Sector graphs, signed by the bodies that write them
Professional bodies, regulators and companies publish graphs here. Each one is checked against the floor and the law, approved by a named person with a passkey, signed at self grade and logged. An agent uses a registry graph only when it names it.
Loading the registry...
Accept an invitation
Register your organisation
For professional associations, regulators, standards bodies, universities, industry bodies and companies that want to publish a guardrail graph for their field, or keep private guardrail graphs for their own AI services.
- Register with your organisation's own domain and a work email at that domain. You become its first owner, signed in with a passkey on this device. No password.
- Prove the domain. Add a DNS TXT record, or put a small file on your website. The next screen shows both.
- Invite colleagues: authors upload graphs, signers approve public graphs, approvers approve private ones.
- Upload a graph as YAML or JSON (template) and choose private or public. Every upload is checked against the floor and the law, and you see what would change.
- Public graphs are approved by a signer and listed here. Private graphs need two approvers and are only ever used by your own agents.
Your organisation id is your domain with dots written as hyphens (any hyphen in the domain is doubled), for example yourbody-org. It cannot be chosen, so no one else can publish under your name. The kind of body you select is self-declared at this grade; the verified grade, coming later, checks it.
Prove your work email with your organisation's account. Optional, and shown on your organisation's record and its Trust Marks.
We use these details to contact you about your registration. See privacy and data.
Your passkey can live in the phone or laptop you already use: iCloud Keychain, Google Password Manager, Windows Hello or 1Password. No security key is needed, and you can use a passkey on your phone from a desktop by scanning a QR code.
Already registered?
Members sign in with the passkey they registered, on the device they registered it. No passwords. To join an organisation that is already registered, ask its owner for an invitation link.
Single sign-on
If your organisation has connected Entra ID or Okta, and you have linked your identity, you can sign in with it. You will still use your passkey to decide cases and make changes.
Prove your domain
Add one of these, then check. DNS changes can take a few minutes.
A DNS TXT record
or a file on your website
Graphs
Upload a version
YAML or JSON in schema v0.4. The graph's name is placed in your private or public namespace by the choice below. Each upload is checked: structure, the floor and foundation guards, references, sources, your tests and an impact preview. Add tests: [{proposition, expect}] so changes that alter your verdicts are caught.
Private graphs
Graphs with an id under are private. They are sealed at rest, never listed, and only your organisation's agents can consult them. Each version needs two different approvers, then the private registry authority signs it. A private graph names the public graphs it sits under (sits_under) and can only tighten them.
Agents
Log salt (owners and auditors)
Replay set
Your own test cases for a private graph, for example your red-team set. Every new version runs the whole set before it can be approved, and the result is part of what each approver signs. Up to 500 cases: [{proposition, expect}].
Out of purpose
When one of your agents consults on an action outside the purpose it declared. Observe-mode consults are only counted.
Insight
Loading...
Review queue
Escalations from your organisation's agents wait here for a person. The request text is not kept by the service: it went once to the systems your owner connected, and the agent has it.
Loading...
Pilot report
Your organisation's evidence for the period: decisions, what your own guardrails missed in observe mode, escalations, holds, latency, availability and how stable the verdicts were. Counts and rates only.
Verified assessment
Loading...
AI Trust Marks
A mark says that one of your agents, in one region and domain, checks its actions against a signed graph and that its decisions are on the record. Its status is read live from that record. How marks work
Loading...
Issue a mark
Connected systems
Escalations go to your work queues as signed cases (ServiceNow, Jira, Workday, or any https endpoint), and notices go to Slack or Teams. Adding one is confirmed with your passkey. Addresses are sealed at rest and shown masked.
Connect a system
Export to your security monitoring (SIEM)
A read-only token for , as NDJSON or CEF, oldest first with a cursor (after=). It reads decision records, never request text.
Single sign-on
Connect Entra ID, Okta or another OpenID Connect provider for console sign-in. Register as the redirect URI of a web application. Each member links their identity once. People still decide cases and make changes with their passkey.
Sign in with your organisation
Members
Invite a member
Confirm an assessor appointment
In the Signing Authority, a second owner confirms each assessor another owner invited. Paste the code from their invitation link (after #invite=).