docs: link control catalog to specification sections

data/agentic-controls.json

@@ -73,7 +73,13 @@
           "name": "Model action privilege minimization",
           "url": "https://www.opencre.org/cre/220-442"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "name": "cA2A",
+        "topic": "capability attenuation",
+        "url": "https://ca2a.agentrust-io.com/docs/spec/delegation-chain/#ca2a-delegation-verification"
+      }
     },
     {
       "id": "AT-04",
@@ -95,7 +101,13 @@
           "name": "AI user transparency",
           "url": "https://www.opencre.org/cre/810-884"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "name": "Agent Manifest",
+        "topic": "declared intent",
+        "url": "https://manifest.agentrust-io.com/spec/agent-manifest-v0.2/#am-declared-intent"
+      }
     },
     {
       "id": "AT-05",
@@ -158,7 +170,13 @@
           "name": "Audit & accountability",
           "url": "https://www.opencre.org/cre/217-168"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "name": "TRACE",
+        "topic": "evidence record format",
+        "url": "https://trace.agentrust-io.com/docs/schema/#trace-schema"
+      }
     },
     {
       "id": "AT-08",
@@ -408,7 +426,13 @@
           "name": "Sanitization and sandboxing",
           "url": "https://www.opencre.org/cre/764-765"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "name": "cMCP",
+        "topic": "tool authorization",
+        "url": "https://cmcp.agentrust-io.com/spec/cedar-policy/#cmcp-policy-evaluation"
+      }
     },
     {
       "id": "AT-18",
@@ -614,7 +638,13 @@
           "name": "Runtime model integrity controls",
           "url": "https://www.opencre.org/cre/276-748"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "name": "TRACE",
+        "topic": "hardware evidence",
+        "url": "https://trace.agentrust-io.com/docs/trust-levels/#trace-l1"
+      }
     },
     {
       "id": "AT-27",
@@ -631,7 +661,13 @@
           "name": "Log integrity",
           "url": "https://www.opencre.org/cre/148-420"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "name": "TRACE",
+        "topic": "transparency anchoring",
+        "url": "https://trace.agentrust-io.com/docs/trust-levels/#trace-l2"
+      }
     },
     {
       "id": "AT-28",
@@ -653,7 +689,13 @@
           "name": "Mutually authenticate application components",
           "url": "https://www.opencre.org/cre/530-671"
         }
-      ]
+      ],
+      "spec": {
+        "status": "public",
+        "name": "cA2A",
+        "topic": "channel attestation and key custody",
+        "url": "https://ca2a.agentrust-io.com/docs/spec/sealed-channel/#ca2a-channel-key-custody"
+      }
     },
     {
       "id": "AT-29",
@@ -688,7 +730,7 @@
       "slug": "model-weight-custody",
       "name": "Model weight custody against the hosting operator",
       "enforcement_points": [],
-      "requirement": "Model weights released into infrastructure the model owner does not control remain under the owner's custody, including against the infrastructure operator.",
+      "requirement": "Model weights are released only to a runtime that satisfies the signed release policy. Custody claims state the required platform protections and residual operator trust; physical ownership of the hardware is outside the base custody guarantee.",
       "permalink": "https://agentrust-io.com/go/model-weight-custody/",
       "opencre": [
         {
@@ -709,9 +751,9 @@
       ],
       "spec": {
         "status": "public",
-        "topic": "model weight custody",
         "name": "Weight Custody Manifest",
-        "url": "https://wcm.agentrust-io.com/"
+        "topic": "model weight custody",
+        "url": "https://github.com/agentrust-io/weight-custody-manifest/blob/main/SPEC.md#wcm-guarantee-scope"
       }
     }
   ]

go/index.html

@@ -138,6 +138,7 @@ <h4 id="capability-attenuation"><span class="meta">AT-03</span> Capability atten
     <span class="tag">pre_tool_call</span> 
     <p>A grant passed to a sub-agent is a subset of the grant it derives from. Delegation depth is bounded and no hop may widen scope.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/123-124">Minimize permissions</a> <a class="tag quiet" href="https://www.opencre.org/cre/220-442">Model action privilege minimization</a></p>
+    <p class="meta">Related specification: <a href="https://ca2a.agentrust-io.com/docs/spec/delegation-chain/#ca2a-delegation-verification">cA2A</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/capability-attenuation/</code></p>
   </div>
 
