Testament

Testament is the open sovereign intelligence trust-and-safety plane.

It is a public project for retaining authorized LLM and agent traces in organization-controlled infrastructure, analyzing that evidence, and applying local policy. Exact accepted source bytes remain authoritative. Formats such as OpenTelemetry, OpenInference, provider events, and framework traces are adapters rather than the canonical record.

The project is in its research and standards foundation milestone. Production implementation remains blocked until the immutable research candidate and evidence manifest pass objective research exits, a formal Factory Level 5 report evaluates that candidate, and ordinary technical/readiness validators pass. No research seal exists. Independent human review was not completed in-mission and remains a non-blocking post-mission follow-up.

Quick start

Install the exact bootstrap versions in policy/toolchain.json, then run:

make setup
make agent-ready

Setup verifies pinned tools and starts no service. Use make dev only when PostgreSQL is needed. The complete command and recovery map is in docs/workflows.md; unfamiliar agents should also read AGENTS.md, the agent guide, and the scoped repository skills.

Start here

• Project charter: purpose, scope, non-goals, authority, and milestone boundaries.
• Terminology: the terms used by project contracts.
• Claims and limitations: what public project statements may and may not say.
• Licensing: Apache-2.0 policy and artifact inventory.
• Machine-readable artifact inventory
• Machine-readable claims policy
• Claims-evidence ledger
• Standards source status
• Normative source and conformance-input inventory
• Governance: authority, decisions, appeals, amendments, and releases.
• Maintainers: current roles and contact paths.
• Security: private reporting, response targets, disclosure, safe harbor, and emergencies.
• Contributing: sign-off, branches, tests, documentation, generated files, and review.
• RFC lifecycle and index
• ADR lifecycle and index
• Governance source record
• Machine-readable governance lifecycle
• Naming search and conditional decision
• Milestone 1 research registry
• Machine-readable research manifest
• Prototype claim-to-result ledger
• Clean-clone prototype reproduction
• Threat, privacy, and sovereignty research
• Machine-readable repository contracts
• Generated contract index
• Pinned environments and services
• Remote contribution, protection, CI, and maintenance

Verify this foundation

make test-gate

The command validates the Apache-2.0 text, checks that all artifact classes are accounted for, rejects prohibited core dependency licenses, confirms required limitations are public, scans for forbidden overclaims, and validates governance, security, contribution, RFC, ADR, naming, and research lifecycle records. It also proves reverse claim-to-evidence coverage and rejects informative or uninventoried conformance inputs.

License

Testament is licensed under the Apache License 2.0. Third-party materials retain their own compatible terms and required notices.