agentrust-io · imran-siddique · Sep 14, 2026 · Sep 14, 2026
diff --git a/.github/workflows/reader-journey.yml b/.github/workflows/reader-journey.yml
@@ -16,6 +16,7 @@ jobs:
         with:
           python-version: '3.12'
       - run: python tools/check-site.py
+      - run: python tools/build-controls.py --check
       - run: python tools/build-discovery.py --check
       - run: python tools/check-discovery.py
   quickstart:

diff --git a/data/agentic-controls.json b/data/agentic-controls.json
@@ -1,9 +1,9 @@
 {
   "standard": "AgenTrust Agentic Controls",
   "version": "0.1.0-draft",
-  "updated": "2026-08-25",
+  "updated": "2026-09-14",
   "source": "OpenCRE graph crawled via opencre.org/rest/v1 on 2026-08-24",
-  "note": "Source of truth for /go/. Every opencre id was checked against that crawl. This is a mapping, not a conformance claim.",
+  "note": "Source of truth for /go/, rendered by tools/build-controls.py. Every opencre id was checked against that crawl. This is a mapping, not a conformance claim.",
   "controls": [
     {
       "id": "AT-01",
@@ -675,7 +675,11 @@
           "name": "Minimize session life",
           "url": "https://www.opencre.org/cre/470-731"
         }
-      ]
+      ],
+      "spec": {
+        "status": "private",
+        "topic": "continuous usage control"
+      }
     },
     {
       "id": "AT-30",
@@ -702,7 +706,13 @@
           "name": "AI model supply chain management",
           "url": "https://www.opencre.org/cre/852-770"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "topic": "model weight custody",
+        "name": "Weight Custody Manifest",
+        "url": "https://wcm.agentrust-io.com/"
+      }
     }
   ]
 }
diff --git a/go/agent-anomaly-detection/index.html b/go/agent-anomaly-detection/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Anomaly detection on agent behaviour">
 <meta name="twitter:description" content="Departure from the established baseline is detected during the run rather than reconstructed after it.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-anomaly-detection">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Anomaly detection on agent behaviour</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-circuit-breaker/index.html b/go/agent-circuit-breaker/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Circuit breaker on agent loops">
 <meta name="twitter:description" content="Repeating or non-terminating agent loops are broken automatically, and a broken loop does not cascade into the agents depending on it.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-circuit-breaker">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Circuit breaker on agent loops</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-identity-credential/index.html b/go/agent-identity-credential/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Agent identity credential">
 <meta name="twitter:description" content="The agent presents a credential bound to its own identity, distinct from the identity of the user who invoked it, before any authorization decision is made on its behalf.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-identity-credential">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Agent identity credential</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-key-binding/index.html b/go/agent-key-binding/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Agent key binding and custody">
 <meta name="twitter:description" content="The agent&#x27;s signing key is bound to its declared identity and held so that possession of the key cannot be separated from the identity it asserts.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-key-binding">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Agent key binding and custody</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-purpose-declaration/index.html b/go/agent-purpose-declaration/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Declared agent purpose and scope">
 <meta name="twitter:description" content="The agent declares its purpose and the boundary of its task in a form a policy engine can read, not only a form a person can read.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-purpose-declaration">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Declared agent purpose and scope</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-rate-limiting/index.html b/go/agent-rate-limiting/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Rate limiting on agent actions">
 <meta name="twitter:description" content="The rate at which an agent may act is bounded independently of the rate at which it may infer.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-rate-limiting">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Rate limiting on agent actions</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-session-revocation/index.html b/go/agent-session-revocation/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Agent session revocation">
 <meta name="twitter:description" content="An agent&#x27;s session and the authority attached to it can be revoked without waiting for expiry.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-session-revocation">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Agent session revocation</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-state-rollback/index.html b/go/agent-state-rollback/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="State rollback after an agent action">
 <meta name="twitter:description" content="State an agent changed can be identified and reversed, distinctly from restoring a backup of the whole system.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-state-rollback">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>State rollback after an agent action</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/agent-termination/index.html b/go/agent-termination/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Terminate a running agent">
 <meta name="twitter:description" content="A running agent can be stopped by an operator, and the stop takes effect on work already in flight.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#agent-termination">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Terminate a running agent</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>

diff --git a/go/attested-a2a-channel/index.html b/go/attested-a2a-channel/index.html
@@ -1,5 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
+<!-- Generated by tools/build-controls.py from data/agentic-controls.json. Edit the data and re-run it; CI fails on hand edits. -->
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -16,7 +17,7 @@
 <meta property="og:image" content="https://agentrust-io.com/og.png">
 <meta property="og:image:width" content="1200">
 <meta property="og:image:height" content="630">
-<meta property="og:image:alt" content="AgenTrust: open standards for AI agent governance">
+<meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Attested agent-to-agent channel">
 <meta name="twitter:description" content="An agent-to-agent channel establishes what the peer is, not only that the channel is encrypted, before scope is passed across it.">
@@ -26,7 +27,7 @@
 <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
 <meta http-equiv="refresh" content="0; url=/go/#attested-a2a-channel">
-<link rel="stylesheet" href="/design-system.css?v=10">
+<link rel="stylesheet" href="/design-system.css?v=20">
 </head>
 <body class="at-page">
 <main>
@@ -41,7 +42,7 @@ <h2>Attested agent-to-agent channel</h2>
   <div class="foot-in">
     <div class="foot-brand">
       <a class="wordmark" href="/">AgenTrust</a>
-      <div class="tagline">Open standards for AI agent governance</div>
+      <div class="tagline">Open specifications for verifiable AI</div>
     </div>
     <div class="foot-links">
       <a href="/">Home</a>