Skip to content

Add PIC Standard (agent-enabling) #120

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
madeinplutofabio wants to merge 3 commits into
base: main
Choose a base branch
from
+93 −0
Open

Add PIC Standard (agent-enabling) #120

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
438b475
Add PIC Standard (agent-enabling)
madeinplutofabio Oct 21, 2026
62ed7af
Address review: canonical website URL and PyPI JSON evidence
madeinplutofabio Oct 22, 2026
2d4ce7d
Review PIC Standard editorial metadata
foo-bender Oct 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions tool-submitters.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,7 @@
"pangolinfo-amazon-data-mcp": "Pangolin-spg",
"paperclip": "bradvin",
"paygseo": "foo-bender",
"pic-standard": "madeinplutofabio",
"pixelvault": "facundofarias",
"proofeditor": "foo-bender",
"provenant": "MoslemBenDhaou",
Expand Down
92 changes: 92 additions & 0 deletions tools/pic-standard.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,92 @@
---
slug: "pic-standard"
name: "PIC Standard"
description: "Open, local-first protocol that verifies an agent's intent, provenance and evidence before a tool call runs"
seoTitle: "PIC Standard: Verify AI Agent Tool Calls Before They Run"
seoDescription: "Open, local-first protocol and verifier that checks an agent's intent, provenance and signed evidence before a tool call runs, and blocks calls that fail."
agentSummary: "PIC Standard lets an agent submit an Action Proposal before a high-impact tool call: what it intends to do, how much is at stake, which inputs it relied on, and evidence such as SHA-256 hashes or Ed25519-signed approvals. A local verifier checks the proposal against the operator's policy and trusted keys, and the call is blocked if verification fails."
category: "agent-frameworks-standards"
tags:
- "agent-security"
- "tool-call-verification"
- "provenance"
- "open-standard"
- "mcp"
- "langgraph"
websiteUrl: "https://madeinpluto.com/pic/"
githubUrl: "https://github.com/pic-standard/pic-standard"
pricing: "open-source"
classification: "agent-enabling"
entityType: "protocol"
developerName: "PIC Standard project"
docsUrl: "https://github.com/pic-standard/pic-standard/blob/main/docs/for-agents.md"
licenseUrl: "https://github.com/pic-standard/pic-standard/blob/main/LICENSE"
interfaces:
- "Python SDK"
- "TypeScript verifier"
- "CLI"
- "HTTP API"
- "MCP"
deploymentModes:
- "local"
- "self-hosted"
- "application-embedded"
evidenceSources:
- title: "PIC Standard repository: Python reference implementation and integrations"
url: "https://github.com/pic-standard/pic-standard"
claim: "The repository publishes the Python reference verifier with a CLI, MCP tool guards, a LangGraph tool node, and an HTTP bridge with an OpenAPI contract."
accessedAt: "2026-10-21"
sourceType: "official-repository"
- title: "RFC-0001: PIC Standard specification"
url: "https://github.com/pic-standard/pic-standard/blob/main/docs/RFC-0001-pic-standard.md"
claim: "Specifies a local-first, fail-closed protocol in which an agent declares intent, impact class, data provenance, claims and cryptographic evidence before a tool call is executed."
accessedAt: "2026-10-21"
sourceType: "official-specification"
- title: "PIC core specification: verification rules"
url: "https://github.com/pic-standard/pic-standard/blob/main/docs/spec-core.md"
claim: "Defines the verification checks, including tool binding before dispatch, and states that any check's failure produces a fail-closed outcome."
accessedAt: "2026-10-21"
sourceType: "official-specification"
- title: "PIC Standard v0.9.1 release notes"
url: "https://github.com/pic-standard/pic-standard/releases/tag/v0.9.1"
claim: "v0.9.1 adds live-argument binding at the MCP guard and HTTP bridge, an optional MCP pre-execution hook, and grows the shared conformance corpus from 84 to 91 vectors."
accessedAt: "2026-10-21"
sourceType: "official-release-notes"
- title: "MCP integration guide"
url: "https://github.com/pic-standard/pic-standard/blob/main/docs/mcp-integration.md"
claim: "Documents guard_mcp_tool for wrapping MCP tool functions so that PIC verification runs before the tool executes."
accessedAt: "2026-10-21"
sourceType: "official-documentation"
- title: "PIC Standard TypeScript verifier"
url: "https://github.com/pic-standard/pic-standard-ts"
claim: "A second implementation in TypeScript that passes the shared conformance vectors for the canonicalization, core and trust-sanitization modes."
accessedAt: "2026-10-21"
sourceType: "official-repository"
- title: "PIC Standard package metadata on PyPI (JSON API)"
url: "https://pypi.org/pypi/pic-standard/json"
claim: "The Python package pic-standard is published on PyPI with 0.9.1 as the current release, requires Python 3.10 or later, and offers langgraph, mcp and crypto extras."
accessedAt: "2026-10-22"
sourceType: "official-product-page"
- title: "PIC Standard license: Apache-2.0"
url: "https://github.com/pic-standard/pic-standard/blob/main/LICENSE"
claim: "The repository is licensed under the Apache License 2.0."
accessedAt: "2026-10-21"
sourceType: "official-license"
verificationLevel: "documentation-reviewed"
reviewedBy: "foo-bender"
reviewedAt: "2026-10-23"
classificationRationaleMd: "PIC gives agent builders a specified, independently implemented contract for gating high-impact tool calls on declared intent, provenance and evidence. It governs whether an agent's proposed action may run rather than how agents communicate with each other, so agent-enabling is the most specific class the evidence supports."
bestForMd: "Agent builders who want a verifiable, fail-closed check before payment, data-export, deletion or other high-impact tool calls run, using keys and policy they control."
notBestForMd: "Filtering or moderating model output text; PIC gates tool calls, not what the model says."
limitationsMd: "Protection applies to tool calls routed through a PIC integration. Live-argument binding is implemented in the MCP guard and HTTP bridge; the LangGraph PICToolNode verifies proposals and tool names but does not yet compare live arguments. With the HTTP bridge, the calling application enforces the allow or block decision. The TypeScript verifier does not yet implement evidence-mode verification."
unknownsMd: "The reviewed first-party sources do not publish third-party adoption figures."
---

PIC Standard (Provenance & Intent Contracts) is an Apache-2.0 protocol and local verifier that decides, before a high-impact tool call runs, whether the agent's proposed action is backed by trusted provenance and verifiable evidence.

## So agents can...

- Declare intent, impact, sources and evidence before a payment, data export, deletion or command runs
- Back a claim with SHA-256 hashes or Ed25519-signed approvals from keys the operator trusts
- Have the call blocked before execution when evidence is missing or fails verification
- Run only the exact tool arguments that were verified, through the MCP guard
Loading