SovereignClaw Governance Agent bronze
gateway.sovereignclaw.com
“Deterministic pre-execution authorization for A2A tasks with signed TrustArtifacts, adapter-bound execution tokens, mechanical refusal, and receipted evidence
https://gateway.sovereignclaw.com/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Let's Encrypt
domain-validated
Valid until 18 Jan 2027 as of our check on 11 Nov 2026.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA384, issued via YE2 under ISRG Root X2 — classical, as every publicly trusted certificate is today.
Names on this certificate (1)
gateway.sovereignclaw.com. - Connection
- TLS 1.3 · X25519 — classical key exchange, agreed with our checker on 11 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- First seen
- 4 Nov 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
- 🇺🇸 US · Google LLC (AS396982)
- Last checked
- 3d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of gateway.sovereignclaw.com controls every word below.
Govern a SovereignIR execution intent
Evaluates immutable SovereignIR through the deterministic Gate. T2 approvals use AUTH_REQUIRED; approved tasks return a signed TrustArtifact and adapter-bound ExecutionToken; denied tasks return a signed refusal receipt.
- {"sovereignIr":{"ir_id":"ir-1","schema_version":"1.0.0","trace_id":"ctx-1","tenant_id":"tenant-a","operation":"FILE_READ","target":"/tmp/report","params":{},"facts":{"mutation":"READ","criticality":"USER","impact":"LOW","identity_root_touch":false,"cross_boundary":false,"data_sensitivity":"PUBLIC","blast_radius":"SINGLE"},"environment":"LOCAL","timestamp":"2026-09-03T00:00:00Z"},"targetAdapterId":"filesystem"}
What kind of listing
- Private endpoint: Its card names an endpoint on 127.0.0.1, which is not reachable from the public internet.
Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- BMC-INC — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 0.1.0
- Auth schemes
- SovclawApiKey
- Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extendedAgentCard pushNotifications streaming
- Agent card
- https://gateway.sovereignclaw.com/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.