The Aero family

What each one holds

Public

• aero-agent-skills

  The corpus of leaf skills and the sealing code

• aero-agent-roles

  The engineering roles and the leaf skills each one binds

• aero-harness-records

  The calibration registry, the dated log of every proof, and the public evidence log

• arcs-conformance

  ARCS-1, the Agent Run Conformance Specification, which is the aerospace profile of Trust, Runtime Attestation and Compliance Evidence (TRACE (Trust, Runtime Attestation and Compliance Evidence)): its one canonical copy, and the test suite that grades an implementation against it

Private

• The runtime

  Private. Not published, and not linked from any public page.

  The runtime: the execution engine, the confinement, the reviewer and the issuance machinery

• The held-out negative controls

  Private. Not published, and not linked from any public page.

  The held-out negative controls, kept apart from the gates they grade

• The market analysis and the route-to-market note

  Private. Not published, and not linked from any public page.

  The market analysis and the route-to-market note, kept apart from every product's source

Outside

• European Space Agency requirement export

  The European Space Agency's published export mapping requirement identifiers to clauses. Not ours, never republished

• Time-stamp authorities

  Outside services that sign a statement that a digest existed at an instant, and the national trusted list that names the qualified ones

• The customer's matrix

  The applicability, compliance and verification matrices a customer already keeps. Not ours, and never held here

What connects them

In the order the runtime's own map keeps them.

• aero-agent-roles to aero-agent-skills public

  Each role's bound leaf skills

  Pinned by

  Slug resolution in the skills corpus

  Held red by

  gate-bindings

• aero-agent-skills to The runtime public to private

  The corpus, handed in by path at issue time

  Pinned by

  Content hash recorded in the record's corpora field

  Held red by

  determinism gate-isolation

• aero-agent-roles to The runtime public to private

  The roles and the tools they request

  Pinned by

  Reconciled to the smaller of the ceiling and the request

  Held red by

  gate-permissions

• aero-agent-skills to The runtime public to private

  The attestation format and the Ed25519 (Edwards-curve Digital Signature Algorithm using Curve25519) signing code

  Pinned by

  Handed in by path and never copied in; the verifier kit copies it at build time

  Held red by

  gate-spec

• The runtime to arcs-conformance private to public

  The canonical specification directory: the specification, the specimen record and the trust anchor

  Pinned by

  Byte-for-byte copy with published SHA-256 (Secure Hash Algorithm 256-bit) sums; the suite pins the SHA-256 of the text it grades

  Held red by

  gate-spec-mirror conformance-suite-ci

• arcs-conformance to aero-agent-skills public

  Where the canonical specification lives: named in the related-repositories block, and in a pointer file carrying one edition and its SHA-256

  Pinned by

  The block is rendered from this map; an edition's SHA-256 never changes once it is published

  Held red by

  gate-family

• The held-out negative controls to The runtime private

  The held-out negative controls

  Pinned by

  One digest per gate target in contract/heldout.csv

  Held red by

  gate-heldout

• The runtime to aero-harness-records private to public

  The calibration registry, the dated proof log, the countermand policy and the public evidence log

  Pinned by

  Rebuilt from the tree; published SHA-256 sums

  Held red by

  gate-records-mirror records-verify-ci

• European Space Agency requirement export to The runtime from outside

  Requirement identifiers, never requirement text

  Pinned by

  The export's own SHA-256; each reader regenerates the index

  Held red by

  trace gate-claims

• Time-stamp authorities to The runtime from outside

  Time-stamp tokens, and qualified status read from a national trusted list

  Pinned by

  An anchor file of authority certificates; trusted-list units

  Held red by

  verify-timestamp tsa-probe

• The runtime to The customer's matrix per engagement

  The customer's own matrices, and the observation archive on exit

  Pinned by

  Published requirement identifiers; the exit formats the engagement terms document

  Held red by

  matrix

Terms

Ed25519

Edwards-curve Digital Signature Algorithm using Curve25519. The signature algorithm the issuing key uses.

SHA-256

Secure Hash Algorithm 256-bit. A function that turns any file into a 64-character fingerprint. Two different files practically never share one, so quoting the fingerprint pins the file.

TRACE

Trust, Runtime Attestation and Compliance Evidence. The open specification for a signed record of what a software agent ran, where, under which policy and calling which tools. The Agent Run Conformance Specification, ARCS-1, is a profile of it and adds only what an aerospace claim needs.

Where this page comes from

Nothing on this page is typed by hand. It is built from family.json, which the runtime publishes in its public records repository, at commit ca6e2c940ebffe2d4054584b167473350957dce7. The file's SHA-256 (Secure Hash Algorithm, 256-bit) digest is 2decc491dacfe4ef8c8efd89e1cdbf44226ace5c6b28e3f5014f28cfeae889c2, and it matches the line for it in that commit's SHA256SUMS, which was checked before this page was built.