fix(wcm): redirect /wcm/ to the single WCM home

.github/workflows/wcm-launch-page.yml → .github/workflows/wcm-redirect.yml

@@ -1,21 +1,21 @@
-name: WCM launch page
+name: WCM redirect
 
 on:
   pull_request:
     paths:
       - "wcm/**"
-      - ".github/workflows/wcm-launch-page.yml"
+      - ".github/workflows/wcm-redirect.yml"
   push:
     branches: [main]
     paths:
       - "wcm/**"
-      - ".github/workflows/wcm-launch-page.yml"
+      - ".github/workflows/wcm-redirect.yml"
 
 permissions:
   contents: read
 
 jobs:
-  evidence:
+  redirect:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -24,4 +24,4 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: "22"
-      - run: node wcm/launch-page.test.js
+      - run: node wcm/redirect.test.js

llms.txt

@@ -8,7 +8,7 @@ AgenTrust is the ecosystem at https://agentrust-io.com and the GitHub organizati
 
 - [Overview and architecture](https://agentrust-io.com/): The components, trust boundaries, governance, and evidence links.
 - [10-minute tool-call tutorial](https://agentrust-io.com/quickstart/): Write a policy, observe a denied call, and inspect a signed session record on a laptop. Software mode provides no hardware isolation or hardware-backed provenance.
-- [Weight Custody Manifest (WCM)](https://agentrust-io.com/wcm/): Bind model-weight identity and custody terms to key-release policy. The local walkthrough uses synthetic evidence and a placeholder key; it does not load a real model or demonstrate hardware protection.
+- [Weight Custody Manifest (WCM)](https://wcm.agentrust-io.com/): Bind model-weight identity and custody terms to key-release policy. The local walkthrough uses synthetic evidence and a placeholder key; it does not load a real model or demonstrate hardware protection.
 - [Runnable demos](https://agentrust-io.com/demos/): Software examples for policy decisions, evidence verification, delegation, and model-weight custody. Follow each demo's stated prerequisites and limits.
 - [Marketplace search](https://agentrust-io.com/marketplace/): Find integrations by framework, technology, and use case.
 - [Complete marketplace catalog](https://agentrust-io.com/marketplace/catalog/): Dated integration descriptions and source links, readable without JavaScript or external catalog requests. Listings do not establish endorsement, certification, or hardware validation.
@@ -19,7 +19,7 @@ AgenTrust is the ecosystem at https://agentrust-io.com and the GitHub organizati
 - [Confidential MCP (cMCP)](https://cmcp.agentrust-io.com/): Evaluates routed tool calls against policy and records the decisions. Hardware deployments place the runtime inside a Trusted Execution Environment; confidentiality also depends on egress policy and deployment configuration. The agent and upstream tool server are separate boundaries.
 - [Confidential A2A (cA2A)](https://ca2a.agentrust-io.com/): A developer-preview trust profile for Agent2Agent delegation, with attenuated authority, attestation, sealed channels, and provenance. Assurance depends on the evidence and checks performed by the deployment.
 - [TRACE](https://trace.agentrust-io.com/): Portable, signed runtime evidence. Hardware provenance requires attestation verification against a trusted root. A signature alone does not establish hardware origin or the truth of all recorded claims.
-- [WCM public SDK and demos](https://agentrust-io.com/wcm/): Public evaluation path for weight custody. Key release, encrypted artifact delivery, runtime leases, and key-copy handling are separate responsibilities. The specification is in pre-standardization review; use the public material linked from this page.
+- [WCM public SDK and demos](https://wcm.agentrust-io.com/): Public evaluation path for weight custody. Key release, encrypted artifact delivery, runtime leases, and key-copy handling are separate responsibilities. The specification is in pre-standardization review; use the public material linked from this page.
 - [AgenTrust Telemetry](https://agentrust-io.com/telemetry/): An alpha, backend-neutral event contract and reference SDKs for governance facts, caller-owned OpenTelemetry, and evidence finalization. It is not a policy engine or a proof that recorded events are true.
 - [TRACE Registry](https://agentrust-io.com/registry/): Public anchors and signed checkpoints for offline verification. Inclusion, a signer's stated time, independent time evidence, and consistency of log history are different checks. A registry entry does not validate a record's claims.
 - [Agentic controls](https://agentrust-io.com/go/): Thirty requirements with stable individual permalinks and OpenCRE mappings. A mapping is not certification or a conformance result.

sitemap.xml

@@ -9,5 +9,4 @@
   <url><loc>https://agentrust-io.com/quickstart/</loc></url>
   <url><loc>https://agentrust-io.com/registry/</loc></url>
   <url><loc>https://agentrust-io.com/telemetry/</loc></url>
-  <url><loc>https://agentrust-io.com/wcm/</loc></url>
 </urlset>

supernav.js

@@ -18,17 +18,19 @@
     { id: 'manifest',   label: 'Manifest',     url: 'https://manifest.agentrust-io.com',                       ext: false },
     { id: 'cmcp',       label: 'cMCP',         url: 'https://cmcp.agentrust-io.com',                           ext: false },
     { id: 'ca2a',       label: 'cA2A',         url: 'https://ca2a.agentrust-io.com',                           ext: false },
-    { id: 'wcm',        label: 'WCM',          url: 'https://agentrust-io.com/wcm/',                            ext: false },
+    { id: 'wcm',        label: 'WCM',          url: 'https://wcm.agentrust-io.com',                            ext: false },
     { id: 'governance', label: 'Governance',   url: 'https://governance.agentrust-io.com',                     ext: false },
     { id: 'agt',        label: 'AGT',          url: 'https://github.com/microsoft/agent-governance-toolkit',   ext: true  },
     { id: 'github',     label: 'GitHub',       url: 'https://github.com/agentrust-io',                         ext: true  }
   ];
 
   var HOST = location.hostname;
   var PATH = location.pathname;
-  // Quickstart, demos, telemetry, registry, and (today) WCM live under the
-  // apex host, so the active item cannot be resolved from the hostname alone
-  // the way every other entry can.
+  // Quickstart, demos, telemetry and registry live under the apex host, so the
+  // active item cannot be resolved from the hostname alone the way every other
+  // entry can. The /wcm branch below stays for the redirect stub still served
+  // at agentrust-io.com/wcm/: it highlights WCM for the instant before the
+  // reader is moved to wcm.agentrust-io.com.
 
   var CURRENT_ID = (HOST === 'agentrust-io.com' && PATH.indexOf('/quickstart') === 0) ? 'quickstart'
     : (HOST === 'agentrust-io.com' && PATH.indexOf('/demos') === 0) ? 'demos'