#attestation

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.

🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)

in-toto Attestation Framework

Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.

Rust library for building and interacting with AWS Nitro enclaves.

Rust Implementation of CoRIM (Concise Reference Integrity Manifest)

TRACE compliance test suite. Conformance tests for TRACE Certification.

TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard for agentic AI governance.

Repository containing Rust tooling to interact with the Turnkey API

Agent Manifest SDK. Hardware-anchors all 10 artifacts defining an agent at deployment. Python and TypeScript.

Fast Rust engine for detecting and redacting PII and secrets — in prompts, code, and databases. OpenAI-compatible gateway, Postgres scanner, CLI, and WASM. 32× Presidio. Apache-2.0.

Unified CLI for software supply-chain governance / verify GitHub artifact attestations, evaluate OPA/Rego policies, generate SLSA Verification Summary Attestations (VSAs), and manage releases.

该仓库未发布描述。

A rust crate for validating attestation documents provided by Trusted Execution Environments. Current support is limited to AWS Nitro Enclaves.

AI data-isolation verification — prove no user or customer can reach another's data across 13 AI surfaces, with tamper-evident evidence anyone can verify.

Tinfoil JavaScript / TypeScript Client supporting the OpenAI API standard

This repo contains Web3 Implementation of Intel DCAP Quote Verification For Various Ecosystems

Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth

The merge gate for AI-written code, with signed, replayable attestation. Works across Claude Code, Codex, Cursor, and Gemini CLI.

Portable trust receipts for agent workflows. Signed, chained, verifiable.