attestation.policyModule 27Decide which builders you accept for policy snapshots and detector packs, and refuse what a trusted author signed but another build made.
attestation.policy reads and sets the build-provenance policy. It lists the trusted builders, whether attestation is required, and how many attestations are held. An author's signature says who wrote a pack; this module asks which builder produced the bytes, on a separate axis.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
Plane module
policybuilders, requireAttestation and requireTransparencyLog.kindspolicy-snapshot and detector-pack./docs/attestation-policyAPI referenceRoutes, bodies and status codes./docs/attestation-policyOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./app/attestationStart freeCreate a workspace and admit your first intent./auth/signup
attestedattestations route lists each with whether it is witnessed.builderIdtrust replaces any builder with the same id; untrust takes it as the key.issuerci builder, the OIDC issuer its certificates must come from. A ci builder without one is refused.sanPatterns* must end on / or @ and match at least one character.artifactverify, the object itself. A digest sent beside it is not accepted as the question.loosenedrequire: true when the call switched requireAttestation off.policy returns the builders, requireAttestation and requireTransparencyLog, the two attested kinds, and a count of attestations held.
trust takes a builder with a builderId, a kind of ci or self, the kinds it may attest and, for ci, an issuer and sanPatterns.
attest stores a DSSE envelope for a kind and name, with an optional transparency-log entry. A newer build replaces an older one; an earlier build is refused.
require turns requireAttestation or requireTransparencyLog on. It refuses to switch on when no builder or self-signing key exists, because nothing would then load.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. attestation.policy docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
GET /api/v1/acp/attestation/policy Authorization: Bearer av_workspace_•••• → 200 { policy, kinds, attested }
{
"policy": {
"builders": [
{
"builderId": "release-workflow",
"kind": "ci",
"issuer": "https://token.actions.githubusercontent.com",
"sanPatterns": [
"https://github.com/acme/platform/.github/workflows/release.yml@refs/tags/*"
],
"keys": [],
"kinds": [
"detector-pack"
]
}
],
"requireAttestation": true,
"requireTransparencyLog": false
},
"kinds": [
"policy-snapshot",
"detector-pack"
],
"attested": 2
}Trust one ci builder whose identity is the exact release workflow. A pack built by a fork or a lookalike repository fails the identity check.
A pack can carry a valid author signature and still come from a bad build. With attestation required, packs.list refuses its registration.
With ATTESTATION_SELF_JWK bound, the plane signs its policy snapshots. A snapshot written without that signature is not applied on read.
Switching requireAttestation off appends an attestation.policy event with loosened: true, so a quiet downgrade leaves a ledger entry.
packs.list.mandates.compile stores its own artifact; this module checks attestations for snapshots and packs.coordination.admit; attestation guards what loads, not what an agent does next.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
verify checks the artifact you send against its stored attestation. The envelope's own digest cannot stand in for the object.self attestation is refused for anything that traveled, since the plane has no build service to check for that origin.attestation.refused.attestation.policy event.ci builder whose key the plane never holds survives that.requireAttestation defaults off, and a fresh plane has no builders.requireTransparencyLog is set; a supplied log entry must name this envelope's digest.The trusted time is the transparency log's integratedTime, not the startedOn the signer wrote. A rotated-out key verifies only what a log entry shows it signed while in service.
A policy snapshot is checked on read, when coordination hydrates it. A detector pack is checked at packs.list register, after the authorship check, with travelled: true.
A new attestation replaces the old one for the same artifact, so the policy pin does not grow with every coordination write.
trust needs keys.create, untrust needs keys.revoke and require needs policies.approve. Reading the policy needs none.
The private key is read from ATTESTATION_SELF_JWK and never stored. If self-attestation fails, the coordination write goes ahead rather than losing the grant.
attest needs a kind of policy-snapshot or detector-pack, a non-empty name, and an envelope with signatures.untrust of a builder that is not trusted returns 404, and an attest for an earlier build than the one held returns 409.coordination.* action for this module. It is reached over REST only.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/attestation/policyRead the policy, the attested kinds and the count held./api/v1/acp/attestation/attestRecord a DSSE envelope for a snapshot or pack./api/v1/acp/attestation/attestationsList what is held and whether each is witnessed./api/v1/acp/attestation/verifyVerify an artifact against its attestation./api/v1/acp/attestation/trustAdd or replace a trusted builder./api/v1/acp/attestation/untrustRemove a trusted builder./api/v1/acp/attestation/requireTurn the attestation requirements on or off.This module has no MCP action. Call it over REST from any agent or program.
packs.list25Signed pack registryBring in a pack of agents, grants and drills from outside, and know who signed it and whether a byte changed on the way.mandates.compile03Mandate studio and replayWrite an agent's charter as code, see what it would change about who may do what, and apply it as the mandate's next version.coordination.admit01Intralock admissionDecide every action before it happens: an agent declares its intent, and Intralock admits it or names the reason it may not.civics.settings23Workspace constitutionSet how fast the humans must answer your agents' questions, and who is on call, for each urgency in this workspace.change-trains.list24Staged change trainsRoll a change out to part of the fleet first, check it against measured signals, and move it forward one stage at a time.lenses.run26Governance lensesRun a fixed check over data you hand it and get a pass or fail with the evidence, the same answer every time.pack-revenue.balances28