From b3478250dbf446ece4b4a1296d86724bd5ad59c4 Mon Sep 17 00:00:00 2001 From: Val Rukhaylo Date: Fri, 2 Oct 2026 16:17:55 +0000 Subject: [PATCH 1/2] Add Frequency Agent Execution Assurance integration --- README.md | 1 + .../README.md | 38 +++++++++++++++++++ .../integration.yaml | 35 +++++++++++++++++ marketplace/catalog.json | 26 ++++++++++++- 4 files changed, 99 insertions(+), 1 deletion(-) create mode 100644 integrations/altrudev-frequency-agent-execution-assurance/README.md create mode 100644 integrations/altrudev-frequency-agent-execution-assurance/integration.yaml diff --git a/README.md b/README.md index f6956ae4..7feadde4 100644 --- a/README.md +++ b/README.md @@ -42,6 +42,7 @@ TRACE only works as a standard if it is genuinely neutral. Integrations are list | [cA2A Cross-Operator Delegation](integrations/agentrust-ca2a-cross-operator/) | agentrust-io | ca2a | community | | [Confidential Workflow Acceptance Harness](integrations/agentrust-confidential-workflow-harness/) | agentrust-io | cmcp, ca2a | community | | [Agent Replay](integrations/altrudev-agent-replay/) | Altru.dev | trace | verified | +| [Frequency Agent Execution Assurance](integrations/altrudev-frequency-agent-execution-assurance/) | Altru.dev | trace | community | | [Bernstein MCP verifier](integrations/bernstein-mcp/) | Bernstein | trace | verified | | [CHAP](integrations/chap/) | agentrust-io | trace | verified | | [AI Agent Incident Register](integrations/companyscope-incident-register/) | CompanyScope | agent-manifest | verified | diff --git a/integrations/altrudev-frequency-agent-execution-assurance/README.md b/integrations/altrudev-frequency-agent-execution-assurance/README.md new file mode 100644 index 00000000..ca6aedfd --- /dev/null +++ b/integrations/altrudev-frequency-agent-execution-assurance/README.md @@ -0,0 +1,38 @@ +# Frequency Agent Execution Assurance integration with TRACE + +Frequency Agent Execution Assurance consumes standalone TRACE Trust Records as externally supplied evidence. The public adapter verifies the record with a caller-supplied trusted issuer key, fingerprints the exact record and key files, and projects selected verified fields into a claim-limited Frequency external-evidence record. + +## Run it + +Against the public v0.1.0 release: + +```bash +git clone --branch v0.1.0 --depth 1 \ + https://github.com/altrudev/Frequency-Agent-Execution-Assurance.git +cd Frequency-Agent-Execution-Assurance + +python3 -m venv .venv +source .venv/bin/activate +python -m pip install -r adapters/agentrust-trace/requirements.txt + +python adapters/agentrust-trace/demo.py +pytest -q adapters/agentrust-trace/tests +``` + +The adapter uses `agentrust-trace==0.10.0`. Its tests exercise the released verifier with a valid signed record, a tampered record, and a wrong caller-supplied trusted key. + +## What is verified + +A reviewer can reproduce that: + +- a valid standalone TRACE Trust Record verifies with an independently supplied JWK; +- the exact TRACE record and trusted-key files are SHA-256 fingerprinted in the projection; +- tampering fails closed; +- a wrong trusted key fails closed; +- the projection records an explicit claim ceiling rather than promoting TRACE verification into an external-effect claim. + +## What this integration does not claim + +The public adapter does not expose Frequency Core and does not authorize or execute an agent action. It does not independently verify hardware attestation, transparency-registry inclusion, the content behind a transcript hash, or any external state mutation. + +The Apache-2.0 license applies to the public TRACE adapter directory. Frequency Core and the broader enforcement product remain separately licensed proprietary software. diff --git a/integrations/altrudev-frequency-agent-execution-assurance/integration.yaml b/integrations/altrudev-frequency-agent-execution-assurance/integration.yaml new file mode 100644 index 00000000..1762d347 --- /dev/null +++ b/integrations/altrudev-frequency-agent-execution-assurance/integration.yaml @@ -0,0 +1,35 @@ +name: Frequency Agent Execution Assurance +vendor: Altru.dev + +integrates_with: + - trace + +description: >- + Verifies standalone TRACE Trust Records with a caller-supplied trusted key and projects bounded verified fields into Frequency's public external-evidence contract. + +maintainer: + github: altrudev + +repository: https://github.com/altrudev/Frequency-Agent-Execution-Assurance + +license: Apache-2.0 +tier: community + +marketplace: + category: Security & policy + mark: FQ + keywords: + - agent-execution + - generated-artifacts + - evidence + - TRACE + - policy + +trace_roles: + - record-consumer + +trace_conformance_level: 0 + +tested_against: + agentrust-trace: "0.10.0" + agentrust-trace-tests: "0.5.1" diff --git a/marketplace/catalog.json b/marketplace/catalog.json index 46e14924..15812225 100644 --- a/marketplace/catalog.json +++ b/marketplace/catalog.json @@ -1,6 +1,6 @@ { "catalog_version": 1, - "count": 42, + "count": 43, "integrations": [ { "name": "Claude Code", @@ -501,6 +501,30 @@ ".epi" ] }, + { + "name": "Frequency Agent Execution Assurance", + "package_name": "Frequency Agent Execution Assurance", + "vendor": "Altru.dev", + "description": "Verifies standalone TRACE Trust Records with a caller-supplied trusted key and projects bounded verified fields into Frequency's public external-evidence contract.", + "path": "integrations/altrudev-frequency-agent-execution-assurance", + "url": "https://github.com/agentrust-io/integrations/tree/main/integrations/altrudev-frequency-agent-execution-assurance", + "homepage": null, + "repository": "https://github.com/altrudev/Frequency-Agent-Execution-Assurance", + "tier": "community", + "stack": [ + "TRACE" + ], + "category": "Security & policy", + "mark": "FQ", + "featured": null, + "keywords": [ + "agent-execution", + "generated-artifacts", + "evidence", + "TRACE", + "policy" + ] + }, { "name": "GCP Confidential Space", "package_name": "WCM GCP Confidential Space", From 6806934f021782d11eb0e4ce889530430f5b872c Mon Sep 17 00:00:00 2001 From: Valentyn Rukhaylo Date: Fri, 2 Oct 2026 19:31:49 +0000 Subject: [PATCH 2/2] Update Frequency assurance reproduction boundary --- .../README.md | 61 +++++++++++++++---- 1 file changed, 49 insertions(+), 12 deletions(-) diff --git a/integrations/altrudev-frequency-agent-execution-assurance/README.md b/integrations/altrudev-frequency-agent-execution-assurance/README.md index ca6aedfd..c90e0fd0 100644 --- a/integrations/altrudev-frequency-agent-execution-assurance/README.md +++ b/integrations/altrudev-frequency-agent-execution-assurance/README.md @@ -1,27 +1,33 @@ # Frequency Agent Execution Assurance integration with TRACE -Frequency Agent Execution Assurance consumes standalone TRACE Trust Records as externally supplied evidence. The public adapter verifies the record with a caller-supplied trusted issuer key, fingerprints the exact record and key files, and projects selected verified fields into a claim-limited Frequency external-evidence record. +Frequency Agent Execution Assurance consumes standalone TRACE Trust Records as externally supplied evidence. The public TRACE adapter verifies the record with a caller-supplied trusted issuer key, fingerprints the exact record and key files, and projects selected verified fields into a claim-limited Frequency external-evidence record. -## Run it +The public repository now also includes an executable conformance evaluator for authority-to-execution binding, trusted independent observation, required evidence, signed closure, and claim ceilings. That evaluator is a separate public assurance surface; it does not change this marketplace integration's declared TRACE role of `record-consumer`. -Against the public v0.1.0 release: +## Reproduce the current public boundary + +Tested public commit: + +`2b40cc45965e1feb33c91b58b54a3c41de6038bf` ```bash -git clone --branch v0.1.0 --depth 1 \ - https://github.com/altrudev/Frequency-Agent-Execution-Assurance.git +git clone https://github.com/altrudev/Frequency-Agent-Execution-Assurance.git cd Frequency-Agent-Execution-Assurance +git checkout 2b40cc45965e1feb33c91b58b54a3c41de6038bf python3 -m venv .venv source .venv/bin/activate -python -m pip install -r adapters/agentrust-trace/requirements.txt +python -m pip install -r requirements-dev.txt -r adapters/agentrust-trace/requirements.txt -python adapters/agentrust-trace/demo.py -pytest -q adapters/agentrust-trace/tests +pytest -q tests adapters/agentrust-trace/tests adapters/thrixel-world/tests +python -m conformance.demo ``` -The adapter uses `agentrust-trace==0.10.0`. Its tests exercise the released verifier with a valid signed record, a tampered record, and a wrong caller-supplied trusted key. +At this commit the combined public suite contains 28 passing tests. + +The TRACE adapter uses `agentrust-trace==0.10.0`. -## What is verified +## TRACE verification scope A reviewer can reproduce that: @@ -29,10 +35,41 @@ A reviewer can reproduce that: - the exact TRACE record and trusted-key files are SHA-256 fingerprinted in the projection; - tampering fails closed; - a wrong trusted key fails closed; -- the projection records an explicit claim ceiling rather than promoting TRACE verification into an external-effect claim. +- the projection records an explicit claim ceiling rather than promoting TRACE verification into an external-effect claim; +- `signing_key_runtime_binding_verified` is explicitly `false`. + +That last field is deliberate. A valid TRACE signature is not promoted into proof that the signing key is independently bound to the runtime measurement or attestation named by the record. + +## Public execution-conformance surface + +Separately from TRACE record consumption, the public repository now provides a reference evaluator that checks: + +- intent, authority, and execution binding; +- exact authorized-request digest; +- authority validity window; +- independently supplied trusted observer identity; +- Ed25519 observer attestation; +- execution-to-observation effect correlation; +- required evidence references; +- signed closing commitment; +- claim ceilings that fail closed to `NOT VERIFIED`. + +The first concrete workload adapter is a non-executing Thrixel/world reference adapter. It demonstrates how a pinned external workload can be bound into the same conformance contract while leaving credentials, vendor execution, publishing, financial actions, and Frequency Core outside the public repository. + +The Thrixel reference adapter is not a TRACE conformance claim and does not imply endorsement or certification by Thrixel or AgenTrust. ## What this integration does not claim -The public adapter does not expose Frequency Core and does not authorize or execute an agent action. It does not independently verify hardware attestation, transparency-registry inclusion, the content behind a transcript hash, or any external state mutation. +The public adapter does not expose Frequency Core and does not authorize or execute an agent action. + +It does not independently establish: + +- hardware attestation validity; +- signing-key-to-runtime-measurement binding; +- transparency-registry inclusion; +- the content behind a transcript hash; +- that a third-party tool call occurred; +- that an external state mutation occurred; +- vendor certification or marketplace verification beyond the status assigned by AgenTrust. The Apache-2.0 license applies to the public TRACE adapter directory. Frequency Core and the broader enforcement product remain separately licensed proprietary software.