agentrust-trace-tests 0.1.0__tar.gz → 0.3.0__tar.gz

agentrust_trace_tests-0.3.0/.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Default owners for all files
+* @agentrust-io/maintainers
+
+# CI/CD workflow changes
+.github/workflows/ @agentrust-io/maintainers

agentrust_trace_tests-0.3.0/.github/dependabot.yml

@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5

{agentrust_trace_tests-0.1.0 → agentrust_trace_tests-0.3.0}/.github/workflows/ci.yml

@@ -16,8 +16,8 @@ jobs:
       matrix:
         python-version: ["3.11", "3.12", "3.13"]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5.3.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install package and test deps

agentrust_trace_tests-0.3.0/.github/workflows/codeql.yml

@@ -0,0 +1,43 @@
+name: CodeQL
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  schedule:
+    - cron: '15 3 * * 0'
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
+jobs:
+  analyze:
+    name: Analyze (python)
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: python
+          queries: +security-extended
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v4
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        continue-on-error: true
+        with:
+          category: /language:python

{agentrust_trace_tests-0.1.0 → agentrust_trace_tests-0.3.0}/.github/workflows/contributor-check.yml

@@ -27,7 +27,7 @@ jobs:
       github.actor != 'imran-siddique'
     steps:
       - name: Checkout org action
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           repository: agentrust-io/.github
           ref: main

agentrust_trace_tests-0.3.0/.github/workflows/docs.yml

@@ -0,0 +1,66 @@
+name: Docs
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "docs/**"
+      - "mkdocs.yml"
+      - "requirements-docs.txt"
+      - "README.md"
+      - "CHANGELOG.md"
+      - "CONTRIBUTING.md"
+      - "CNAME"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: docs-deploy
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    name: Build and deploy docs
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+          cache: pip
+
+      - name: Install docs dependencies
+        run: |
+          pip install -r requirements-docs.txt
+          pip install -e "."
+
+      - name: Configure git for gh-deploy
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Assemble docs build directory
+        run: |
+          BUILD=.docs_build
+          mkdir -p $BUILD
+
+          if [ -d docs ]; then cp -r docs $BUILD/docs; fi
+
+          for fname in README.md CHANGELOG.md CONTRIBUTING.md CNAME; do
+            if [ -f "$fname" ]; then cp "$fname" "$BUILD/$fname"; fi
+          done
+
+          echo "Build dir contains $(find $BUILD -type f | wc -l) files"
+
+      - name: Generate build config
+        run: |
+          sed 's|^docs_dir: \.$|docs_dir: .docs_build|' mkdocs.yml > .mkdocs_build.yml
+
+      - name: Build and deploy to GitHub Pages
+        run: mkdocs gh-deploy --force --clean --config-file .mkdocs_build.yml

{agentrust_trace_tests-0.1.0 → agentrust_trace_tests-0.3.0}/.github/workflows/release.yml

@@ -12,7 +12,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:

{agentrust_trace_tests-0.1.0 → agentrust_trace_tests-0.3.0}/.github/workflows/require-maintainer-approval.yml

@@ -22,7 +22,7 @@ jobs:
     if: github.event.pull_request.base.ref == 'main'
     steps:
       - name: Check for maintainer approval
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const MAINTAINERS = ['imran-siddique'];

agentrust_trace_tests-0.3.0/.github/workflows/scorecard.yml

@@ -0,0 +1,40 @@
+name: OpenSSF Scorecard
+
+on:
+  branch_protection_rule:
+  schedule:
+    - cron: '30 4 * * 1'
+  push:
+    branches:
+      - main
+
+permissions: read-all
+
+jobs:
+  scorecard:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      id-token: write
+      contents: read
+      actions: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+
+      - name: Run Scorecard
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+        with:
+          results_file: scorecard-results.sarif
+          results_format: sarif
+          # publish_results requires a public repo; flip to true after the
+          # 2026-06-23 public launch.
+          publish_results: false
+
+      - name: Upload SARIF
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: scorecard-results.sarif

