + Across the chain · Mapped to OpenCRE · Stable permalinks

AgenTrust
Agentic Controls

Thirty controls for AI agents, each stated as one requirement and cross-linked to the Common Requirement that already covers it in OpenCRE. Every control has a stable permalink so an @@ -333,6 +334,7 @@

AT-30 Model weight custo

Model weights released into infrastructure the model owner does not control remain under the owner's custody, including against the infrastructure operator.

Common Requirements: Runtime model confidentiality controls Model hosting supply chain mannagement AI model supply chain management

+

Specification: Weight Custody Manifest

Permalink: https://agentrust-io.com/go/model-weight-custody/

@@ -347,12 +349,12 @@

What this page does not do

  • It does not rank the controls or assert a maturity model over them.
  • It does not assert that any AgenTrust implementation satisfies any of them. Conformance is tested per specification, not asserted here.
    • -
  • Two of the controls, continuous usage control and model weight custody, are drawn from - specifications that are still in private pre-standardization. Their permalinks resolve here and - will point deeper once those specifications are public.
    • +
  • One of the controls, continuous usage control, is drawn from + a specification that is still in private pre-standardization. Its permalink resolves here and + will point deeper once that specification is public.
    • -

    This page is generated from the OpenCRE mapping sheet. - Edit the mapping, not this file.

    +

    This page is generated from agentic-controls.json + by build-controls.py. Edit the data, not this file.

    @@ -361,7 +363,7 @@

    What this page does not do

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/input-schema-validation/index.html b/go/input-schema-validation/index.html index 1d6965a..57a24cb 100644 --- a/go/input-schema-validation/index.html +++ b/go/input-schema-validation/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Schema validation of agent input

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/model-weight-custody/index.html b/go/model-weight-custody/index.html index 65659e7..6983ad6 100644 --- a/go/model-weight-custody/index.html +++ b/go/model-weight-custody/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Model weight custody against the hosting operator

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/output-encoding/index.html b/go/output-encoding/index.html index 368ab36..f402214 100644 --- a/go/output-encoding/index.html +++ b/go/output-encoding/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Encoding and injection prevention

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/output-personal-data/index.html b/go/output-personal-data/index.html index 496f18a..05fba36 100644 --- a/go/output-personal-data/index.html +++ b/go/output-personal-data/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Personal data protection in agent output

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/policy-verdict-rationale/index.html b/go/policy-verdict-rationale/index.html index 9b41be0..9311a95 100644 --- a/go/policy-verdict-rationale/index.html +++ b/go/policy-verdict-rationale/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Policy verdict rationale

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/prompt-injection-prevention/index.html b/go/prompt-injection-prevention/index.html index d227726..2a67af2 100644 --- a/go/prompt-injection-prevention/index.html +++ b/go/prompt-injection-prevention/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Prompt injection prevention

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/resource-allowlist/index.html b/go/resource-allowlist/index.html index 2652468..88a8f04 100644 --- a/go/resource-allowlist/index.html +++ b/go/resource-allowlist/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Resource allowlist

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/runtime-attestation-evidence/index.html b/go/runtime-attestation-evidence/index.html index dfd499d..f8dea78 100644 --- a/go/runtime-attestation-evidence/index.html +++ b/go/runtime-attestation-evidence/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Runtime attestation evidence

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/structured-action-logging/index.html b/go/structured-action-logging/index.html index ba0fc26..f0978c9 100644 --- a/go/structured-action-logging/index.html +++ b/go/structured-action-logging/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Structured action logging

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/tool-authorization/index.html b/go/tool-authorization/index.html index f3f2dcf..2216cef 100644 --- a/go/tool-authorization/index.html +++ b/go/tool-authorization/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Tool authorization decision

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/transaction-limits/index.html b/go/transaction-limits/index.html index ec711af..69f8e5d 100644 --- a/go/transaction-limits/index.html +++ b/go/transaction-limits/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Transaction and spend limits

