agent-manifest/examples/level1-tpm-attested.json at main · agentrust-io/agent-manifest · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
{
  "@context": "https://manifest.agentrust-io.com/v0.2/context.json",
  "@type": "AgentManifest",
  "manifest_id": "019236ab-cdef-7001-8000-000000000002",
  "agent_id": "spiffe://trust.acme.co/agent/payment-authorizer/prod",
  "version": "0.1",
  "issued_at": "2026-06-04T00:00:00Z",
  "expires_at": "2026-09-02T00:00:00Z",
  "issuer": "spiffe://trust.acme.co/signing-authority",
  "crypto_profile": "standard",
  "artifacts": {
    "system_prompt": {
      "hash": "sha256:a2b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890",
      "hash_algorithm": "SHA-256",
      "version": "2.1.0",
      "classification": "confidential",
      "safety_level": "high-risk",
      "bound_at": "2026-06-04T00:00:00Z"
    },
    "policy_bundle": {
      "hash": "sha256:b2b2c3d4e5f67890b2b2c3d4e5f67890b2b2c3d4e5f67890b2b2c3d4e5f67890",
      "policy_language": "cedar",
      "version": "2.0.0",
      "enforcement_mode": "enforce",
      "scope": ["payments:authorize:amount_lte_10000", "payments:read:history"],
      "agt_version": "0.9.0",
      "bound_at": "2026-06-04T00:00:00Z"
    },
    "tool_manifest": {
      "catalog_hash": "sha256:c2b2c3d4e5f67890c2b2c3d4e5f67890c2b2c3d4e5f67890c2b2c3d4e5f67890",
      "tools": [
        {
          "tool_id": "co.acme.payments.authorize_payment",
          "tool_name": "authorize_payment",
          "endpoint_id": "spiffe://trust.acme.co/mcp/payments-gateway/prod",
          "schema_hash": "sha256:21b2c3d4e5f6789021b2c3d4e5f6789021b2c3d4e5f6789021b2c3d4e5f67890",
          "description_hash": "sha256:22b2c3d4e5f6789022b2c3d4e5f6789022b2c3d4e5f6789022b2c3d4e5f67891",
          "version": "1.2.0",
          "egress_destinations": ["payments.internal.acme.co"]
        },
        {
          "tool_id": "co.acme.payments.lookup_account",
          "tool_name": "lookup_account",
          "endpoint_id": "spiffe://trust.acme.co/mcp/payments-gateway/prod",
          "schema_hash": "sha256:23b2c3d4e5f6789023b2c3d4e5f6789023b2c3d4e5f6789023b2c3d4e5f67890",
          "description_hash": "sha256:24b2c3d4e5f6789024b2c3d4e5f6789024b2c3d4e5f6789024b2c3d4e5f67890",
          "version": "1.2.0",
          "egress_destinations": ["payments.internal.acme.co"]
        },
        {
          "tool_id": "co.acme.payments.payment_history",
          "tool_name": "payment_history",
          "endpoint_id": "spiffe://trust.acme.co/mcp/payments-gateway/prod",
          "schema_hash": "sha256:25b2c3d4e5f6789025b2c3d4e5f6789025b2c3d4e5f6789025b2c3d4e5f67890",
          "description_hash": "sha256:26b2c3d4e5f6789026b2c3d4e5f6789026b2c3d4e5f6789026b2c3d4e5f67890",
          "version": "1.2.0",
          "egress_destinations": ["payments.internal.acme.co"]
        }
      ],
      "allow_dynamic_registration": false,
      "rug_pull_policy": "deny-and-hold",
      "bound_at": "2026-06-04T00:00:00Z"
    },
    "model_identity": {
      "provider": "anthropic",
      "model_id": "claude-sonnet-4-6",
      "version": "20251001",
      "deployment_type": "api",
      "model_attestation_type": "provider-asserted",
