Skip to content
@VeritasActa

Veritas Acta

Open protocol for signed, independently verifiable machine decisions. IETF Internet-Draft. Ed25519 receipts.

Veritas Acta

Open protocol for signed, independently verifiable machine decisions.

Every consequential machine action (tool calls, delegations, policy evaluations, sensor outputs) produces an Ed25519-signed receipt. Anyone can verify the receipt offline using only the public key. No vendor trust required, no phone-home.

Receipt format: ScopeBlind emits Veritas Acta receipts. Legacy ScopeBlind receipts remain verifiable, but Acta v0.1 is the canonical format going forward.

Start here

Pin What it is Path
Acta Protocol charter, ontology, and reference site veritasacta.com
verify Apache-2.0 offline verifier CLI npm i @veritasacta/verify
drafts IETF Internet-Draft sources for draft-farley-acta-signed-receipts live on datatracker
acta-mcp MCP server exposing the Acta verifier as a tool npm i acta-mcp

Standards

Document Where Status
draft-farley-acta-signed-receipts-01 datatracker.ietf.org Live IETF Internet-Draft (individual submission)
draft-farley-acta-knowledge-units-00 datatracker.ietf.org Live IETF Internet-Draft
Receipt Format Specification github.com/VeritasActa/Acta v0.1
Charter (10 invariants) github.com/VeritasActa/Acta Ratified
Cross-implementation conformance fixtures github.com/ScopeBlind/agent-governance-testvectors 14+ implementations cross-verifying byte-identical canonical output

Implementations

Package Purpose License
@veritasacta/verify Unified offline verifier (Ed25519, VOPRF, selective disclosure, Knowledge Units) Apache-2.0
@veritasacta/artifacts Signed artifact envelope (canonical JCS, Ed25519) Apache-2.0
@veritasacta/protocol Receipt format types and conformance helpers Apache-2.0
protect-mcp Runtime receipt signing for MCP servers (Cedar policies, Ed25519) MIT
acta-mcp MCP server exposing the Acta verifier as an agent tool MIT

External adoption

  • Microsoft Agent Governance Toolkit: listed as Appendix A.9 conformant implementation in the IETF draft. Tutorial 33 covers offline-verifiable decision receipts. Tutorial 46 covers selective-disclosure receipts via RFC 6962 Merkle commitments.
  • AWS Cedar: integrated as policy backend for protect-mcp. Two PRs merged in cedar-policy/cedar-for-agents.
  • Foundation submissions in flight: Microsoft AGT submitted to AAIF, OpenSSF (Sandbox), LF AI & Data, CoSAI / OASIS WS4, OWASP ASI, MITRE ATLAS, with the Acta receipt format cited as the open-standards integration evidence.
  • In-toto / SLSA: Decision Receipt predicate proposal at in-toto/attestation#549.

Live instances

  • veritasacta.com: protocol reference instance. Hash-chained ledger with daily Ed25519-signed anchors.
  • acta.today/wiki: verified knowledge base. 50+ entries produced by frontier AI models through adversarial deliberation.

Verify

npx @veritasacta/verify receipt.json

No server. No account. No trust required. Apache-2.0.

Pinned Loading

  1. verify verify Public

    Offline verification of signed receipts and artifacts. Ed25519 + JCS canonicalization. No server, no account, no trust required. Apache-2.0.

    JavaScript 4 6

  2. Acta Acta Public

    Open protocol for signed, verifiable machine decisions. Ed25519 receipts, hash-chained audit trails, in-toto predicate type. 2 IETF Internet-Drafts. Apache-2.0.

    JavaScript 6 2

  3. acta-truth-check acta-truth-check Public

    Independent external verification of Acta instance claims. Runs outside operator infrastructure — trust nothing, verify everything.

    JavaScript 2

  4. drafts drafts Public

    IETF Internet-Drafts for the Veritas Acta protocol: signed receipts and knowledge units

    2 1

  5. agent-governance-toolkit agent-governance-toolkit Public

    Forked from microsoft/agent-governance-toolkit

    Integration testing fork of Microsoft Agent Governance Toolkit. ScopeBlind protect-mcp adapter lives in the upstream repo (PR #667).

    Python

  6. scopeblind-gateway scopeblind-gateway Public

    Forked from ScopeBlind/scopeblind-gateway

    Signed receipts and Cedar policies for AI agent tool calls. Claude Code hooks, MCP gateway, IETF Internet-Draft. npx protect-mcp

    TypeScript

Repositories

Showing 10 of 14 repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…