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/go/verifiable-evidence-record/index.html b/go/verifiable-evidence-record/index.html index 6413de6..0c05be5 100644 --- a/go/verifiable-evidence-record/index.html +++ b/go/verifiable-evidence-record/index.html @@ -1,5 +1,6 @@ + @@ -16,7 +17,7 @@ - + @@ -26,7 +27,7 @@ - +
    @@ -41,7 +42,7 @@

    Signed, third-party-verifiable evidence record

    AgenTrust -
    Open standards for AI agent governance
    +
    Open specifications for verifiable AI
    Home diff --git a/tools/build-controls.py b/tools/build-controls.py new file mode 100644 index 0000000..fe686d9 --- /dev/null +++ b/tools/build-controls.py @@ -0,0 +1,339 @@ +"""Generate /go/, the agentic control set, from data/agentic-controls.json. + +The control set is cited by external standards through stable permalinks, so the +pages must never drift from the data. Edit data/agentic-controls.json, then run: + + python tools/build-controls.py # write go/index.html and go//index.html + python tools/build-controls.py --check # fail if any page differs from the data + +CI runs --check. A permalink that is cited elsewhere must keep resolving, so a +control that disappears from the data is an error here, not a silent deletion. +""" +import argparse +from html import escape +import json +from pathlib import Path +import re +import sys + +ROOT = Path(__file__).resolve().parents[1] +DATA = ROOT / 'data' / 'agentic-controls.json' +GO = ROOT / 'go' +BASE = 'https://agentrust-io.com' + +# Shared chrome. These are the only strings to change when the site's look moves. +CSS_VERSION = '20' +OG_IMAGE_ALT = 'AgenTrust: open specifications for verifiable AI' +TAGLINE = 'Open specifications for verifiable AI' +WORDMARK = 'AgenTrust' +EYEBROW = 'Across the chain · Mapped to OpenCRE · Stable permalinks' +REPO = 'https://github.com/agentrust-io/agentrust-io.github.io/blob/main' +GENERATED_COMMENT = ('') +GENERATED_NOTE = (f'This page is generated from agentic-controls.json\n' + f' by build-controls.py. Edit the data, not this file.') + +ENFORCEMENT_POINTS = {'agent_startup', 'agent_shutdown', 'input', 'output', 'pre_tool_call', + 'post_tool_call', 'post_model_call'} +SLUG = re.compile(r'^[a-z0-9]+(?:-[a-z0-9]+)*$') +CRE = re.compile(r'^\d{3}-\d{3}$') + +_ONES = ['zero', 'one', 'two', 'three', 'four', 'five', 'six', 'seven', 'eight', 'nine', 'ten', + 'eleven', 'twelve', 'thirteen', 'fourteen', 'fifteen', 'sixteen', 'seventeen', + 'eighteen', 'nineteen'] +_TENS = ['', '', 'twenty', 'thirty', 'forty', 'fifty', 'sixty', 'seventy', 'eighty', 'ninety'] + + +def words(n): + if not 0 <= n < 100: + raise ValueError(f'no word form for {n}') + if n < 20: + return _ONES[n] + tens, ones = divmod(n, 10) + return _TENS[tens] + (f'-{_ONES[ones]}' if ones else '') + + +def e(text): + return escape(text, quote=True) + + +def load(): + data = json.loads(DATA.read_text(encoding='utf-8')) + controls = data['controls'] + problems = [] + seen_ids, seen_slugs, families = set(), set(), [] + for c in controls: + where = c.get('id', '') + missing = [key for key in ('id', 'family', 'family_name', 'slug', 'name', 'enforcement_points', + 'requirement', 'permalink', 'opencre') if key not in c] + if missing: + problems.append(f'{where}: missing {", ".join(missing)}') + continue + if c['id'] in seen_ids: + problems.append(f'{where}: duplicate id') + if c['slug'] in seen_slugs or not SLUG.match(c['slug']): + problems.append(f'{where}: slug {c["slug"]!r} is duplicated or not lowercase-hyphenated') + seen_ids.add(c['id']) + seen_slugs.add(c['slug']) + if c['permalink'] != f'{BASE}/go/{c["slug"]}/': + problems.append(f'{where}: permalink does not match slug') + for point in c['enforcement_points']: + if point not in ENFORCEMENT_POINTS: + problems.append(f'{where}: unknown enforcement point {point!r}') + if not c['opencre']: + problems.append(f'{where}: no OpenCRE link') + for link in c['opencre']: + if not CRE.match(link['id']) or link['url'] != f'https://www.opencre.org/cre/{link["id"]}': + problems.append(f'{where}: OpenCRE link {link.get("id")!r} is malformed') + spec = c.get('spec') + if spec is not None: + if not spec.get('topic'): + problems.append(f'{where}: spec needs a topic, the lowercase phrase used in prose') + if spec.get('status') not in ('private', 'public'): + problems.append(f'{where}: spec.status must be private or public') + elif spec['status'] == 'public' and not (spec.get('name') and str(spec.get('url', '')).startswith('https://')): + problems.append(f'{where}: a public spec needs a name and an https url') + if families and families[-1] == c['family']: + continue + if c['family'] in families: + problems.append(f'{where}: family {c["family"]} is not contiguous') + families.append(c['family']) + if problems: + raise SystemExit('data/agentic-controls.json is invalid:\n ' + '\n '.join(problems)) + return data, controls + + +def head(title, description, canonical, robots, og_title, og_url, extra=''): + return f''' + +{GENERATED_COMMENT} + + + +{title} + + + + + + + + + + + + + + + + + + + + + +{extra}''' + + +FOOTER = ''' + + + + + +''' + + +def card(c): + tags = ''.join(f'{e(p)} ' for p in c['enforcement_points']) + cres = ' '.join(f'{e(o["name"])}' for o in c['opencre']) + lines = [ + '', + '
    ', + f'

