v0.1.0 — Draft Apache 2.0 Authored by Jèf Davis

The open standard for AI agent governance.

TELEMETRY Trust Events is a runtime-neutral specification for recording what AI agents do at the commerce transaction boundary. Any runtime. Any agent. Any platform.

// Trust Event — v0.1.0 — nine fields, one atomic governance artifact
{
  "event_id":       "te_01HXK7P9QSAN5BVWZJ3Y4DG8D",
  "timestamp":      "2026-05-26T15:44:22.501Z",
  "agent_id":       "claude-sonnet-4-20250514:instance-7",
  "session_id":     "sess_pioneer.telemetrydata.ai_8812937",
  "action": {
    "type":          "tool_invocation",
    "target":        "mcp://gmail/send_message",
    "payload_hash":  "sha256:b9c2e4a8d1f6..."
  },
  "actor": {
    "type":            "human",
    "id":              "oauth:google:118293847562910",
    "authority_proof": "oauth_sig:ES256:kid=https://www.googleapis.com/oauth2/v3/certs:MEYCIQD..."
  },
  "status":         "VERIFIED",
  "threat_surface": "TOOL_MCP",
  "merchant_id":    "merchant_mystore_myshopify_com"
}

PROMPT INPUT_CHANNEL TOOL_MCP AGENT_RUNTIME MODEL IDENTITY_OAUTH SEARCH_INDEX

Why it exists

AI agents place real orders, move real money, and make real decisions. No standard exists for recording what they did or whether they were authorized. Trust Events fill that gap.

What it covers

Every observable moment at the agent transaction boundary: action type, target, actor authority, and threat surface. Nine fields. Portable. Runtime-neutral. OWASP Agentic Top 10 aligned.

How to implement

Emit a Trust Event at every agent tool call, permission request, or transaction attempt. Send to any compliant ingest endpoint. The spec is free. Apache 2.0.

Spec drops July 2026.

Get the full specification, reference implementation, and field definitions the day they ship.

You are on the list. The spec ships to you the day it drops.

Something glitched on our end — please try again or email telemetrydata.ai@gmail.com directly.