@@ -146,6 +147,7 @@ <h4 id="agent-purpose-declaration"><span class="meta">AT-04</span> Declared agen
 
     <p>The agent declares its purpose and the boundary of its task in a form a policy engine can read, not only a form a person can read.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/162-655">Documentation of all components&#x27; business or security function</a> <a class="tag quiet" href="https://www.opencre.org/cre/810-884">AI user transparency</a></p>
+    <p class="meta">Related specification: <a href="https://manifest.agentrust-io.com/spec/agent-manifest-v0.2/#am-declared-intent">Agent Manifest</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/agent-purpose-declaration/</code></p>
   </div>
 
@@ -172,6 +174,7 @@ <h4 id="verifiable-evidence-record"><span class="meta">AT-07</span> Signed, thir
 
     <p>The action record is signed so that a party who does not trust the operator of the log can still verify who acted and what was decided.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/148-420">Log integrity</a> <a class="tag quiet" href="https://www.opencre.org/cre/217-168">Audit &amp; accountability</a></p>
+    <p class="meta">Related specification: <a href="https://trace.agentrust-io.com/docs/schema/#trace-schema">TRACE</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/verifiable-evidence-record/</code></p>
   </div>
 
@@ -256,6 +259,7 @@ <h4 id="tool-authorization"><span class="meta">AT-17</span> Tool authorization d
     <span class="tag">pre_tool_call</span> 
     <p>Every tool call is an authorization decision made outside the model against the agent&#x27;s granted scope, not a decision the model makes about itself.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/220-442">Model action privilege minimization</a> <a class="tag quiet" href="https://www.opencre.org/cre/128-128">Strong authorization checking</a> <a class="tag quiet" href="https://www.opencre.org/cre/764-765">Sanitization and sandboxing</a></p>
+    <p class="meta">Related specification: <a href="https://cmcp.agentrust-io.com/spec/cedar-policy/#cmcp-policy-evaluation">cMCP</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/tool-authorization/</code></p>
   </div>
 
@@ -332,6 +336,7 @@ <h4 id="runtime-attestation-evidence"><span class="meta">AT-26</span> Runtime at
     <span class="tag">agent_startup</span> 
     <p>Evidence of what is actually executing is produced by the platform at startup and appraised by a relying party that does not control that platform.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/307-507">Allow only trusted sources both build time and runtime; therefore perform integrity checks on all resources and code</a> <a class="tag quiet" href="https://www.opencre.org/cre/276-748">Runtime model integrity controls</a></p>
+    <p class="meta">Related specification: <a href="https://trace.agentrust-io.com/docs/trust-levels/#trace-l1">TRACE</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/runtime-attestation-evidence/</code></p>
   </div>
 
@@ -340,6 +345,7 @@ <h4 id="evidence-transparency-anchoring"><span class="meta">AT-27</span> Transpa
 
     <p>Evidence records are anchored in an append-only log so a record cannot be rewritten after the fact without detection.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/148-420">Log integrity</a></p>
+    <p class="meta">Related specification: <a href="https://trace.agentrust-io.com/docs/trust-levels/#trace-l2">TRACE</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/evidence-transparency-anchoring/</code></p>
   </div>
 
@@ -348,6 +354,7 @@ <h4 id="attested-a2a-channel"><span class="meta">AT-28</span> Attested agent-to-
 
     <p>An agent-to-agent channel establishes what the peer is, not only that the channel is encrypted, before scope is passed across it.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/634-733">Communication authentication</a> <a class="tag quiet" href="https://www.opencre.org/cre/530-671">Mutually authenticate application components</a></p>
+    <p class="meta">Related specification: <a href="https://ca2a.agentrust-io.com/docs/spec/sealed-channel/#ca2a-channel-key-custody">cA2A</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/attested-a2a-channel/</code></p>
   </div>
 
