Kernel-level governance
Attest is an agent OS.
It attests every action (agent, human, tool) with attribution, policy gates, and an immutable decision-log. Local-first. Multi-tenant. Open-source core.
83 tests passingtypecheck cleanSOX §404HIPAA §164.312GDPR Art. 25/32
- 1Initnpx attest-core init
- 2Trust Center ruleswrite and turn on
- 3Agents follow themhelpers, wrappers, AGENTS.md
01 / Proof
The record
We run our own company on Attest. Every decision, task assignment, and Board request since 2026-09-21 is in the decision-log, queryable, hash-chained, attributable.
- MVP complete: schema-per-tenant isolation, policy gates (
human_approval,role_based,compliance_mapping), immutable decision-log. 83 tests passing; typecheck clean. - Compliance mappings: SOX §404, HIPAA §164.312, and GDPR Art. 25/32 mapped (regulation → policy gate → decision-log evidence).
- No bolt-on governance. Attribution, policy gates, and the decision-log are kernel primitives of the runtime, enforced before an action dispatches, not after.
02 / Design partners
The Alpha program
Goal: 3–5 design partners running one production workload on Attest Core for four weeks, with documented compliance mapping evidence.
The ask
- Run one real workload on Attest Core (self-hosted) for four weeks.
- Give direct feedback on the governance primitives: policy gates, attribution, decision-log.
- Allow an anonymized case study, nothing published without your sign-off.
What partners get
- Direct engineering access: weekly check-in.
- A compliance mapping drafted against your workload and regulation (SOX §404, HIPAA §164.312, GDPR Art. 25/32, or your choice).
- Roadmap influence: your feedback shapes the Control Plane.
- Attest Core is open source. The program adds the relationship, the evidence, and the support.
03 / Timing
Why now
Agent orchestration frameworks, sync engines, and audit tools each solve one slice. None enforce governance at the kernel. We built that gap closed from day one, and we run on it ourselves.