    {e(c["id"])} {e(c["name"])}

    ', + f' {tags}', + f'

    {e(c["requirement"])}

    ', + f'

    Common Requirements: {cres}

    ', + ] + spec = c.get('spec') or {} + if spec.get('status') == 'public': + lines.append(f'

    Specification: {e(spec["name"])}

    ') + lines += [f'

    Permalink: {c["permalink"]}

    ', '
    '] + return lines + + +def private_bullet(controls): + private = [c for c in controls if (c.get('spec') or {}).get('status') == 'private'] + if not private: + return [] + names = [c['spec']['topic'] for c in private] + listed = names[0] if len(names) == 1 else ', '.join(names[:-1]) + ' and ' + names[-1] + one = len(private) == 1 + return [ + f'
  • {words(len(private)).capitalize()} of the controls, {listed}, {"is" if one else "are"} drawn from', + f' {"a specification" if one else "specifications"} that {"is" if one else "are"} still in private ' + f'pre-standardization. {"Its permalink resolves" if one else "Their permalinks resolve"} here and', + f' will point deeper once {"that specification is" if one else "those specifications are"} public.
    • ', + ] + + +def render_index(controls): + total = len(controls) + with_point = sum(1 for c in controls if c['enforcement_points']) + links = sum(len(c['opencre']) for c in controls) + unique = len({o['id'] for c in controls for o in c['opencre']}) + description = (f'The AgenTrust agentic control set: {total} controls for AI agents, each stated as one ' + 'requirement and cross-linked to the corresponding Common Requirement in OpenCRE. ' + 'Stable permalinks at /go/.') + ld = f''' + + + + +''' + body = [f''' +
    + {WORDMARK} + +
    + +
    + {EYEBROW} +

    AgenTrust
    Agentic Controls

    +

    {words(total).capitalize()} controls for AI agents, each stated as one requirement and cross-linked to the + Common Requirement that already covers it in OpenCRE. Every control has a stable permalink so an + external standard can cite it without the link rotting.

    +
    {total} controls · {links} OpenCRE links · {unique} Common Requirements
    +
    + +
    + +
    + How to read this +

    The links point outward on purpose

    +

    Most of what an agent needs is not new. Identity, least privilege, logging, injection handling and + rate limiting are decades old, and OpenCRE already organizes them across ASVS, CWE, ISO 27001, + NIST 800-53, SAMM and the OWASP AI Exchange. So each control below names the Common Requirement it + belongs to rather than restating it.

