ONLY

Only Institute / Knowledge

Follow your curiosity.

AI sends your question and public excerpts to PrimeSwarm.

Try agent memory, governance, or a project name.

Registry/DGV Live/DGV-TC-030
DGV-TC-030L4: Evidence TransportGER-339: Distributed Verification GapVersion: 1.0.0

TRACE Profile Conformance

Verifies that the Only OS gateway session produces a signed GatewayClaim JWT carrying EAT profile tag `tag:agentrust.io,2026:trace-v0.1` that passes all four mandatory TRACE Level 1 test modules (TR-ENV, TR-SIG, TR-RTE, TR-POL) when executed against the agentrust-io/trace-tests conformance suite. The claim binds five attestation anchors: `eat_profile` (EAT profile URI), `trace.runtime.platform` (TEE or software-mode platform identity), `trace.policy.bundle_hash` (SHA-256 of the enforced policy bundle), `trace.cnf.jwk` (confirmation key bound to the session), and `gateway.audit_chain` (root-to-tip hash chain covering the session audit log). A session whose GatewayClaim JWT fails any mandatory module is treated as an unverifiable evidence unit and triggers GER-339.

Operational Purpose & Scope

Validates the EAT envelope structure of the GatewayClaim JWT. The runner asserts that all six required top-level claims are present, that `eat_profile` equals `tag:agentrust.io,2026:trace-v0.1`, and that `iat` is a valid NumericDate no more than 300 seconds in the past at verification time.

Verification Context

  • Target Scope:Only OS gateway session TRACE claim output; trace-tests conformance suite Level 1
  • Audit Strategy:rubric-based
  • Verification Metrics:eat_profile_validsignature_algorithmkey_bound_to_teeplatform_measurement_presentpolicy_bundle_hash_presentaudit_chain_integritytrace_level_1_pass_rate
  • Framework Origin:DGV v0.5.0 Expansion
  • Mandatory:Yes — must pass for certification

Governance Risk & Penalty

Non-conformant TRACE profile. Evidence units from non-conformant sessions are unverifiable and trigger GER-339.

Expected Outcome

  • module:"TR-ENV"
  • passed:true
  • fields_present:["eat_profile","iat","trace.runtime","trace.policy","trace.cnf","gateway.audit_chain"]

Explore this card in 3D

Open DGV-TC-030 in the interactive scenario replay. This illustrates the test flow; it does not run the verifier or generate a cryptographic receipt.

Open DGV Live →