Independent certification for one exact version of your AI agent.
We assess one exact version of your agent against a published scheme. A passing agent receives a signed certificate that anyone can check, that expires, and that pauses on its own if the agent changes or fails a re-check.
Once you have an account, we walk you through how assessment works and how to connect your agent.
- Assessed
- 14 Feb 2028 · scheme 2027.1
- Valid until
- 15 May 2028
- Fingerprint
- aif:sha256:specimen
Specimen for illustration. Not an issued certificate.
A dated statement of what was tested, signed so it cannot be altered.
A certificate covers one agent version, identified by its fingerprint. It does not cover other versions, other deployments with the same name, your organisation, or the model underneath. It is not a warranty.
Bound to one version
The fingerprint covers the parts we can see: model and dated version, tools, configuration, Agent Card and package digests. Your system prompt is included only as a sealed fingerprint, never as text.
It expires and can be paused
Verified lasts 30 days and Certified 90 days. A failed re-check, an undeclared change or a missed re-check pauses it within minutes, and every verifier sees the pause.
It shows its working
It states the level and the rule that set it, what was assessed and when, attempts withstood per manipulation type, the standing of each area, any checks not completed, and the validity dates.
Say
Certified: assessed against scheme 2027.1 on 14 Feb 2028
Not broken within 1,000 attempts per manipulation type
Certified until 15 May 2028
Never say
Secure
Hack-proof
Guaranteed
EU AI Act certified, or NIST certified
Any claim for a different version of the agent
Anyone can check a certificate, and machines can too.
Buyers, marketplaces, partners and other agents can confirm a certificate is genuine, current and for the agent in front of them, without contacting us.
The registry, the free verification tool and the badge arrive with the first issued certificates.
aif:sha256:specimen- Agent Card signaturesThe agent's published card is fetched and its signatures checked.Valid
- Certificate locatedFrom the card's link, or looked up by fingerprint.Found
- Issuer traced to the trust rootThe signing keys chain to our pinned root.Valid
- Signature, dates and public logSignature verified, within its validity dates, recorded in the public transparency log.Valid
- Paused or withdrawn?Both status lists checked.Neither
- Same agent versionThe parts we can see, such as the card and tool list, are recomputed and compared.Match
- Signed replyRequired only at High-Assurance.Not required
- Your own policyFor example, only Certified agents may place orders.Your rule
Open to design partners now.
Scheme v0.1 is a working draft. You can create an account, add your agents and request an assessment today. While the scheme is a draft, requests are reviewed with us and no certificate is issued.
Accreditation pending. The scheme is structured on ISO/IEC 17067; the certification body is to meet ISO/IEC 17065 and the laboratory ISO/IEC 17025.
- Scheme v0.1Working draft, shaped with design partners. Not for issuance.
- Scheme v0.9 public draftThresholds calibrated with design partners.
- Scan opensFree; free forever for open-source agents and MCP servers.
- Scheme 2027.1 and the first certificatesThe first issuable release. Verified opens first, then Certified.
- High-Assurance opensWith the runtime component that signs every reply.
The order is planned. Dates will be announced.
Bring your agent in early.
Create an account with your work email and your organisation's legal name. Personal and free email addresses are not accepted. We email a one-time link; there is no password to remember. Then we walk you through how assessment works and how to connect your first agent.