Use it
Start with runnable demos, reference implementations, schemas, and conformance tests. Move from evaluation to a production pilot without waiting for a proprietary platform.
Open Technology · Shared Stewardship · Real Adoption
AgenTrust brings developers, researchers, operators, and enterprises together to turn open governance technology into infrastructure people can adopt and sustain. Build with the specifications, correlate governance evidence with portable telemetry, prove interoperability with the test suites, and help maintain the ecosystem.
Binds identity, code, model, tools, policy, and provenance before the agent runs.
CoSAI WS4 → OASIS Open · Phase 1 review openAttests the runtime and evaluates every MCP tool call against policy inside a TEE.
Proposed → AAIF · contribution pathCarries attenuated authority and attested provenance across every agent-to-agent hop.
Proposed → AAIF · contribution pathEmits portable signed evidence that anyone can verify without trusting the operator.
TRACE Specification, a Series of LF Projects, LLCOne architecture, neutral standards homes, interoperable by design.
Start with runnable demos, reference implementations, schemas, and conformance tests. Move from evaluation to a production pilot without waiting for a proprietary platform.
Bring implementation feedback, integrations, threat models, deployment evidence, and research. Public repositories and issue trackers make the contribution path visible.
Grow maintainers, review contributions, document adoption patterns, and share stewardship across organizations so critical governance infrastructure outlives any one team.
Every organization named here has a traceable relationship through a public announcement, open-source repository, or explicit AgenTrust partner statement. The label on each card states that relationship precisely; sponsorship, partnership, contribution, and adoption are distinct relationships, and none implies blanket endorsement of the full stack.
OPAQUE provides funding, engineering time, infrastructure, and confidential-computing contributions. Sponsorship does not confer ownership of AgenTrust projects or governance authority over their technical decisions.
Review the public project record ↗Microsoft hosts the Agent Governance Toolkit, the open runtime-governance foundation that the AgenTrust trust chain builds on.
View the repository ↗TII is the confirmed AgenTrust founding partner anchoring the work in sovereign-AI deployment requirements.
Read the OPAQUE announcement ↗AMD is a founding partner of AgenTrust. AMD and OPAQUE published a joint implementation blueprint for hardware-backed Confidential AI, and the implementation verifies SEV-SNP report signatures to the AMD root (VCEK then ASK then ARK).
Read the joint white paper ↗Intel is a founding partner of AgenTrust. The implementation verifies Intel TDX DCAP v4 quotes to the pinned Intel SGX Root CA, hardware-validated on GCP C3.
Review the public implementation record ↗OPAQUE publicly documents how ServiceNow used its Confidential AI Platform to reduce commission-inquiry workflows from days to seconds.
View the OPAQUE customer story ↗ATF's author publicly supports positioning AGT as a reference implementation and invited implementation input into the conformance specification.
Read the public collaboration thread ↗AgenTrust develops in public through open repositories, reviewable proposals, implementation evidence, and conformance testing. The goal is not simply to publish specifications: it is to create a contributor community capable of operating, improving, and stewarding the technology.
AgenTrust
Architecture, implementation, conformance, and maintainer development.
Named organizational partner for community governance, ecosystem adoption, and long-term sustainability. Individual committee appointments will be published only after confirmation.
Adopter, maintainer, research, and public-interest representation will be added as the steering model is formalized.
The fellowship will turn AgenTrust implementation patterns into practical, public playbooks. Each playbook will map governance controls and TRACE evidence to an authoritative framework without claiming certification or legal compliance.
A six-month paid, part-time fellowship (20 hours per week) for three to five emerging maintainers of open infrastructure for verifiable AI systems. It is aimed at security engineers, distributed systems researchers, AI governance and compliance professionals, and Ph.D. students. Fellows ship code, tests, integrations, documentation, and adoption guidance across AgenTrust projects while learning how to review contributions and sustain an open technical community. Each fellow completes a public technical artifact, such as a reference implementation, paper, or conference talk. Mentored by Imran Siddique, Chief Platform Officer at OPAQUE and creator of the Agent Governance Toolkit.
Applications are open through 29 August 2026, with the cohort starting in September. Selection is based on a technical proposal describing what you plan to contribute, so it is worth looking at the work before you apply: issues labelled fellowship across trace-spec, cmcp, cA2A, and agent-manifest are real, currently-open work rather than exercises.
AgenTrust is an open ecosystem for verifiable AI agent governance. It connects reusable technology with the people and practices needed to adopt it: maintainers, implementers, researchers, enterprise operators, conformance testing, integration guidance, and transparent community governance.
Four specifications work together, in the order an agent actually runs. Agent Manifest declares who an agent is and what it is allowed to do. Confidential MCP (cMCP) enforces that by evaluating tool calls against policy inside a Trusted Execution Environment, so tool-call plaintext is not readable from the host. Confidential A2A (cA2A) carries attenuated authority and attested provenance when work is delegated to another agent. TRACE proves what actually happened with signed receipts, hardware-attested when the gateway runs in a TEE. All four are open source, under Apache 2.0 for Agent Manifest, MIT for cMCP and cA2A, and CC BY 4.0 plus Apache 2.0 for TRACE.
AgenTrust Telemetry is the integration layer across that chain. It gives runtimes a common, metadata-only contract for governance facts, projects those facts into caller-owned OpenTelemetry, and can turn a complete durable evidence set into TRACE. It does not replace a policy engine, collector, observability backend, or dashboard.