agentrust_trace_tests-0.3.0/CHANGELOG.md

@@ -0,0 +1,20 @@
+# Changelog
+
+## Unreleased
+
+## v0.3.0 — 2026-07-21
+
+- `azure-cvm-sev-snp` platform accepted (`runtime.platform`): Azure confidential VMs run SEV-SNP behind a Hyper-V paravisor (vTPM-rooted). Added to the bundled schema enum and the TR-RTE valid-platform set so Azure TRACE records pass conformance. Matches `agentrust-trace>=0.4`.
+
+## v0.2.0 — 2026-06-19
+
+- DID subject support: `subject` now accepts `did:` URIs in addition to `spiffe://`.
+- Embedded signature verification: plain TRACE records signed with `agentrust-trace sign_record()` are now cryptographically verified at all levels.
+- SLSA Level 0: `build_provenance.slsa_level: 0` is now valid for software-only / development records.
+- Software-only platform: `runtime.platform: "software-only"` accepted at Level 0.
+- Private key leak detection: TR-SIG now fails records that embed a private key (`d` member) in `cnf.jwk`.
+
+## v0.1.0 — 2026-05-01
+
+- Initial release with 7 test modules: TR-ENV, TR-SIG, TR-RTE, TR-POL, TR-TXN, TR-ANC, TR-SCA.
+- Conformance levels 0, 1, 2.

agentrust_trace_tests-0.3.0/CNAME

@@ -0,0 +1 @@
+tests.agentrust-io.com

agentrust_trace_tests-0.3.0/PKG-INFO

@@ -0,0 +1,102 @@
+Metadata-Version: 2.4
+Name: agentrust-trace-tests
+Version: 0.3.0
+Summary: TRACE conformance test suite
+Project-URL: Homepage, https://github.com/agentrust-io/trace-tests
+Project-URL: Repository, https://github.com/agentrust-io/trace-tests
+Project-URL: Documentation, https://github.com/agentrust-io/trace-tests#readme
+Project-URL: Bug Tracker, https://github.com/agentrust-io/trace-tests/issues
+Author: agentrust.io
+License: Apache-2.0
+License-File: LICENSE
+Keywords: ai-agents,attestation,conformance,provenance,trace
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: >=3.11
+Requires-Dist: click>=8.1
+Requires-Dist: cryptography>=42
+Requires-Dist: jsonschema>=4.23
+Provides-Extra: dev
+Requires-Dist: bandit; extra == 'dev'
+Requires-Dist: mypy; extra == 'dev'
+Requires-Dist: pip-audit; extra == 'dev'
+Requires-Dist: pytest-cov; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff; extra == 'dev'
+Provides-Extra: test
+Requires-Dist: pytest-cov; extra == 'test'
+Requires-Dist: pytest>=8.0; extra == 'test'
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <img src="docs/assets/icon.svg" width="96" height="96" alt="TRACE Tests"/>
+</p>
+
+# TRACE Conformance Test Suite
+
+### Verify your TRACE implementation before shipping
+
+<p align="center">
+  <a href="https://tests.agentrust-io.com">
+    <img src="https://img.shields.io/badge/%F0%9F%93%96_Full_Documentation-tests.agentrust--io.com-C17817?style=for-the-badge&logoColor=white" alt="Full Documentation" height="40">
+  </a>
+</p>
+
+<p align="center">
+  <a href="docs/quickstart.md">Quick Start</a> &nbsp;|&nbsp;
+  <a href="docs/modules.md">Test Modules</a> &nbsp;|&nbsp;
+  <a href="docs/levels.md">Conformance Levels</a> &nbsp;|&nbsp;
+  <a href="CHANGELOG.md">Changelog</a>
+</p>
+
+[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)
+[![TRACE Spec](https://img.shields.io/badge/TRACE-Spec_v0.2-0ea5e9)](https://github.com/agentrust-io/trace-spec)
+[![Tests](https://img.shields.io/badge/Conformance_Tests-7_modules-green)]()
+[![CI](https://github.com/agentrust-io/trace-tests/actions/workflows/ci.yml/badge.svg)](https://github.com/agentrust-io/trace-tests/actions/workflows/ci.yml)
+[![Discord](https://img.shields.io/badge/Discord-Join-5865F2?logo=discord&logoColor=white&style=flat)](https://discord.gg/9JWNpH7E)
+
+> **Test suite v0.2.** Tracks [TRACE Spec v0.2](https://github.com/agentrust-io/trace-spec).
+
+Conformance tests for TRACE — Trust Runtime Attestation and Compliance Evidence. Run this suite against your implementation to verify it meets the spec before claiming TRACE compliance.
+
+Seven test modules covering the full specification: envelope structure, signature algorithms, TEE runtime claims, policy binding, tool-call transcripts, SCITT transparency anchoring, and supply chain provenance.
+
+## Quick start
+
+```bash
+pip install trace-tests
+trace-tests verify --record path/to/trust-record.jwt --level 1
+```
+
+## Test modules
+
+| Module | ID | Tests |
+|---|---|---|
+| Envelope | `TR-ENV` | EAT structure, required fields, `iat` validity |
+| Signature | `TR-SIG` | ES256/ES384/EdDSA, key binding, chain |
+| Runtime | `TR-RTE` | TEE platform, measurement format, RIM URI |
+| Policy | `TR-POL` | Bundle hash, enforcement mode, TEE binding |
+| Transcript | `TR-TXN` | Tool-call transcript hash binding (Phase 2+) |
+| Transparency | `TR-ANC` | SCITT receipt URI, inclusion proof |
+| Provenance | `TR-SCA` | SLSA level, builder URI, digest format |
+
+## Resources
+
+| | |
+|---|---|
+| 📖 Full documentation | [tests.agentrust-io.com](https://tests.agentrust-io.com) |
+| 📄 TRACE Specification | [trace-spec](https://github.com/agentrust-io/trace-spec) |
+| 🗂 Test schemas | [schemas/](schemas/) |
+| 💬 Discussions | [GitHub Discussions](https://github.com/orgs/agentrust-io/discussions) |
+| 📋 Changelog | [CHANGELOG.md](CHANGELOG.md) |
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). New test cases must include a normative spec reference, a positive case, and a negative case with a structured error code (`TR-<MODULE>-<NNN>`).

