From e519c04dd8f9c03bbc3d72f73ff2acf817c3a952 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Tue, 8 Sep 2026 11:02:57 -0700 Subject: [PATCH] Link WCM launch page to public source and documentation Signed-off-by: Imran Siddique --- wcm/index.html | 12 ++++++------ wcm/launch-page.test.js | 18 +++++------------- 2 files changed, 11 insertions(+), 19 deletions(-) diff --git a/wcm/index.html b/wcm/index.html index 1739aad..aff7fb3 100644 --- a/wcm/index.html +++ b/wcm/index.html @@ -69,7 +69,7 @@

Make model-weight release
conditional on an approved runtime

See the release path
Pre-1.0 · Example tested with SDK 0.27.0 · Software demo, no hardware isolation
-

The SDK and demos are public. The specification repository is still private; see release availability.

+

The specification, SDK and conformance suite are public. Read the documentation or contribute on GitHub.

@@ -269,7 +269,7 @@

What the demo proves, and what deployment requires

Four ways into the release

Model owners

Evaluate a closed-weight deployment and pressure-test the release policy against your actual threat model.

Evaluate a deployment →
-

Runtime and cloud teams

Add or review an attestation profile and prove what your protected boundary can support.

Follow the release →
+

Runtime and cloud teams

Add or review an attestation profile and prove what your protected boundary can support.

Contribute a profile →

Standards contributors

Review the manifest, portable evidence, conformance levels, and interoperability boundaries.

Join the review →
@@ -277,13 +277,13 @@

Four ways into the release

Status -

What is available now, and what is coming

+

Public source and documentation

Available publicly: the Python SDK on PyPI, its bundled conformance vectors, the demos repository, and integration examples. The instructions above use SDK 0.27.0; later releases may change the API or expected results.

-

Not yet a public repository: the specification and its development history remain in private pre-standardization. Request a review through the links above. This page does not promise a release date or production readiness.

-

Open protocol, implementation ecosystem. The specification, schema, conformance suite, reference SDK, threat model, and reference key-release service will be released under Apache-2.0. Vendors may build interoperable hosted services and protected-runtime implementations.

+

Public since September 8, 2026: the specification repository includes the source, schemas, conformance suite, threat model and contribution guide. Browse the documentation. WCM remains pre-1.0; public availability does not establish production readiness.

+

Open protocol, implementation ecosystem. The specification, schema, conformance suite, reference SDK, threat model, and reference key-release service are available under Apache-2.0. Vendors may build interoperable hosted services and protected-runtime implementations.

Install the SDK - Follow the org on GitHub + Browse the source
diff --git a/wcm/launch-page.test.js b/wcm/launch-page.test.js index 5f50e3d..40f2d79 100644 --- a/wcm/launch-page.test.js +++ b/wcm/launch-page.test.js @@ -39,19 +39,11 @@ assert.ok( 'the zeroization limitation must stay disclosed' ); -// Nothing on a public page may link into the WCM repository while it is private. -// Every such link 404s for an anonymous reader, which is precisely the audience -// a launch page has. The same rule is enforced for integration READMEs in -// agentrust-io/integrations CONTRIBUTING.md; this is the check for the site. -// When the repository goes public (weight-custody-manifest#40), delete this. -const privateRepoLinks = [...html.matchAll( - /https:\/\/github\.com\/agentrust-io\/weight-custody-manifest[^"'\s]*/g -)].map((match) => match[0]); -assert.deepEqual( - privateRepoLinks, - [], - `these 404 for anonymous readers while the repo is private: ${privateRepoLinks.join(', ')}` -); +// Public launch links must replace the pre-release availability notice. +assert.ok(html.includes('https://github.com/agentrust-io/weight-custody-manifest')); +assert.ok(html.includes('https://wcm.agentrust-io.com/')); +assert.ok(!html.includes('specification repository is still private')); +assert.ok(!html.includes('Not yet a public repository')); assert.ok(html.includes('/wcm/og-launch.png')); const socialCard = fs.readFileSync(path.join(here, 'og-launch.png')); assert.ok(socialCard.length > 100_000);