Attestation Python Packages

cyclonedx-python-lib

Functionality and DataModels of OWASP CycloneDX for Python

bernstein

The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run

in-toto-attestation

in-toto Attestation Framework

vaara

Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.

assay-it

Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.

presence-audit

Given a declaration and a capture, say which declared points are reading, present but not reading, or absent. Domain-free: the vocabulary comes from a vertical you register, and it ships none.

sev-snp-measure

Calculate AMD SEV/SEV-ES/SEV-SNP measurement for confidential computing

treeship-sdk

Portable trust receipts for agent workflows. Signed, chained, verifiable.

agent-evidence-vectors

Conformance corpora and reference verifiers for AI-agent and supply-chain evidence formats

attestplane

Verifiable audit substrate for AI agents — EU AI Act Article 12 ready. Apache 2.0.

langchain-insumer

LangChain toolkit for InsumerAPI, condition-based access infrastructure. 26 tools: attestation, trust profiles, compliance, commerce. Booleans across 37 blockchains, signed twice: ES256 and a post-quantum ML-DSA-65 signature.

treeship-commerce

Portable trust receipts for agent workflows. Signed, chained, verifiable.

factory-line-audit

A bridge from a discrete-manufacturing line to arbiter-engine. Classify declared tags read over OPC UA as reading, present but not reading, or absent, then feed only what is reading to the engine.

proofbundle

Portable evidence for AI work, verifiable offline. Integrity, not truth

groundlens

GroundLens is an execution verification runtime for AI systems and agents. It turns observable AI execution into deterministic, policy-governed evidence that can be independently verified.

house-party-protocol

A local harness for agent teams on Claude Code and Codex CLI: only what they prove counts as done. Waves and lanes split the work, reviewers from another model family judge it, councils keep the dissent that lost, typed decisions with Jev are measured before they are trusted, and approvals are bound to the bytes they approved. No model calls.

engagement-deliverable-audit

Of the deliverables a statement of work declared, which are moving, which are tracked and stalled, and which the tracker has never heard of. Three answers and not two, over presence-audit. An incomplete export withholds every absence rather than report one as missing.

llama-index-tools-insumer

LlamaIndex tool spec for InsumerAPI: wallet auth and condition-based access across 37 blockchains. Booleans signed twice (ES256 and a post-quantum ML-DSA-65 signature), JWKS-verifiable offline. Boolean, not balance.

halo-record

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

portmark

Provider-neutral, capability-secured portable agent reference runtime: signed agent envelopes, host-enforced permits, Wasm capsule execution, and checkpoint-based migration.

tn-proto

TN-Proto encrypted logging for the AI assisted world

aqta-verify-receipt

Open specification and reference verifiers for Seal records: ATTESTATION-v1 for AI model-call decisions, ACTION-v1 for agent actions. Ed25519, canonical JSON, checked offline against a published key.

keylime

A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT

voltage-verify

Bind an Intel TDX quote and an NVIDIA GPU attestation to the workload you meant to run, then verify the bundle without trusting the cloud provider.