# Verified Digital Agents (VDA)

> Governance for AI agents that you can prove. Write the rules your agents follow —
> versioned and reviewed like code — and seal every governed decision to a tamper-evident
> record, so you can show what governed a decision after the fact. VDA is a composable set
> of governance blocks: each is useful on its own, they are stronger composed, and you can
> start with one.

Governance lives in plain Markdown and git, so VDA governs best-of-breed agents from any
provider or framework under the same rules — no lock-in, no rewrites.

## The model

Git holds the rules. Witness holds the events. Everything else sits between them.

## The blocks (composable — honest status as of 2026-07)

- **Witness** — Seals decisions to a tamper-evident, hash-chained record. The Anchored tier
  commits the trail to external transparency logs (Sigstore Rekor + RFC-3161 TSAs), making it
  provable even against VDA. Status: LIVE. Surface: signed A2A card + live MCP server.
- **C2MD** — Turns compliance standards into governance your agents can follow, and generates
  audit-ready documentation. Status: LIVE. Surface: signed A2A card + A2A skills (no MCP surface).
- **ACP (Agent Control Plane)** — Governance lives in version control; changes are authored with
  a Compliance Guard, adversarially tested, and signed before agents get them; authority is read
  from git (CODEOWNERS + branch protection). Status: LIVE — federated human-approval identity
  (customer IdP) rolling out. Surface: signed A2A card + REST (MCP planned, not live).
- **Onboarding** — Admits agents into a governed environment and issues verifiable credentials.
  Status: LIVE — deeper evaluation phases rolling out (a credential attests intake + issuance,
  NOT a completed multi-phase evaluation). Surface: signed A2A card + A2A skills; admission tools
  are exposed over the Witness MCP (no MCP endpoint of its own).
- **Human in the loop (HITL)** — Your rules set what an agent does on its own and what comes to a
  person; anything beyond the limits is surfaced for a human decision, and the decision is sealed.
  Status: in production via the hospitality flagship. No standalone A2A card or MCP surface yet —
  accessed via the deployment it runs in; a composable surface comes when the substrate is extracted.

## Reporting

VDA turns the sealed trail into audit-ready artefacts: EU AI Act Article 12 evidence reports
(Witness generates these from your records) and DPIA packs under GDPR Article 35 — built from the
sealed record of a real run, not a template. Examples (demo data):

- EU AI Act conformance summary: https://getvda.ai/samples/northwind-eu-ai-act.html
- GDPR Art. 35 DPIA: https://getvda.ai/samples/northwind-dpia.html

Tier note: the free self-serve Sealed tier is tamper-evident and independently verifiable offline
but is NOT externally anchored — "provable even against VDA" applies only to the Anchored tier.

## Get going (MCP / agent-first)

Witness runs a live MCP server — the standard way agents connect to tools. Add it to your agent
and drive it in plain language:

- MCP server: https://witness.getvda.ai/api/witness/mcp
- No key needed to discover tools, verify a record, or mint a free key (get_test_key).
- Sealing writes to your account, so set that free key as the connector's token once.
- Free Sealed tier: 5,000 seals/month, every record Ed25519-signed + hash-chained + verifiable offline.

## Sibling service cards (discover the composable suite)

- Witness (signed A2A card): https://witness.getvda.ai/.well-known/agent-card.json
- Witness DID document: https://witness.getvda.ai/.well-known/did.json
- Witness OpenAPI: https://witness.getvda.ai/openapi.json
- C2MD (signed A2A card): https://c2md.getvda.ai/.well-known/agent-card.json
- ACP (signed A2A card): https://acp.getvda.ai/.well-known/agent-card.json
- Onboarding (signed A2A card): https://onboard.getvda.ai/.well-known/agent-card.json

## Links

- Homepage: https://getvda.ai/
- Interactive demo (watch a governed run): https://getvda.ai/demo
- Try your own governance: https://getvda.ai/try-your-own
- Hospitality flagship console (live Apaleo): https://getvda.ai/console
- This site's discovery card: https://getvda.ai/.well-known/agent-card.json

## Honesty

Generated compliance artefacts follow a lifecycle: DEMO DATA (showcase runs) -> DRAFT (a real
Compliance Officer is attached) -> ATTESTED (post sign-off). They are audit-preparation drafts,
not a finished regulatory filing until attested. VDA produces the evidence and controls that
support compliance; it does not itself deliver legal compliance.

## Contact

To book a governance demo, use the "Book a governance demo" button on the homepage (the contact
address is assembled in the browser to deter scraping).