From fd2399a9a75d025b4abb3228bb05449318927b9e Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Wed, 30 Sep 2026 09:37:52 -0700 Subject: [PATCH 1/2] docs(profile): bring the projects table and registry status up to date Versions from PyPI on 2026-09-30, trace-registry is public with its anchor format published (trace-spec#111, closed 2026-08-08), weight-custody-manifest and agentrust-telemetry added, AGT coverage stated as 7 full and 3 partial. Replace the closed fellowship pointer with a good first issue link. Signed-off-by: Imran Siddique --- profile/README.md | 21 +++++++++++---------- 1 file changed, 11 insertions(+), 10 deletions(-) diff --git a/profile/README.md b/profile/README.md index 42a2969..edec0bb 100644 --- a/profile/README.md +++ b/profile/README.md @@ -45,16 +45,18 @@ governance process define its legal and technical stewardship. See the | Project | Description | License | Status | |---------|-------------|---------|--------| -| [agent-manifest](https://github.com/agentrust-io/agent-manifest) | Agent Manifest SDK: cryptographically bind all 10 artifacts defining an agent at deployment. Python. | Apache 2.0 | Public, v0.10.0 | -| [cmcp](https://github.com/agentrust-io/cmcp) | cMCP: Confidential MCP Runtime. Hardware-attested policy enforcement for MCP tool calls inside a TEE. | MIT | Public, v0.3.0 | -| [ca2a](https://github.com/agentrust-io/ca2a) | cA2A: Confidential Agent-to-Agent. Attested, attenuated delegation profile on top of A2A, with a sealed peer channel and offline-verifiable provenance. | MIT | Public, alpha (v0.1.0a1) | -| [trace-spec](https://github.com/agentrust-io/trace-spec) | TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard: an EAT (RFC 9711) profile carried in a JWT or CWT/COSE envelope, plus the `agentrust-trace` reference SDK. | Dual: CC BY 4.0 (spec text), Apache 2.0 (code) | Public, spec v0.2, SDK v0.6.0 | -| [trace-tests](https://github.com/agentrust-io/trace-tests) | TRACE conformance test suite for certification. | Apache 2.0 | Public, v0.4.1 | +| [agent-manifest](https://github.com/agentrust-io/agent-manifest) | Agent Manifest SDK: cryptographically bind all 10 artifacts defining an agent at deployment. Python. | Apache 2.0 | Public, v0.13.1 | +| [cmcp](https://github.com/agentrust-io/cmcp) | cMCP: Confidential MCP Runtime. Hardware-attested policy enforcement for MCP tool calls inside a TEE. | MIT | Public, v0.6.0 | +| [ca2a](https://github.com/agentrust-io/ca2a) | cA2A: Confidential Agent-to-Agent. Attested, attenuated delegation profile on top of A2A, with a sealed peer channel and offline-verifiable provenance. | MIT | Public, v0.3.1 | +| [trace-spec](https://github.com/agentrust-io/trace-spec) | TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard: an EAT (RFC 9711) profile carried in a JWT or CWT/COSE envelope, plus the `agentrust-trace` reference SDK. | Dual: CC BY 4.0 (spec text), Apache 2.0 (code) | Public, spec v0.2, SDK v0.11.0 | +| [trace-tests](https://github.com/agentrust-io/trace-tests) | TRACE conformance test suite for certification. | Apache 2.0 | Public, v0.6.1 | | [examples](https://github.com/agentrust-io/examples) | End-to-end integration examples: financial services, healthcare, multi-tenant SaaS, industrial embodied AI, and agent-to-agent delegation. | MIT | Public | | [integrations](https://github.com/agentrust-io/integrations) | Ecosystem adapters: third-party governance runtimes to TRACE claims, plus coding-agent plugins. | Apache 2.0 | Public | | [demos](https://github.com/agentrust-io/demos) | Runnable demos and the web console used for walkthroughs. | MIT | Public | | [awesome-ai-governance](https://github.com/agentrust-io/awesome-ai-governance) | Community-curated list of tools, frameworks, standards, and resources for governing autonomous AI agents. | CC0 1.0 | Public, launched CC Summit Jun 23 | -| [trace-registry](https://github.com/agentrust-io/trace-registry) | Merkle registry of TRACE claim anchors, with a normative anchor and inclusion-proof format. | CC BY 4.0 | **Private.** Publishing the anchor format is tracked in [trace-spec#111](https://github.com/agentrust-io/trace-spec/issues/111) | +| [trace-registry](https://github.com/agentrust-io/trace-registry) | Merkle registry of TRACE claim anchors, with a normative anchor and inclusion-proof format. | Apache 2.0 (code), CC BY 4.0 (data) | Public. Anchor format: [registry-anchor-v1](https://github.com/agentrust-io/trace-spec/blob/main/spec/registry-anchor-v1.md) | +| [weight-custody-manifest](https://github.com/agentrust-io/weight-custody-manifest) | Weight Custody Manifest: open specification for protecting model weights deployed into customer-controlled or sovereign infrastructure. | Apache 2.0 | Public, v0.28.5 | +| [agentrust-telemetry](https://github.com/agentrust-io/agentrust-telemetry) | Backend-neutral governance telemetry and verifiable evidence for AI-agent runtimes. | MIT | Public, alpha (v0.1.0a5) | ## Principles @@ -74,9 +76,8 @@ agentrust-io is built as an open coalition, not a single-vendor stack; we're inv - **Confirmed founding partner:** Technology Innovation Institute (TII). - **Co-editor seats are open**, including the per-surface vendor annex slots listed in [§4.4 of the TRACE spec](https://github.com/agentrust-io/trace-spec/blob/main/spec/trace-v0.2.md). We name partners here once they have confirmed, not once we have asked. -**Fellows.