TRACE Tests

TRACE Conformance Test Suite

Verify your TRACE implementation before shipping

Full Documentation

Quick Start  |  Test Modules  |  Conformance Levels  |  Changelog

License: Apache 2.0 TRACE Spec Tests CI Discord

Test suite v0.2. Tracks TRACE Spec v0.2.

Conformance tests for TRACE — Trust Runtime Attestation and Compliance Evidence. Run this suite against your implementation to verify it meets the spec before claiming TRACE compliance.

Seven test modules covering the full specification: envelope structure, signature algorithms, TEE runtime claims, policy binding, tool-call transcripts, SCITT transparency anchoring, and supply chain provenance.

Quick start

pip install trace-tests
trace-tests verify --record path/to/trust-record.jwt --level 1

Test modules

Module ID Tests
Envelope TR-ENV EAT structure, required fields, iat validity
Signature TR-SIG ES256/ES384/EdDSA, key binding, chain
Runtime TR-RTE TEE platform, measurement format, RIM URI
Policy TR-POL Bundle hash, enforcement mode, TEE binding
Transcript TR-TXN Tool-call transcript hash binding (Phase 2+)
Transparency TR-ANC SCITT receipt URI, inclusion proof
Provenance TR-SCA SLSA level, builder URI, digest format

Resources
📖 Full documentation tests.agentrust-io.com
📄 TRACE Specification trace-spec
🗂 Test schemas schemas/
💬 Discussions GitHub Discussions
📋 Changelog CHANGELOG.md

Contributing

See CONTRIBUTING.md. New test cases must include a normative spec reference, a positive case, and a negative case with a structured error code (TR-<MODULE>-<NNN>).

Project links

Data verified by PyPI on Jul 15, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.5.0)

2 maintainers

PyPI data
Data sourced directly from PyPI's database.
Avatar for mosiddi from gravatar.com mosiddi Avatar for podcastinator from gravatar.com podcastinator

Credits

Author: agentrust.io

GitHub Statistics

Data verified by PyPI on Jul 15, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Apache-2.0)

Requires

Python >=3.11

Provides Extra

dev test

Tags

ai-agents attestation conformance provenance trace

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

agentrust_trace_tests-0.2.0.tar.gz (44.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

agentrust_trace_tests-0.2.0-py3-none-any.whl (19.0 kB view details)

Uploaded Python 3

File details

Details for the file agentrust_trace_tests-0.2.0.tar.gz.

File metadata

  • Download URL: agentrust_trace_tests-0.2.0.tar.gz
  • Upload date:
  • Size: 44.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for agentrust_trace_tests-0.2.0.tar.gz
Algorithm Hash digest
SHA256 bdcc05806c4aae169ce43354a0f8705a3ae7a37054d758aa92017e4b9531ca38
MD5 266e8026384c52c9cdbbbdd0a276e271
BLAKE2b-256 85bed87a52babb9074fa692d0ca897f1ce2d0a12887397230c6cf2f420a02a6d

See more details on using hashes here.

Provenance

The following attestation bundles were made for agentrust_trace_tests-0.2.0.tar.gz:

Publisher: release.yml on agentrust-io/trace-tests

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file agentrust_trace_tests-0.2.0-py3-none-any.whl.

File metadata

File hashes

Hashes for agentrust_trace_tests-0.2.0-py3-none-any.whl
Algorithm Hash digest
SHA256 fe0e421db8e20358d9b38be99ab21cddd2e332cbb7c2be3e9e0bae3477b82682
MD5 5c0447d93921a72f1c1f441df0e7045c
BLAKE2b-256 9b7746e2a25ed2c31d5b1688b00831c714122d571dfc11a6879b6ac52f352517

See more details on using hashes here.

Provenance

The following attestation bundles were made for agentrust_trace_tests-0.2.0-py3-none-any.whl:

Publisher: release.yml on agentrust-io/trace-tests

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page