Prove what your agent did. Don't just claim it.
An open standard for verifiable execution provenance: a portable, tamper-evident record of what an agent did, in what order, and under what governance. Anyone can verify it without trusting you or your host. Here is a signed sample. Check it yourself, right now, in this tab.
run/conformance3COSE_Sign1 · Ed25519provetrail-conformance-root
This runs the published provetrail npm package, its COSE_Sign1 + RFC 9162 Merkle checks, entirely client-side. Governance and ground-truth (the L4 tiers) are checked by the full Go verifier, flynn spine verify. Don't trust this page? Download the record and verify it yourself.
The specification is a draft (0.1.0-draft). Its wire format is not frozen, so do not rely on it as a production security control until v0.1.0 is tagged.
Signed is not the same as proven
Plenty of systems can hand you a signed log. A signature only says these bytes are mine. It says nothing about whether the work was real. Provetrail is built so a stranger’s machine can check the claim instead of taking your word for it:
- Integrity. The events rebuild a signed Merkle root (RFC 9162). Change one byte and the proof breaks, as above.
- Governance. Every side-effecting action has a matching admission, so no action ran without authorization. Checked by
flynn spine verify; the demo above covers integrity. - Ground truth. A claimed success is bound to a check that passed. A record that says “done” with nothing behind it is rejected. Also checked by
flynn spine verify.
Where it fits
Provetrail answers a different question from the standards you already know:
| Standard | Answers |
|---|---|
| C2PA | Is this content AI-generated, and by whom? |
| MCP | How does an agent connect to tools? |
| A2A | How do agents talk to each other? |
| Provetrail | What did the agent do, provably? |
The reference runtime is Flynn (Go); reference verifiers for the integrity levels exist in Rust, Python and TypeScript (npm), and any of them can be checked against the same conformance suite.