Documentation

Public schemas and verifier notes.

Schemas.

qorthos.com/schemas/v1/attestation.json

Defines evidence scope, signing scope, issuer fields, and signature metadata.

qorthos.com/schemas/v1/compliance-evidence-bundle.json

Defines the portable bundle that groups trust reports, validation evidence, and framework mappings.

qorthos.com/schemas/v1/trust-report.json

Defines agent actions, attribution, validator issues, policy events, redactions, and recommendations.

qorthos.com/schemas/v1/organization-trust-root.json

Defines organization keys, validity windows, and trust root identity.

qorthos.com/schemas/v1/scope-contract.json

Defines the policy boundary that was in force when the agent acted.

Canonical JSON.

Qorthos uses QCJ-1, an RFC 8785 subset, so the same evidence produces the same canonical bytes before verification. Read the formal spec at docs/spec.

Rekor and RFC 3161 timestamping are optional transparency outputs on the roadmap.

Reference verifiers.

Python reference verifier Coming in Wave 5.

Rust reference verifier Coming in Wave 5.