Open-source evidence layer for AI governance. Gates every AI agent tool call against your policy and writes a hash-chained execution record an auditor verifies offline, without trusting the operator. Root-agnostic, and binds to a TPM 2.0 or SEV-SNP hardware root when present. Your environment, no SaaS, no telemetry. AGPL-3.0.
Confidential, distributed PyTorch training for the Mercury Protocol off-chain node — a Gramine SGX enclave app and a package for synchronous data-parallel training over an untrusted transport.