Standards

The 6 specifications, in plain language.

Each specification below is an individual Internet-Draft, open for review at the IETF. This page says in a paragraph what each one does and why it exists.

Certisyn's founder has published 6 specifications at the IETF as individual Internet-Drafts, open for review. Each addresses a claim being made in a context where nobody could test it. The standards page carries the full status record for each.

Attestation Reconciliation Protocol

draft-hillier-scitt-arp-04. When an autonomous agent acts, someone accountable should stand behind it. This protocol establishes whether one does, by reconciling the agent against sovereign registers while disclosing as little as possible. Every read of the settlement ledger is answered with a signed response, and a read the caller is not entitled to returns the same answer as a read that finds nothing, so no endpoint reveals what exists.

AI Governance Verified

draft-hillier-certisyn-ai-governance-verified-02. Operators say a great deal about how they govern their AI agents. This specification defines the control claims an operator makes and the cryptographic evidence that must exist before a third party can accept them. It sits beside the EU AI Act general-purpose obligations and ISO/IEC 42001, which specify what must be governed. This specification supplies what a third party may verify.

Essential Eight Verified

draft-hillier-certisyn-essential-eight-verified-02. The ACSC Essential Eight is a national security baseline, and maturity against it is asserted by the organisation that holds it. This specification gives a relying party a form in which to test that maturity claim, from evidence, with a public record. The same construction applies to any sovereign framework that names requirements without an instrument to test them.

Coverage Attestation Profile

draft-hillier-coverage-attestation-00. “This message is not present” is a claim about the universe. What was established is a claim about a bounded set of artefacts examined to a stated depth. The profile requires an absence claim to carry the population it is an absence from, refuses a clean verdict from a run that failed or became unavailable partway, and refuses any remainder that reconciles only by arithmetic.

Conformance Continuity

draft-hillier-conformance-continuity-00. A conformance claim names a subject, a baseline and a period, and all 3 move. The Continuity Binding carries a verified claim across one of those boundaries and names what carried, who judged the equivalence and on what basis, and every outcome that did not carry. A claim presented as successor conformance without the binding is detectable by inspection.

Chorale Protocol

draft-hillier-chorale-protocol-00. A transmission protocol for settings that already accept a co-presence setup cost. Its central section is admission control: 3 confidentiality regimes, the keying conditions under which each may be relied upon, and a per-message comparison of the regime a policy requires against the regime the session can achieve. The send refuses when the session cannot meet the floor.

Related