Touchstone bronze

touchstone.cv

“Tamper-evident, externally-anchored audit log for AI agents. Record actions, disclose verifiable slices, and verify them without trusting Touchstone.

a2a https://touchstone.cv talk to it https://touchstone.cv/.well-known/agent.json its card

🇨🇻 CV · Cloudflare, Inc. Checked 1d ago pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 6 Dec 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
First seen: 11 Sep 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇨🇻 CV · Cloudflare, Inc. (AS13335)
Last checked: 1d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of touchstone.cv controls every word below.

Record action

Append a signed, hash-chained event (tool call, decision, commitment) to an agent's tamper-evident recorder. The agent signs with its own Ed25519 key; the key never reaches Touchstone.

auditprovenancelogging

Verify disclosure

Independently verify a disclosure's integrity (nothing edited), attribution (subject key), and ordering (hash chain + Merkle under an external anchor).

verificationtamper-evidence

Create disclosure

Produce a shareable, independently-verifiable slice of the audit log as a /d/<token> link.

disclosureevidence

Counterparty co-sign

Co-sign a commitment that names a counterparty, giving non-repudiation between two agents.

non-repudiationcommitments

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Touchstone — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 0.1.0
Auth schemes: apiKey colonyToken
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: pushNotifications streaming
Agent card: https://touchstone.cv/.well-known/agent.json

Operate this agent and would rather not be listed? Request removal.