Agent Authority Standards Institute the standard that can prove what it says

What “GAA-conformant” means

An implementation is GAA-conformant if, for the verbs in its declared scope, it:

  1. enforces the deny-by-default controls (capability, egress, human ratification, limit/policy) before execution (C1–C4);
  2. seals every governed decision into a tamper-evident chain (C5);
  3. exposes examiner re-derivation of any decision to an independent party (C6);
  4. keeps the executing model, broker, or venue behind a swappable adapter (C7);
  5. expresses the Principal, the Mandate, and each agent's class, and routes any cross-Principal interaction through Governed Mediation (§1, §2);
  6. composes authority by deny-unless-permit, evaluates all applicable 2-axis limits most-restrictive-wins, keeps delegation narrow-only with fresh-read revocation, and can serve a decision over the AuthZEN 4-tuple with the ratification and seal obligations (§2A).

Conformance is defined by these published criteria. The specification does not require, endorse, or bundle any particular implementation. There is one conformance path, and the founder's reference implementation enters it by the same criteria as any other implementation — same doors, no first-party privilege.

Claiming conformance

At present, conformance is by honest self-attestation against the published criteria. There is no AASI certification program yet, and no implementer may state or imply that AASI has certified, endorsed, tested, or approved a product. An implementer that describes a product as “GAA-conformant” is making its own representation, for which it — not AASI — is responsible.

An honest conformance statement:

  • names the specification version it conforms to (for example, “conformant to GAA §2A, v0.4”);
  • states which sections it implements, and does not imply sections it does not;
  • distinguishes mechanism from product where its own posture is a demonstration (it does not present simulated or demo results as production results);
  • states adversarial-evaluation results, if any, as “0 bypasses in N attempts” with the real N — never as an unqualified safety claim.

What “GAA-conformant” does not grant

Describing a product as “GAA-conformant” is a factual claim about the product against the criteria. It does not grant any right in the AASI or GAA wordmarks beyond the nominative reference permitted by the wordmark policy (/wordmark), and it does not imply membership, sponsorship, or endorsement.