Zero Trust Execution Lineage

Key Trust.
Verified Lineage for AI.

Zero Trust execution lineage for AI agentic workflows. Cryptographically signed audit trails via Merkle DAG Passports and policy-as-code enforcement (OPA/Cedar).

Get Started Read the Spec

Kest — cryptographic lineage visualization

Latest Signal

Kest v0.3.0 — Cryptographic Lineage

SPIFFE identity, OPA/Cedar policy evaluation, and Merkle DAG audit trails.

View Changelog Get Started

Developer Guide

Getting Started

Secure your first Python microservice with cryptographic identity and verifiable execution in under 10 minutes.

Explore →

Architecture

Design Specification

Deep-dive into the Secret Zero problem, Merkle DAG lineage, ABAC policy enforcement, and edge case handling.

Explore →

Documentation

Technical Guides

Developer Guide

Getting Started with Kest

Securing Execution (Decorators)

Distributed Context Propagation

View all 11 guides

Architecture

Core Concepts

Workload Identity (SPIFFE)

Replace static API keys with dynamically rotated X509-SVIDs.

Cryptographic Lineage

Merkle DAGs over OpenTelemetry baggage. Every hop is signed via JWS.

Policy as Code (OPA/Cedar)