agentrust_trace_tests-0.3.0/PRIVACY.md

@@ -0,0 +1,9 @@
+# Privacy
+
+agentrust-trace-tests (the TRACE conformance suite) collects and transmits no personal data.
+
+It runs locally as a command-line tool. It processes only the inputs you give it, entirely on your machine, and sends no telemetry, analytics, or usage data to agentrust-io, OPAQUE, or any third party. There is no account, login, or tracking, and no cookies or background network calls.
+
+It reads only the record file you pass on the command line and makes no outbound calls.
+
+Uninstalling removes it completely. Questions or corrections: https://github.com/agentrust-io/trace-tests/issues

agentrust_trace_tests-0.3.0/README.md

@@ -0,0 +1,65 @@
+<p align="center">
+  <img src="docs/assets/icon.svg" width="96" height="96" alt="TRACE Tests"/>
+</p>
+
+# TRACE Conformance Test Suite
+
+### Verify your TRACE implementation before shipping
+
+<p align="center">
+  <a href="https://tests.agentrust-io.com">
+    <img src="https://img.shields.io/badge/%F0%9F%93%96_Full_Documentation-tests.agentrust--io.com-C17817?style=for-the-badge&logoColor=white" alt="Full Documentation" height="40">
+  </a>
+</p>
+
+<p align="center">
+  <a href="docs/quickstart.md">Quick Start</a> &nbsp;|&nbsp;
+  <a href="docs/modules.md">Test Modules</a> &nbsp;|&nbsp;
+  <a href="docs/levels.md">Conformance Levels</a> &nbsp;|&nbsp;
+  <a href="CHANGELOG.md">Changelog</a>
+</p>
+
+[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)
+[![TRACE Spec](https://img.shields.io/badge/TRACE-Spec_v0.2-0ea5e9)](https://github.com/agentrust-io/trace-spec)
+[![Tests](https://img.shields.io/badge/Conformance_Tests-7_modules-green)]()
+[![CI](https://github.com/agentrust-io/trace-tests/actions/workflows/ci.yml/badge.svg)](https://github.com/agentrust-io/trace-tests/actions/workflows/ci.yml)
+[![Discord](https://img.shields.io/badge/Discord-Join-5865F2?logo=discord&logoColor=white&style=flat)](https://discord.gg/9JWNpH7E)
+
+> **Test suite v0.2.** Tracks [TRACE Spec v0.2](https://github.com/agentrust-io/trace-spec).
+
+Conformance tests for TRACE — Trust Runtime Attestation and Compliance Evidence. Run this suite against your implementation to verify it meets the spec before claiming TRACE compliance.
+
+Seven test modules covering the full specification: envelope structure, signature algorithms, TEE runtime claims, policy binding, tool-call transcripts, SCITT transparency anchoring, and supply chain provenance.
+
+## Quick start
+
+```bash
+pip install trace-tests
+trace-tests verify --record path/to/trust-record.jwt --level 1
+```
+
+## Test modules
+
+| Module | ID | Tests |
+|---|---|---|
+| Envelope | `TR-ENV` | EAT structure, required fields, `iat` validity |
+| Signature | `TR-SIG` | ES256/ES384/EdDSA, key binding, chain |
+| Runtime | `TR-RTE` | TEE platform, measurement format, RIM URI |
+| Policy | `TR-POL` | Bundle hash, enforcement mode, TEE binding |
+| Transcript | `TR-TXN` | Tool-call transcript hash binding (Phase 2+) |
+| Transparency | `TR-ANC` | SCITT receipt URI, inclusion proof |
+| Provenance | `TR-SCA` | SLSA level, builder URI, digest format |
+
+## Resources
+
+| | |
+|---|---|
+| 📖 Full documentation | [tests.agentrust-io.com](https://tests.agentrust-io.com) |
+| 📄 TRACE Specification | [trace-spec](https://github.com/agentrust-io/trace-spec) |
+| 🗂 Test schemas | [schemas/](schemas/) |
+| 💬 Discussions | [GitHub Discussions](https://github.com/orgs/agentrust-io/discussions) |
+| 📋 Changelog | [CHANGELOG.md](CHANGELOG.md) |
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). New test cases must include a normative spec reference, a positive case, and a negative case with a structured error code (`TR-<MODULE>-<NNN>`).

