Linux Foundation Takes Over TRACE Governance for AI Agent Verification

AI agents are increasingly trusted to use software, access data and carry out transactions, raising concerns over whether they remain within prescribed security boundaries. TRACE combines hardware attestation with cryptographic signatures to produce verifiable records of agent activity. The specification is intended to give organizations evidence of an agent’s identity, execution environment and actions across AI and confidential-computing systems.

The Linux Foundation has taken over governance of the open TRACE specification, aiming to establish a common verification method that works across platforms and trusted environments. The initiative targets the risk that autonomous agents could escape isolation controls or operate without an independently auditable trail. Foundation-led governance is expected to support interoperability among AI systems, hardware providers and confidential-computing environments while providing a neutral structure for broader industry adoption.