    +

    Where a control reads new, it is usually the same requirement applied to a different subject: a + non-human principal, a grant derived from another grant, or a platform the relying party does not + control. That distinction is what the OpenCRE links make visible.

    +

    This is a mapping, not a conformance claim. A link to a + Common Requirement says a control belongs to that topic. It is not evidence that anything is + implemented, tested, or deployed.

    +
    + +
    + The control set +

    {words(total).capitalize()} controls

    +

    Where a control is enforced at a specific point in the agent loop, the point is named on the + control itself. {words(with_point).capitalize()} of the {words(total)} have one. The rest do not have a single point and are left + unmarked rather than forced into one.

    '''] + lines = [] + family = None + for c in controls: + if c['family'] != family: + family = c['family'] + lines += ['', f'

    {e(c["family"])} · {e(c["family_name"])}

    '] + lines += card(c) + lines += ['', '
    ', '', '
    ', ' Limits', + '

    What this page does not do

    ', '
      ', + f'
    • It does not claim these controls are absent from OpenCRE. Every one of the {words(total)} maps to an', + ' existing Common Requirement. None proposes a new one.
      • ', + '
    • It does not rank the controls or assert a maturity model over them.
      • ', + '
    • It does not assert that any AgenTrust implementation satisfies any of them. Conformance is', + ' tested per specification, not asserted here.
      • '] + lines += private_bullet(controls) + lines += ['
    ', f'

    {GENERATED_NOTE}

    ', '
    ', + '', '
    ', ''] + head_html = head('AgenTrust Agentic Controls | AgenTrust', e(description), f'{BASE}/go/', + 'index, follow', 'AgenTrust Agentic Controls', f'{BASE}/go/', ld) + return head_html + body[0] + '\n' + '\n'.join(lines) + '\n' + FOOTER.format(tagline=TAGLINE) + + +def render_stub(c): + anchor = f'/go/#{c["slug"]}' + extra = (f'\n' + f'\n' + '\n\n') + body = f'''
    +
    + AgenTrust Agentic Controls +

    {e(c["name"])}

    +

    Redirecting to the control set.

    +
    +
    + +''' + return (head(f'{e(c["name"])} | AgenTrust Agentic Controls', e(c['requirement']), f'{BASE}{anchor}', + 'noindex, follow', e(c['name']), f'{BASE}{anchor}', extra) + + body + FOOTER.format(tagline=TAGLINE)) + + +def outputs(controls): + pages = {GO / 'index.html': render_index(controls)} + for c in controls: + pages[GO / c['slug'] / 'index.html'] = render_stub(c) + return pages + + +def main(): + parser = argparse.ArgumentParser(description=__doc__.splitlines()[0]) + parser.add_argument('--check', action='store_true', help='fail if any page differs from the data') + args = parser.parse_args() + + _, controls = load() + pages = outputs(controls) + expected_stubs = {path.parent.name for path in pages if path.parent != GO} + orphaned = sorted(p.parent.name for p in GO.glob('*/index.html') if p.parent.name not in expected_stubs) + if orphaned: + raise SystemExit('Permalinks with no control in the data: ' + ', '.join(orphaned) + + '. Published permalinks are cited externally; restore the control or retire the ' + 'page deliberately in its own change.') + + stale = [p for p, text in pages.items() if not p.exists() or p.read_text(encoding='utf-8') != text] + if args.check: + if stale: + names = ', '.join(str(p.relative_to(ROOT)).replace('\\', '/') for p in stale[:5]) + more = f' and {len(stale) - 5} more' if len(stale) > 5 else '' + raise SystemExit(f'{len(stale)} /go/ page(s) differ from data/agentic-controls.json: {names}{more}. ' + 'Run python tools/build-controls.py and commit the result.') + print(f'PASS /go/ matches data/agentic-controls.json: index plus {len(controls)} permalinks') + return + for path in stale: + path.parent.mkdir(parents=True, exist_ok=True) + path.write_text(pages[path], encoding='utf-8', newline='\n') + print(f'Wrote {len(stale)} of {len(pages)} /go/ pages from data/agentic-controls.json') + + +if __name__ == '__main__': + sys.exit(main())