agentrust_trace_tests-0.3.0/docs/error-codes.md

@@ -0,0 +1,57 @@
+# Error Codes
+
+All TRACE test failures emit a structured error code of the form `TR-<MODULE>-<NNN>`.
+
+## TR-ENV — Envelope
+
+| Code | Description | How to fix |
+|------|-------------|------------|
+| TR-ENV-001 | Missing or invalid `eat_profile` URI | Set `eat_profile` to `"tag:agentrust.io,2026:trace-v0.1"` |
+| TR-ENV-002 | `iat` is missing, not an integer, or out of range | Set `iat` to a Unix timestamp integer (e.g. `int(time.time())`) |
+| TR-ENV-003 | `subject` does not match SPIFFE URI or DID pattern | Use `spiffe://<trust-domain>/<path>` or a `did:` URI |
+| TR-ENV-004 | One or more required fields are absent | Add the missing field(s); check the [Schema Reference](https://trace.agentrust-io.com/schema) for the full required set |
+
+## TR-SIG — Signature
+
+| Code | Description | How to fix |
+|------|-------------|------------|
+| TR-SIG-001 | Signature algorithm is not Ed25519 | Generate an Ed25519 key (`generate_key()`) and re-sign; ES256 and RS256 are not accepted |
+| TR-SIG-002 | `cnf.jwk` missing or malformed | Populate `cnf.jwk` with the OKP public key `{"kty":"OKP","crv":"Ed25519","x":"..."}` — `sign_record()` does this automatically |
+| TR-SIG-003 | Signature verification failed | Re-sign the record with `sign_record(record, key)`; the record fields must not have changed after signing |
+| TR-SIG-004 | Private key material (`d` member) found in `cnf.jwk` | Remove the `d` field before embedding the JWK; `key_to_jwk()` returns the public-only form |
+
+## TR-RTE — Runtime
+
+| Code | Description | How to fix |
+|------|-------------|------------|
+| TR-RTE-001 | `runtime.platform` is not a recognised TEE enum value | Use one of: `software-only`, `tpm2`, `sev-snp`, `tdx`, `opaque` |
+| TR-RTE-002 | `runtime.measurement` is not a valid `sha256:` digest | Provide a 64-character hex digest prefixed with `sha256:`; for Level 0 all-zeros is conventional |
+| TR-RTE-003 | RIM URI present but does not resolve to a valid reference image | Remove `runtime.rim_uri` if not using a RIM, or ensure the URI returns a valid reference manifest over HTTPS |
+
+## TR-POL — Policy
+
+| Code | Description | How to fix |
+|------|-------------|------------|
+| TR-POL-001 | `policy.bundle_hash` is not a valid `sha256:` digest | Compute `sha256:` + hex digest of your Cedar policy bundle bytes |
+| TR-POL-002 | `policy.enforcement_mode` is not `enforce`, `advisory`, or `silent` | Replace `"strict"` or `"monitor"` with `"enforce"`, `"advisory"`, or `"silent"` |
+
+## TR-TXN — Transcript
+
+| Code | Description | How to fix |
+|------|-------------|------------|
+| TR-TXN-001 | `tool_transcript.hash` is not a valid `sha256:` digest | Set `tool_transcript.hash` to `sha256:` + 64 hex chars of the Merkle root of the tool call log |
+| TR-TXN-002 | `tool_transcript.call_count` is negative or not an integer | Set `tool_transcript.call_count` to a non-negative integer (0 is valid for sessions with no tool calls) |
+
+## TR-ANC — Transparency
+
+| Code | Description | How to fix |
+|------|-------------|------------|
+| TR-ANC-001 | `transparency` field missing or empty | Submit the record to a SCITT transparency log and set `transparency` to the returned receipt URI |
+| TR-ANC-002 | `transparency` URI does not use `https://` scheme | Only `https://` URIs are accepted; update the URI or use the agentrust registry at `https://registry.agentrust.io` |
+
+## TR-SCA — Provenance
+
+| Code | Description | How to fix |
+|------|-------------|------------|
+| TR-SCA-001 | `build_provenance.slsa_level` is not 0–4 | Set `build_provenance.slsa_level` to an integer 0–4 matching your SLSA build level |
+| TR-SCA-002 | `build_provenance.digest` is not a valid `sha256:` digest | Set `build_provenance.digest` to `sha256:` + 64 hex chars of the container image or artifact digest |

