Posture Attestation Chain

Prove your agent's posture has only held-or-improved — and that no deploy was silently erased.

A single signed scorecard pack proves one point-in-time posture. The drift grader proves the trend. AgentSmack's attestation chain is the durable-evidence leg that binds them: a cryptographically-linked, offline-verifiable, append-only chain of signed scorecard packs. Each link embeds a full signed governance pack, binds its predecessor by a sha256 hash-chain spine plus an Ed25519 signature, and stamps the posture-drift verdict between consecutive deploys. The artifact a CISO actually wants: prove your agent's posture has only held-or-improved since the last signed deploy, and that no link was dropped or reordered. Edit any link to hide a regression and the recomputed content-addressed id breaks the chain; drop a mid-chain deploy and the spine digest no longer matches. Pure, deterministic, migration-free — verify it offline with zero round-trip. Load a sample below.