Issues

[RefImpl] Span every step the reference deployment supports, toward an ACS-Trace claim

GenAI-Security-Project/agent-control-standard#322 · opened

on Oct 23, 2026

· Installable reference Guardian

[RefImpl] Check the links in reference-implementations/README.md

GenAI-Security-Project/agent-control-standard#319 · opened

on Oct 21, 2026

[Proposal] Entry and exit rules for maintained reference implementations

GenAI-Security-Project/agent-control-standard#318 · opened

on Oct 21, 2026

[Proposal] Keep the HMAC secret out of child processes, telemetry, error data and crash output

GenAI-Security-Project/agent-control-standard#317 · opened

on Oct 21, 2026

[Proposal] Verifier rules: constant-time comparison, no unsigned envelopes, only negotiated algorithms

GenAI-Security-Project/agent-control-standard#316 · opened

on Oct 21, 2026

1

[Proposal] Say that a request failing verification changes no Guardian state

GenAI-Security-Project/agent-control-standard#315 · opened

on Oct 21, 2026

1

[RefImpl] Check every implementation's AGT pin against agt.lock, and record the OPA version there

GenAI-Security-Project/agent-control-standard#314 · opened

on Oct 21, 2026

[RefImpl] Decide where shared host adapters live

GenAI-Security-Project/agent-control-standard#313 · opened

on Oct 21, 2026

[RefImpl] TypeScript Guardian: README expectations it does not meet yet

GenAI-Security-Project/agent-control-standard#312 · opened

on Oct 21, 2026

[RefImpl] A language-independent contract test suite for Guardian implementations

GenAI-Security-Project/agent-control-standard#311 · opened

on Oct 21, 2026

[Bug] Concurrent steps in one session overwrite each other's IFC labels, so a secret label is lost

GenAI-Security-Project/agent-control-standard#310 · opened

on Oct 21, 2026

[Proposal] Say what an Observed Agent does when a Guardian response fails verification

GenAI-Security-Project/agent-control-standard#308 · opened

on Oct 20, 2026

[Proposal] Define HMAC key rotation order, and whether key_id may change within a session

GenAI-Security-Project/agent-control-standard#307 · opened

on Oct 20, 2026

[Proposal] Bind an HMAC key_id to the agent_id it may sign for

GenAI-Security-Project/agent-control-standard#306 · opened

on Oct 20, 2026

[Proposal] Decide whether request_id_ref is required, and whether a host may derive request_id

GenAI-Security-Project/agent-control-standard#305 · opened

on Oct 20, 2026

[Proposal] Record a toolCallResult that names a denied request

GenAI-Security-Project/agent-control-standard#304 · opened

on Oct 20, 2026

[Conformance] Independent dogfooding run: walkthrough verified, test and conformance results at 8a45952

GenAI-Security-Project/agent-control-standard#299 · opened

on Oct 18, 2026

3

[Proposal] §6.3: normative disposition for an unscoreable MODIFY composition (fail-closed redaction semantics)

GenAI-Security-Project/agent-control-standard#296 · opened

on Oct 18, 2026

[Proposal] §11.x Resource scope matching: scope checks MUST use the resolved form of the identifier (path traversal from #29)

GenAI-Security-Project/agent-control-standard#295 · opened

on Oct 17, 2026

[Proposal] Evidence-gate hook: pre-execution evidence recorded before tool-call release

GenAI-Security-Project/agent-control-standard#288 · opened

on Oct 16, 2026

[RefImpl] OpenClaw host adapter

GenAI-Security-Project/agent-control-standard#287 · opened

on Oct 16, 2026

3

[RefImpl] Host-side trace follow-ups that wait on PR #229

GenAI-Security-Project/agent-control-standard#285 · opened

on Oct 15, 2026

· Installable reference Guardian

[RefImpl] Read the trace exporter's names from the mapping, and close its test gaps

GenAI-Security-Project/agent-control-standard#284 · opened

on Oct 15, 2026

· Installable reference Guardian

1

[RefImpl] Harden the trace exporter's file and endpoint handling, and the spans it vouches for

GenAI-Security-Project/agent-control-standard#283 · opened

on Oct 15, 2026

· Installable reference Guardian

2

[RefImpl] Recover a failed or stalled trace output and count the spans it drops

GenAI-Security-Project/agent-control-standard#282 · opened

on Oct 15, 2026

· Installable reference Guardian

1

Navigation Menu

Repository navigation

Issues

[RefImpl] Span every step the reference deployment supports, toward an ACS-Trace claim

[RefImpl] Check the links in reference-implementations/README.md

[Proposal] Entry and exit rules for maintained reference implementations

[Proposal] Keep the HMAC secret out of child processes, telemetry, error data and crash output

[Proposal] Verifier rules: constant-time comparison, no unsigned envelopes, only negotiated algorithms

[Proposal] Say that a request failing verification changes no Guardian state

[RefImpl] Check every implementation's AGT pin against agt.lock, and record the OPA version there

[RefImpl] Decide where shared host adapters live

[RefImpl] TypeScript Guardian: README expectations it does not meet yet

[RefImpl] A language-independent contract test suite for Guardian implementations

[Bug] Concurrent steps in one session overwrite each other's IFC labels, so a secret label is lost

[Proposal] Say what an Observed Agent does when a Guardian response fails verification

[Proposal] Define HMAC key rotation order, and whether key_id may change within a session

[Proposal] Bind an HMAC key_id to the agent_id it may sign for

[Proposal] Decide whether request_id_ref is required, and whether a host may derive request_id

[Proposal] Record a toolCallResult that names a denied request

[Conformance] Independent dogfooding run: walkthrough verified, test and conformance results at 8a45952

[Proposal] §6.3: normative disposition for an unscoreable MODIFY composition (fail-closed redaction semantics)

[Proposal] §11.x Resource scope matching: scope checks MUST use the resolved form of the identifier (path traversal from #29)

[Proposal] Evidence-gate hook: pre-execution evidence recorded before tool-call release

[RefImpl] OpenClaw host adapter

[RefImpl] Host-side trace follow-ups that wait on PR #229

[RefImpl] Read the trace exporter's names from the mapping, and close its test gaps

[RefImpl] Harden the trace exporter's file and endpoint handling, and the spans it vouches for

[RefImpl] Recover a failed or stalled trace output and count the spans it drops