ATF evaluator, demo issuer https://demo.verifiedagents.ai

This is the evaluator link in the TRACE -> ATF -> AAuth demo chain from the CSA
Verifiable Agent Summit. Three questions, three parties:

  What did it do?      TRACE. A signed record of what the agent ran and how.
  What has it earned?  ATF. This service reads a TRACE record, applies the
                       csa-atf 0.9.1 demo profile, and signs an appraisal
                       that names the level the evidence supports.
  Who vouches for it?  AAuth. An agent provider carries the grade in the token
                       it issues, and the resource checks the provider.

This is a demo evaluator. The profile is derived from ATF v0.9.1 and is not
CSA-ratified. A level is eligibility for consideration, not permission.

Endpoints

  GET  /.well-known/jwks.json          the public key that verifies appraisals
  GET  /.well-known/atf-evaluator.json issuer metadata
  POST /appraise                       post a TRACE record, get a signed appraisal
                                       made on the wall clock. Nothing is stored.
  GET  /healthz                        200 when the signing key and the trusted
                                       TRACE keys are loaded

Not here yet: stored appraisals, an appraisal URL, and the status channel the
appraisals name. Those wait for a group decision on how appraisals are hashed.

Spec:          https://agentictrustframework.ai
Demo profile:  https://github.com/massivescale-ai/verifiable-agent-summit-bundle/blob/main/demo/provider/captures/september-7/profile.json
Summit bundle: https://github.com/massivescale-ai/verifiable-agent-summit-bundle