#attestation

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.

TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard for agentic AI governance.

🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)

in-toto Attestation Framework

Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.

Rust library for building and interacting with AWS Nitro enclaves.

Rust Implementation of CoRIM (Concise Reference Integrity Manifest)

TRACE compliance test suite. Conformance tests for TRACE Certification.

Repository containing Rust tooling to interact with the Turnkey API

Agent Manifest SDK. Hardware-anchors all 10 artifacts defining an agent at deployment. Python and TypeScript.

Fast Rust engine for detecting and redacting PII and secrets — in prompts, code, and databases. OpenAI-compatible gateway, Postgres scanner, CLI, and WASM. 32× Presidio. Apache-2.0.

Unified CLI for software supply-chain governance / verify GitHub artifact attestations, evaluate OPA/Rego policies, generate SLSA Verification Summary Attestations (VSAs), and manage releases.

El repositorio no publica descripción.

A rust crate for validating attestation documents provided by Trusted Execution Environments. Current support is limited to AWS Nitro Enclaves.

AI data-isolation verification — prove no user or customer can reach another's data across 13 AI surfaces, with tamper-evident evidence anyone can verify.

Tinfoil JavaScript / TypeScript Client supporting the OpenAI API standard

This repo contains Web3 Implementation of Intel DCAP Quote Verification For Various Ecosystems

Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth

The merge gate for AI-written code, with signed, replayable attestation. Works across Claude Code, Codex, Cursor, and Gemini CLI.

Portable trust receipts for agent workflows. Signed, chained, verifiable.