** OPAQUE funds three to five paid, part-time fellowships on these projects, applications 1 to 29 August 2026. See the callout at the top of this page. - **Contributors & implementers.** You don't need a seat to build with us: +- New to the projects? Pick up a [good first issue](https://github.com/search?q=org%3Aagentrust-io+is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22&type=issues). - If you build an agent framework or governance tooling (LangChain, CrewAI, LlamaIndex, Haystack, PydanticAI, Dify, Cisco AI Defense, or anything else in the ecosystem), bring an adapter. - Bring your platform's attestation root (TEE, GPU, TPM, or managed runtime) as a provider. - Pilot cMCP at your MCP tool-call boundary; run the conformance suite and tell us where it bends. @@ -175,9 +176,9 @@ The eBook calls for policy at four layers (model, agent, tool, request) with fle **[TRACE Registry](https://github.com/agentrust-io/trace-registry)** is an append-only Merkle registry of TRACE claim anchors, built on RFC 6962 (Certificate Transparency) trees so a third party can verify inclusion without trusting the registry operator. Git's immutable commit history is the tamper-evident proof. -**The repository is currently private, and that is a gap rather than a design choice.** Independent verification needs the anchor and inclusion-proof format, which is specified normatively but not yet published. Publishing it is tracked in [trace-spec#111](https://github.com/agentrust-io/trace-spec/issues/111). Until then, treat independent anchor verification as documented-but-not-yet-exercisable by outside parties. +The repository and its anchor and inclusion-proof format ([registry-anchor-v1](https://github.com/agentrust-io/trace-spec/blob/main/spec/registry-anchor-v1.md)) are public, so an outside party can verify an anchor without asking us for anything. -**AGT (Agent Governance Toolkit)** ([microsoft/agent-governance-toolkit](https://github.com/microsoft/agent-governance-toolkit), created by Imran Siddique (Chief Platform Officer, OPAQUE) while at Microsoft and released under the MIT license — 5,100+ stars, 10/10 OWASP Agentic Top 10) provides the runtime governance layer: trust score decay (a score at deployment is meaningless six months later), scope-chain delegation (monotonic narrowing: agent-to-agent delegation with verifiable credentials), and a fleet daemon for multi-agent orchestration. +**AGT (Agent Governance Toolkit)** ([microsoft/agent-governance-toolkit](https://github.com/microsoft/agent-governance-toolkit), created by Imran Siddique (Chief Platform Officer, OPAQUE) while at Microsoft and released under the MIT license — 6,300+ stars; 7 of the OWASP Agentic Top 10 covered fully and 3 partially, self-assessed) provides the runtime governance layer: trust score decay (a score at deployment is meaningless six months later), scope-chain delegation (monotonic narrowing: agent-to-agent delegation with verifiable credentials), and a fleet daemon for multi-agent orchestration. ### Multi-Agent Coordination Governance From f84287772b45d3604837e4d907312ff98884eefc Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Wed, 30 Sep 2026 09:52:05 -0700 Subject: [PATCH 2/2] docs(profile): replace the fellowship callout with a good first issue pointer Signed-off-by: Imran Siddique --- profile/README.md | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/profile/README.md b/profile/README.md index edec0bb..a6b2d08 100644 --- a/profile/README.md +++ b/profile/README.md @@ -31,15 +31,9 @@ governance process define its legal and technical stewardship. See the > **The 2-minute version:** [technical one-pager](technical-one-pager.md). -> ### AgenTrust Fellowship 2026: applications 1 to 29 August +> ### New here? Start with a good first issue > -> OPAQUE is funding **three to five fellows** to work on these projects for six months, part-time at 20 hours per week, paid. The work is here in the open repos; OPAQUE is the employer and funder, and the fellowship exists to put more hands on the open specifications rather than on a product. -> -> For security engineers, distributed systems researchers, AI governance and compliance professionals, and Ph.D. students. Fellows contribute code and specifications and complete a public technical artifact such as a paper or a conference talk. Mentored by Imran Siddique, Chief Platform Officer at OPAQUE and creator of AGT. -> -> Selection is on a **technical proposal**, so start from the work rather than the pitch: [open issues labelled `fellowship`](https://github.com/search?q=org%3Aagentrust-io+is%3Aissue+is%3Aopen+label%3Afellowship&type=issues) across trace-spec, cmcp, cA2A, and agent-manifest are real, currently-open items. Cohort starts September 2026. -> -> [**Read the announcement**](https://www.opaque.co/resources/articles/opaque-announces-applications-for-agentrust-fellowship-to-advance-open-standards-for-verifiable-ai-agents) +> [Open issues labelled `good first issue`](https://github.com/search?q=org%3Aagentrust-io+is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22&type=issues) are scoped to be finished in a sitting or two, and each one names the files involved. When you want something bigger, try [`help wanted`](https://github.com/search?q=org%3Aagentrust-io+is%3Aissue+is%3Aopen+label%3A%22help+wanted%22&type=issues). Comment on an issue to claim it, and a maintainer will review your pull request. ## Projects