agentrust_trace_tests-0.3.0/docs/levels.md

@@ -0,0 +1,167 @@
+# Conformance Levels
+
+TRACE defines three conformance levels. Higher levels require all lower-level modules plus additional ones.
+
+| Level | Required Modules | Use Case |
+|-------|-----------------|----------|
+| **0** | TR-ENV, TR-SIG, TR-POL | Software-only development and staging |
+| **1** | Level 0 + TR-RTE, TR-SCA | Production TEE-attested records |
+| **2** | Level 1 + TR-TXN, TR-ANC | Full records with transparency anchoring |
+
+## Level 0 — Software-only
+
+Level 0 records are signed with a software key. The `runtime.platform` must be `"software-only"`. All-zero measurement is conventional for development use.
+
+**Minimum conformant Level 0 record:**
+
+```json
+{
+  "eat_profile": "tag:agentrust.io,2026:trace-v0.1",
+  "iat": 1750000000,
+  "subject": "spiffe://trust.example.org/agent/my-agent",
+  "model": {
+    "provider": "anthropic",
+    "model_id": "claude-sonnet-4-6",
+    "version": "20251001"
+  },
+  "runtime": {
+    "platform": "software-only",
+    "measurement": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  },
+  "policy": {
+    "bundle_hash": "sha256:b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3",
+    "enforcement_mode": "enforce"
+  },
+  "data_class": "internal",
+  "build_provenance": {
+    "slsa_level": 1,
+    "digest": "sha256:e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6"
+  },
+  "appraisal": {
+    "status": "none",
+    "verifier": "https://verifier.example.org"
+  },
+  "transparency": "https://registry.agentrust.io/claim/placeholder",
+  "cnf": {
+    "jwk": {
+      "kty": "OKP",
+      "crv": "Ed25519",
+      "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+    }
+  },
+  "signature": "eyJhbGciOiJFZERTQSJ9..."
+}
+```
+
+**Modules tested:** TR-ENV, TR-SIG, TR-POL
+
+**What causes a Level 0 failure:**
+
+- `eat_profile` missing or wrong value — TR-ENV-001
+- `runtime.platform` is a TEE value (e.g. `sev-snp`) but Level 0 is requested — TR-RTE-001 does not apply, but TR-ENV still checks the envelope
+- `policy.enforcement_mode` is `"strict"` or `"monitor"` — TR-POL-002
+- `cnf.jwk` missing or contains private key material (`d` field) — TR-SIG-002, TR-SIG-004
+- Signature does not verify against `cnf.jwk` — TR-SIG-003
+
+---
+
+## Level 1 — TEE Attestation
+
+Level 1 adds hardware attestation. `runtime.platform` must be one of: `tpm2`, `sev-snp`, `tdx`, `opaque`. The measurement must be non-zero. `appraisal.status` must be `"affirming"`.
+
+**Minimum conformant Level 1 record** (changes from Level 0 in bold context):
+
+```json
+{
+  "eat_profile": "tag:agentrust.io,2026:trace-v0.1",
+  "iat": 1750000000,
+  "subject": "spiffe://trust.example.org/agent/my-agent",
+  "model": {
+    "provider": "anthropic",
+    "model_id": "claude-sonnet-4-6",
+    "version": "20251001"
+  },
+  "runtime": {
+    "platform": "sev-snp",
+    "measurement": "sha256:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2"
+  },
+  "policy": {
+    "bundle_hash": "sha256:b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3",
+    "enforcement_mode": "enforce"
+  },
+  "data_class": "confidential",
+  "build_provenance": {
+    "slsa_level": 2,
