Overview
- On Tuesday, August 25, the TRACE specification was contributed to the Linux Foundation to provide neutral governance and sustain the project over time.
- TRACE is an open format that records hardware‑attested, cryptographic proof of what AI software ran, which policies were applied, and how data was handled; hardware attestation means a chip or secure module signs claims about the runtime so those claims can be checked independently.
- The specification composes existing standards such as RATS, EAT, SLSA, SCITT, SPIFFE and EAR so a single verifiable artifact can travel with workloads across clouds and confidential computing platforms.
- Founding collaborators include OPAQUE, AMD, Intel, Microsoft and the Technology Innovation Institute, with the Coalition for Secure AI (CoSAI) hosting the technical workstream and reference code and docs published on trace.agentrust-io.com and GitHub.
- TRACE has seen strong early interest — about 135,000 PyPI downloads in its first ten weeks — and now faces wider community review and integration work that will determine how quickly enterprises and regulators can use it for audits and compliance checks.