# Attest

> Attest is an open-source-core agent OS that attributes and policy-gates every agent, human, and tool action into an immutable, hash-chained decision-log.

Attest, from AttestHQ, is an agent operating system that attests every action taken by an agent, human, or tool with attribution, policy gates, and an immutable decision-log. It is local-first and multi-tenant, with a core the vendor describes as open source. The project is currently running an Alpha program for design partners.

## What It Is

Attest is a governance-focused runtime for agent workloads. Attribution, policy gates, and the decision-log are kernel primitives enforced before an action dispatches, not added afterward. The vendor says these controls gate action dispatch.

## How the governance record works

The homepage shows decision-log entries that record which gates passed (such as role_based and human_approval), the acting agent and task, and a hash chained to the previous entry. The documented policy gates are human_approval, role_based, and compliance_mapping. Tenants are isolated with a schema-per-tenant design. Compliance mappings link regulation to policy gate to decision-log evidence for SOX §404, HIPAA §164.312, and GDPR Art. 25/32.

## Setup path

The homepage outlines three steps: initialize with npx attest-core init, write and turn on Trust Center rules, and have agents follow them through helpers, wrappers, and AGENTS.md.

## Current Status

The vendor says the MVP is complete, with 83 tests passing and a clean typecheck. The Alpha program seeks 3–5 design partners to run one production workload on self-hosted Attest Core for four weeks, with a compliance mapping drafted against their workload and regulation. A Control Plane is on the roadmap.

## Availability and licensing limits

The official site invites alpha design partners but does not publish a program price or a verifiable core license or repository link. The /docs link currently renders the same landing-page content rather than API documentation, so it is not listed as a working documentation resource. The vendor’s compliance mappings are product claims, not certifications or a guarantee of regulatory compliance.

## Features
- Attribution of every agent, human, and tool action
- Policy gates: human_approval, role_based, compliance_mapping
- Immutable hash-chained decision-log
- Schema-per-tenant multi-tenant isolation
- Local-first runtime
- Compliance mappings for SOX §404, HIPAA §164.312, GDPR Art. 25/32
- Blocks unattested dispatch
- Open-source core

## Platforms
CLI

## Pricing
Paid

## Links
- Website: https://attesthq.dev
- EveryDev.ai: https://www.everydev.ai/tools/attest