Skip to content

TRACE Tests

TRACE Conformance Test Suite

Verify your TRACE implementation before shipping

Full Documentation

Quick Start  |  Test Modules  |  Conformance Levels  |  Changelog

License: Apache 2.0 TRACE Spec Tests CI Discord

Test suite v0.2. Tracks TRACE Spec v0.2.

Conformance tests for TRACE (Trust Runtime Attestation and Compliance Evidence). Run this suite against your implementation to verify it meets the spec before claiming TRACE compliance.

Seven test modules covering the full specification: envelope structure, signature algorithms, TEE runtime claims, policy binding, tool-call transcripts, SCITT transparency anchoring, and supply chain provenance.

Quick start

pip install trace-tests
trace-tests verify --record path/to/trust-record.jwt --level 1

Test modules

Module ID Tests
Envelope TR-ENV EAT structure, required fields, iat validity
Signature TR-SIG ES256/ES384/EdDSA, key binding, chain
Runtime TR-RTE TEE platform, measurement format, RIM URI
Policy TR-POL Bundle hash, enforcement mode, TEE binding
Transcript TR-TXN Tool-call transcript hash binding (Phase 2+)
Transparency TR-ANC SCITT receipt URI, inclusion proof
Provenance TR-SCA SLSA level, builder URI, digest format

Resources

📖 Full documentation tests.agentrust-io.com
📄 TRACE Specification trace-spec
🗂 Test schemas schemas/
💬 Discussions GitHub Discussions
📋 Changelog CHANGELOG.md

Contributing

See CONTRIBUTING.md. New test cases must include a normative spec reference, a positive case, and a negative case with a structured error code (TR-<MODULE>-<NNN>).

About

TRACE compliance test suite. Conformance tests for TRACE Certification.

Resources

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages