Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions wcm/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ <h1>Make model-weight release<br>conditional on an approved runtime</h1>
<a class="button secondary" href="#architecture">See the release path</a>
</div>
<div><span class="status">Pre-1.0 · Example tested with SDK 0.27.0 · Software demo, no hardware isolation</span></div>
<p class="hint">The SDK and demos are public. The specification repository is still private; <a href="#status">see release availability</a>.</p>
<p class="hint">The specification, SDK and conformance suite are public. <a href="https://wcm.agentrust-io.com/">Read the documentation</a> or <a href="https://github.com/agentrust-io/weight-custody-manifest">contribute on GitHub</a>.</p>
</div></div>

<main>
Expand Down Expand Up @@ -269,21 +269,21 @@ <h2>What the demo proves, and what deployment requires</h2>
<h2>Four ways into the release</h2>
<div class="grid-3 wcm-personas">
<article class="card"><h3>Model owners</h3><p>Evaluate a closed-weight deployment and pressure-test the release policy against your actual threat model.</p><a href="mailto:imransiddique@live.com?subject=WCM%20model-owner%20evaluation">Evaluate a deployment →</a></article>
<article class="card"><h3>Runtime and cloud teams</h3><p>Add or review an attestation profile and prove what your protected boundary can support.</p><a href="https://github.com/agentrust-io">Follow the release →</a></article>
<article class="card"><h3>Runtime and cloud teams</h3><p>Add or review an attestation profile and prove what your protected boundary can support.</p><a href="https://github.com/agentrust-io/weight-custody-manifest/blob/main/CONTRIBUTING.md">Contribute a profile →</a></article>
<article class="card"><h3>Security researchers</h3><p>Challenge the threat model, fixtures, hardware assumptions, and explicit non-goals.</p><a href="mailto:imransiddique@live.com?subject=WCM%20threat%20model%20review">Challenge the threat model →</a></article>
<article class="card"><h3>Standards contributors</h3><p>Review the manifest, portable evidence, conformance levels, and interoperability boundaries.</p><a href="mailto:imransiddique@live.com?subject=WCM%20specification%20review">Join the review →</a></article>
</div>
</section>

<section id="status">
<span class="label">Status</span>
<h2>What is available now, and what is coming</h2>
<h2>Public source and documentation</h2>
<p><strong>Available publicly:</strong> the Python SDK on PyPI, its bundled conformance vectors, the demos repository, and integration examples. The instructions above use SDK 0.27.0; later releases may change the API or expected results.</p>
<p><strong>Not yet a public repository:</strong> the specification and its development history remain in private pre-standardization. Request a review through the links above. This page does not promise a release date or production readiness.</p>
<div class="callout"><p><strong>Open protocol, implementation ecosystem.</strong> The specification, schema, conformance suite, reference SDK, threat model, and reference key-release service will be released under Apache-2.0. Vendors may build interoperable hosted services and protected-runtime implementations.</p></div>
<p><strong>Public since September 8, 2026:</strong> the <a href="https://github.com/agentrust-io/weight-custody-manifest">specification repository</a> includes the source, schemas, conformance suite, threat model and contribution guide. <a href="https://wcm.agentrust-io.com/">Browse the documentation</a>. WCM remains pre-1.0; public availability does not establish production readiness.</p>
<div class="callout"><p><strong>Open protocol, implementation ecosystem.</strong> The specification, schema, conformance suite, reference SDK, threat model, and reference key-release service are available under Apache-2.0. Vendors may build interoperable hosted services and protected-runtime implementations.</p></div>
<div style="margin-top:2.25rem;">
<a class="button" href="https://pypi.org/project/weight-custody-manifest/">Install the SDK</a>
<a class="button secondary" href="https://github.com/agentrust-io">Follow the org on GitHub</a>
<a class="button secondary" href="https://github.com/agentrust-io/weight-custody-manifest">Browse the source</a>
</div>
</section>

Expand Down
18 changes: 5 additions & 13 deletions wcm/launch-page.test.js
Original file line number Diff line number Diff line change
Expand Up @@ -39,19 +39,11 @@ assert.ok(
'the zeroization limitation must stay disclosed'
);

// Nothing on a public page may link into the WCM repository while it is private.
// Every such link 404s for an anonymous reader, which is precisely the audience
// a launch page has. The same rule is enforced for integration READMEs in
// agentrust-io/integrations CONTRIBUTING.md; this is the check for the site.
// When the repository goes public (weight-custody-manifest#40), delete this.
const privateRepoLinks = [...html.matchAll(
/https:\/\/github\.com\/agentrust-io\/weight-custody-manifest[^"'\s]*/g
)].map((match) => match[0]);
assert.deepEqual(
privateRepoLinks,
[],
`these 404 for anonymous readers while the repo is private: ${privateRepoLinks.join(', ')}`
);
// Public launch links must replace the pre-release availability notice.
assert.ok(html.includes('https://github.com/agentrust-io/weight-custody-manifest'));
assert.ok(html.includes('https://wcm.agentrust-io.com/'));
assert.ok(!html.includes('specification repository is still private'));
assert.ok(!html.includes('Not yet a public repository'));
assert.ok(html.includes('/wcm/og-launch.png'));
const socialCard = fs.readFileSync(path.join(here, 'og-launch.png'));
assert.ok(socialCard.length > 100_000);
Expand Down
Loading