Bernstein bronze

www.bernstein.run

“The open-source governance layer for AI agents. CLI coding agents work out of the box (Claude Code, Codex, Gemini CLI, +40 more). No model in the coordination loop, so replaying a plan reproduces its task graph byte-identically. Signed lineage plus an opt-in HMAC audit chain a reviewer checks offline, without rerunning it. Cluster mode, air-gap deploy.

a2a https://bernstein.run/api/a2a talk to it https://www.bernstein.run/.well-known/agent-card.json its card

Checked 5d ago pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 6 Jan 2027 as of our check on 8 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

*.bernstein.run, bernstein.run.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 8 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
AI use policy: Search: yesAI input: yesAI training: yes

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “Bernstein” a curated map of the site's content for language models

Publishes a Web Bot Auth key directory (1 key, EdDSA) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 17 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 5d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of www.bernstein.run controls every word below.

Multi-Agent Orchestration

Orchestrate 40+ CLI coding agents (Claude Code, Codex, Gemini CLI, Aider, and more) against one goal in parallel. Decomposes into tasks, assigns roles, isolates each task in its own git worktree, and gates every merge on lint, types, and tests. Scheduling is plain Python with no LLM in the coordination loop, so a run is reproducible end to end. A lineage spine and replay journal are always on; an opt-in HMAC-chained audit log and signed receipts let a reviewer who did not execute the run check it offline, without rerunning it. Signature and hash-chain checks read the on-disk records alone; the HMAC leg needs the key the chain was written with.

orchestrationmulti-agentcodingautomationdeterministicaudit-trailreproducible-runs

Examples it gives

Add JWT authentication with refresh tokens, tests, and API docs
Refactor the payment module to use Stripe webhooks
Fix all failing CI tests and update deprecated dependencies
Replay last night's run and verify every step against the audit chain

Project Planning

Decompose a project goal into a structured YAML plan with stages, steps, roles, priorities, and dependencies.

planningdecompositionproject-management

Examples it gives

Plan a migration from REST to GraphQL
Create a plan to add i18n support to the frontend

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Bernstein — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 3.22.0
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: pushNotifications stateTransitionHistory streaming
Agent card: https://www.bernstein.run/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.