{"source":{"repository":"https://github.com/agentrust-io/trace-registry","commit":"58850e9d0f7113be2a4c89b3c2e7b03447f2dcce","path":"producers/","license":"CC BY 4.0 (registry data)"},"producers":[{"producer_id":"bernstein/3.20.0","key_thumbprint":"eXGZiAH6OxMgiUzqcTgubU9pYlSIP3-u6WdQ0w2nxL8","x":"ff3LjX7m5f7vj3YD5NS_LqtEzEa_wkD5ZnNPBpSD3o8","active_since":"2026-09-20T17:02:42Z","file":"producers/bernstein-3.20.0.json"},{"producer_id":"cmcp-gateway/0.1.0","key_thumbprint":"USN7TcX0GDCWDXb2H2ekb4KDthrGK8bTQxk8I4FfPgg","x":"ToB3lvrNHGjbh8ZPnK0Ogh0zTxLNURCt1rjk5L_M18Q","active_since":"2026-06-12T00:00:00Z","file":"producers/cmcp-gateway-0.1.0.json"},{"producer_id":"verifiable-agent-summit-demo/0.1.0","key_thumbprint":"4PXGQSwQS0Wt33I0I0g7weN1lEupfL8rQRKMEzs1OFU","x":"MlMDcC9FD2XTwcHx_cMV7aTqq8sfXlTcyFNSDkqsgSE","active_since":"2026-08-20T19:34:17Z","file":"producers/verifiable-agent-summit-demo-0.1.0.json"}],"note":"registered_producer names the producer whose key agentrust-io/trace-registry lists with this thumbprint (producers/, at the commit linked). It says the TRACE registry published this key as that producer's; it does not say the record's claims are true, that the key was not stolen, or anything about a record whose key is not listed","how_to_check":"fetch each listed file at the commit, compute the RFC 7638 thumbprint of public_key_jwk (sha256 over {\"crv\",\"kty\",\"x\"} in that order, base64url), and compare it with key_thumbprint"}