+    "digest": "sha256:e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6"
+  },
+  "appraisal": {
+    "status": "affirming",
+    "verifier": "https://verifier.agentrust.io"
+  },
+  "transparency": "https://registry.agentrust.io/claim/placeholder",
+  "cnf": {
+    "jwk": {
+      "kty": "OKP",
+      "crv": "Ed25519",
+      "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"
+    }
+  },
+  "signature": "eyJhbGciOiJFZERTQSJ9..."
+}
+```
+
+**Modules tested:** TR-ENV, TR-SIG, TR-POL, TR-RTE, TR-SCA
+
+**What causes a Level 1 failure over Level 0:**
+
+- `runtime.platform` is `"software-only"` — TR-RTE-001
+- `runtime.measurement` is all zeros — TR-RTE-002 (all-zero is invalid at Level 1)
+- `build_provenance` missing entirely — TR-SCA-001, TR-SCA-002
+- `appraisal.status` is `"none"` — while not a hard schema violation, a conformant Level 1 record should carry `"affirming"`
+
+---
+
+## Level 2 — Transparency Anchoring
+
+Level 2 adds tool transcript and transparency anchor requirements. The `transparency` field must be a resolvable HTTPS URI pointing to a SCITT receipt, not the placeholder value.
+
+**Minimum conformant Level 2 record** (additional fields over Level 1):
+
+```json
+{
+  "tool_transcript": {
+    "hash": "sha256:c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4",
+    "call_count": 4
+  },
+  "transparency": "https://registry.agentrust.io/claim/01J3XKWP4NQZ8R5HT6YD7VMBCE",
+  "anchor": {
+    "log_id": "https://registry.agentrust.io",
+    "leaf_hash": "sha256:f4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5"
+  }
+}
+```
+
+**Modules tested:** TR-ENV, TR-SIG, TR-POL, TR-RTE, TR-SCA, TR-TXN, TR-ANC
+
+**What causes a Level 2 failure over Level 1:**
+
+- `tool_transcript.hash` missing or not a valid `sha256:` digest — TR-TXN-001
+- `tool_transcript.call_count` negative or not an integer — TR-TXN-002
+- `transparency` is the placeholder URI, missing, or not HTTPS — TR-ANC-001
+- `anchor.leaf_hash` missing or not a valid `sha256:` digest — TR-ANC-002
+
+---
+
+## Choosing a level
+
+- Use **Level 0** during development. Records can use `runtime.platform: "software-only"` and `build_provenance.slsa_level: 0`.
+- Use **Level 1** for production deployments in a TEE (AMD SEV-SNP, Intel TDX, NVIDIA H100).
+- Use **Level 2** when you need an auditable, tamper-evident log with a SCITT transparency service.
+
+The certification program (launching 2027) will require Level 1 at minimum.
+
+## Related
+
+- [Error Codes](error-codes.md) — every TR-* error with description and fix
+- [Test Modules](modules/index.md) — per-module test lists with positive and negative cases
+- [TRACE Trust Levels](https://trace.agentrust-io.com/trust-levels) — full specification of what each level proves

agentrust_trace_tests-0.3.0/docs/modules/tr-anc.md

@@ -0,0 +1,10 @@
+# TR-ANC — Transparency
+
+Tests transparency anchoring via SCITT.
+
+## Required at Level 2+
+
+| Test ID | Description | Positive Case | Negative Case |
+|---------|-------------|---------------|---------------|
+| TR-ANC-001 | `transparency` is a non-empty URI | `https://transparency.example/entries/abc123` | missing field, empty string |
+| TR-ANC-002 | URI scheme is `https://` | `https://` prefix | `http://`, bare path, `ipfs://` |