      "bound_at": "2026-06-04T00:00:00Z"
    },
    "decision_trace": {
      "trace_type": "hash-chained",
      "audit_chain_root": "sha256:e2b2c3d4e5f67890e2b2c3d4e5f67890e2b2c3d4e5f67890e2b2c3d4e5f67890",
      "audit_chain_uri": "https://audit.internal.acme.co/chains/payment-authorizer-prod",
      "signing_key_id": "tpm-sealed-key-001",
      "audit_key_sealed": true,
      "first_entry_at": "2026-06-01T00:00:00Z",
      "last_entry_at": "2026-06-04T00:00:00Z",
      "entry_count": 1847,
      "bound_at": "2026-06-04T00:00:00Z"
    },
    "supply_chain": {
      "container_image_digest": "sha256:f2b2c3d4e5f67890f2b2c3d4e5f67890f2b2c3d4e5f67890f2b2c3d4e5f67890",
      "slsa_provenance": {
        "builder_id": "https://github.com/acme-co/payment-authorizer/.github/workflows/build.yml@refs/heads/main",
        "subject_digest": "sha256:f2b2c3d4e5f67890f2b2c3d4e5f67890f2b2c3d4e5f67890f2b2c3d4e5f67890",
        "provenance_uri": "https://github.com/acme-co/payment-authorizer/attestations/12345",
        "rekor_entry_id": "108e9186e8c5ec2374569f4ca53ac3f0d0c2f3b8a1e5d2c7f4b9e6a3d0c8f5b2",
        "declared_level": 3
      },
      "sbom": {
        "format": "cyclonedx",
        "schema_version": "CycloneDX 1.6",
        "document_id": "urn:uuid:019236ab-cdef-7002-8000-000000000003",
        "sbom_hash": "sha256:02b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890",
        "sbom_uri": "https://sbom.internal.acme.co/payment-authorizer-prod-20260604.json"
      },
      "mcp_servers": [
        {
          "server_id": "spiffe://trust.acme.co/mcp/payments-gateway/prod",
          "image_digest": "sha256:12b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890",
          "slsa_level": 3,
          "phase2_attested": false
        }
      ],
      "bound_at": "2026-06-04T00:00:00Z"
    }
  },
  "attestation": {
    "platform": "tpm",
    "tee_version": "2.0",
    "measurement": "32b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890a2b2c3d4e5f67890",
    "manifest_hash_in_report": "sha256:8bba1e58d40803b9ddbca309fd9d780b98f653c094203310c161e2a5d0cbc67c",
    "audit_chain_root": "sha256:e2b2c3d4e5f67890e2b2c3d4e5f67890e2b2c3d4e5f67890e2b2c3d4e5f67890",
    "report_timestamp": "2026-06-04T00:00:30Z",
    "report_uri": "https://attestation.internal.acme.co/reports/payment-authorizer-20260604"
  },
  "signature": {
    "algorithm": "Ed25519",
    "key_id": "d2b2c3d4e5f67890d2b2c3d4e5f67890d2b2c3d4e5f67890d2b2c3d4e5f67890",
    "key_type": "tee-sealed",
    "signed_at": "2026-06-04T00:00:00Z",
    "signature_value": "BASE64URL_ENCODED_SIGNATURE_PLACEHOLDER"
  },
  "transparency_log_entry": {
    "log_id": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d",
    "log_index": 98765432,
    "entry_uuid": "108e9186e8c5ec2374569f4ca53ac3f0d0c2f3b8a1e5d2c7f4b9e6a3d0c8f5b3",
    "integrated_time": 1780531260,
    "inclusion_proof": {
      "checkpoint": "rekor.sigstore.dev - 1193050959916656506\n98765433\nPLACEHOLDER_SIGNED_TREE_HEAD",
      "hashes": [
        "42b2c3d4e5f6789042b2c3d4e5f6789042b2c3d4e5f6789042b2c3d4e5f67890",
        "43b2c3d4e5f6789043b2c3d4e5f6789043b2c3d4e5f6789043b2c3d4e5f67890"
      ],
      "tree_size": 98765433
    }
  }
}