@@ -362,9 +369,9 @@ <h4 id="continuous-usage-control"><span class="meta">AT-29</span> Continuous usa
   <div class="card" style="margin-top:1.5rem;">
     <h4 id="model-weight-custody"><span class="meta">AT-30</span> Model weight custody against the hosting operator</h4>
 
-    <p>Model weights released into infrastructure the model owner does not control remain under the owner&#x27;s custody, including against the infrastructure operator.</p>
+    <p>Model weights are released only to a runtime that satisfies the signed release policy. Custody claims state the required platform protections and residual operator trust; physical ownership of the hardware is outside the base custody guarantee.</p>
     <p class="meta">Common Requirements: <a class="tag quiet" href="https://www.opencre.org/cre/805-126">Runtime model confidentiality controls</a> <a class="tag quiet" href="https://www.opencre.org/cre/883-173">Model hosting supply chain mannagement</a> <a class="tag quiet" href="https://www.opencre.org/cre/852-770">AI model supply chain management</a></p>
-    <p class="meta">Specification: <a href="https://wcm.agentrust-io.com/">Weight Custody Manifest</a></p>
+    <p class="meta">Related specification: <a href="https://github.com/agentrust-io/weight-custody-manifest/blob/main/SPEC.md#wcm-guarantee-scope">Weight Custody Manifest</a></p>
     <p class="meta">Permalink: <code>https://agentrust-io.com/go/model-weight-custody/</code></p>
   </div>
 

go/model-weight-custody/index.html

@@ -5,13 +5,13 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Model weight custody against the hosting operator | AgenTrust Agentic Controls</title>
-<meta name="description" content="Model weights released into infrastructure the model owner does not control remain under the owner&#x27;s custody, including against the infrastructure operator.">
+<meta name="description" content="Model weights are released only to a runtime that satisfies the signed release policy. Custody claims state the required platform protections and residual operator trust; physical ownership of the hardware is outside the base custody guarantee.">
 <link rel="canonical" href="https://agentrust-io.com/go/#model-weight-custody">
 <meta name="robots" content="noindex, follow">
 <meta property="og:type" content="website">
 <meta property="og:site_name" content="AgenTrust">
 <meta property="og:title" content="Model weight custody against the hosting operator">
-<meta property="og:description" content="Model weights released into infrastructure the model owner does not control remain under the owner&#x27;s custody, including against the infrastructure operator.">
+<meta property="og:description" content="Model weights are released only to a runtime that satisfies the signed release policy. Custody claims state the required platform protections and residual operator trust; physical ownership of the hardware is outside the base custody guarantee.">
 <meta property="og:url" content="https://agentrust-io.com/go/#model-weight-custody">
 <meta property="og:locale" content="en_US">
 <meta property="og:image" content="https://agentrust-io.com/og.png">
@@ -20,7 +20,7 @@
 <meta property="og:image:alt" content="AgenTrust: open specifications for verifiable AI">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:title" content="Model weight custody against the hosting operator">
-<meta name="twitter:description" content="Model weights released into infrastructure the model owner does not control remain under the owner&#x27;s custody, including against the infrastructure operator.">
+<meta name="twitter:description" content="Model weights are released only to a runtime that satisfies the signed release policy. Custody claims state the required platform protections and residual operator trust; physical ownership of the hardware is outside the base custody guarantee.">
 <meta name="twitter:image" content="https://agentrust-io.com/og.png">
 <link rel="icon" href="/favicon.ico" sizes="any">
 <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">

tools/build-controls.py

@@ -173,7 +173,7 @@ def card(c):
     ]
     spec = c.get('spec') or {}
     if spec.get('status') == 'public':
-        lines.append(f'    <p class="meta">Specification: <a href="{e(spec["url"])}">{e(spec["name"])}</a></p>')
+        lines.append(f'    <p class="meta">Related specification: <a href="{e(spec["url"])}">{e(spec["name"])}</a></p>')
     lines += [f'    <p class="meta">Permalink: <code>{c["permalink"]}</code></p>', '  </div>']
     return lines