Attest

Attest, from AttestHQ, is an agent operating system that attests every action taken by an agent, human, or tool with attribution, policy gates, and an immutable decision-log. It is local-first and multi-tenant, with a core the vendor describes as open source. The project is currently running an Alpha program for design partners.

What It Is

Attest is a governance-focused runtime for agent workloads. Attribution, policy gates, and the decision-log are kernel primitives enforced before an action dispatches, not added afterward. The vendor says these controls gate action dispatch.

How the governance record works

The homepage shows decision-log entries that record which gates passed (such as role_based and human_approval), the acting agent and task, and a hash chained to the previous entry. The documented policy gates are human_approval, role_based, and compliance_mapping. Tenants are isolated with a schema-per-tenant design. Compliance mappings link regulation to policy gate to decision-log evidence for SOX §404, HIPAA §164.312, and GDPR Art. 25/32.

Setup path

The homepage outlines three steps: initialize with npx attest-core init, write and turn on Trust Center rules, and have agents follow them through helpers, wrappers, and AGENTS.md.

Current Status

The vendor says the MVP is complete, with 83 tests passing and a clean typecheck. The Alpha program seeks 3–5 design partners to run one production workload on self-hosted Attest Core for four weeks, with a compliance mapping drafted against their workload and regulation. A Control Plane is on the roadmap.

Availability and licensing limits

The official site invites alpha design partners but does not publish a program price or a verifiable core license or repository link. The /docs link currently renders the same landing-page content rather than API documentation, so it is not listed as a working documentation resource. The vendor’s compliance mappings are product claims, not certifications or a guarantee of regulatory compliance.