All issues

Search results

Decision-trace binding (§3.2.7) has no post-signing continuity mechanism, unlike memory (§3.2.6) and the COSE post-signing artifacts

spec

Status: Open.

#273 In agentrust-io/agent-manifest;

· contrario opened on Aug 4, 2026

spec_change: a VALID verification result is not authorization for the action that triggered it (sections 5.3, 7.2)

needs-review:UNKNOWNContributor check flagged UNKNOWN riskContributor check flagged UNKNOWN risk

spec

Status: Open.

#272 In agentrust-io/agent-manifest;

· Mayur021 opened on Aug 4, 2026

spec_change: designate agent_id as the correlation key for OCSF ai_agent.instance_uid (§3.1, §5.2)

Status: Open.

#269 In agentrust-io/agent-manifest;

· rabbidave opened on Aug 3, 2026

§7.2 / §8 — non-normative pointer to runtime-evidence correlation (no schema change)

Status: Open.

#268 In agentrust-io/agent-manifest;

· rabbidave opened on Aug 3, 2026

docs: integrations/agent-credentials.md — signed state-at-stop as the #99/#149 bridge

Status: Open.

#267 In agentrust-io/agent-manifest;

· rabbidave opened on Aug 3, 2026

[spec] Signed verification results need relying-party challenge and context binding

Status: Open.

#266 In agentrust-io/agent-manifest;

· sapsan14 opened on Aug 3, 2026

[spec] Artifact-only refresh invalidates manifest_hash_in_report without re-attestation

Status: Open.

#265 In agentrust-io/agent-manifest;

· sapsan14 opened on Aug 3, 2026

Spec gap: no way to author a composition-only manifest where the model is unknowable

Status: Open.

#256 In agentrust-io/agent-manifest;

· imran-siddique opened on Aug 1, 2026

Absorb TPMT_SIGNATURE parsing so cmcp and ca2a can drop their copies

Status: Open.

#255 In agentrust-io/agent-manifest;

· imran-siddique opened on Aug 1, 2026

Spec change proposal: bind a configuration assurance result to the system prompt

needs-review:MEDIUMContributor check flagged MEDIUM riskContributor check flagged MEDIUM risk

spec

Status: Open.

#254 In agentrust-io/agent-manifest;

· zohebk8s opened on Jul 31, 2026

Migrate the manifest signature envelope to COSE_Sign1 (ADR-0011, spec v0.2)

Status: Open.

#243 In agentrust-io/agent-manifest;

· imran-siddique opened on Jul 27, 2026

Azure TDX attestation via Azure MAA (deferred)

Status: Open.

#236 In agentrust-io/agent-manifest;

· imran-siddique opened on Jul 22, 2026