AGCP Conformance clarifies what has been assessed, listed, human verified, and assurance-tested.
AGCP separates assessment status, Registry status, conformance level, and capability coverage so buyers, founders, auditors, risk teams, and implementation partners can understand exactly what has been evaluated and what has not.
Organizations may begin with an automated AGCP Registry Assessment and optionally publish an eligible assessment to the AGCP Registry, or pursue the deeper AGCP Human Verified Assessment.
AGCP Registry Assessment
Automated assessment of one defined system against applicable AGCP requirements, including assessment findings and governance capability classification.
The AGCP Registry Assessment provides an automated, evidence-based evaluation of one defined system against the applicable AGCP requirements within the assessment scope.
- automated AGCP assessment
- assessment findings
- governance capability classification
- capability profile
- defined system and assessment scope
- basis for optional Registry publication
Registry publication is optional and separate from the assessment.
Eligible assessed systems may elect publication in the AGCP Registry for an additional $500, subject to Registry admission and publication requirements.
Public Registry records may include the applicable assessment designation, Registry status, governance capability profile, conformance information, and approved Registry metadata.
Assessment does not require public Registry publication. An organization may purchase the Registry Assessment, receive its assessment results and capability classification, and choose not to publish the system in the AGCP Registry.
AGCP Assessment & Registry Designations
AGCP uses distinct designations to communicate automated assessment, Registry publication, human verification, and assurance-oriented evaluation. These designations do not automatically imply complete AGCP capability coverage.
AGCP Registry Assessed
The implementation has completed the automated AGCP Registry Assessment process and an assessment record and capability profile have been generated.
Public Registry publication is not required.
AGCP Registry Listed
An eligible assessed implementation has been admitted to and published in the AGCP Registry.
Registry publication is an optional step following assessment and is currently available for an additional $500.
AGCP Human Verified
The implementation has undergone a control-level technical assessment using private AI-assisted source-code analysis, customer-supported evidence verification, and human adjudication within the defined assessment scope.
AGCP Assurance Assessed
The implementation has undergone an assurance-oriented evaluation of demonstrated governance capabilities and supporting evidence.
AGCP Human Verified Assessment is a separate, deeper technical assessment.
Human Verified Assessment evaluates one defined AI or autonomous system against applicable AGCP runtime-governance requirements using private AI-assisted source-code analysis, customer-supported evidence, targeted verification, and human adjudication.
The current Human Verified Assessment offer is $12,500 fixed fee, covers up to 122 applicable AGCP controls, and typically completes in approximately 2–3 weeks. Registry publication remains optional.
Important Clarification
Assessment status, Registry publication, and capability coverage are separate concepts.
An implementation may complete an AGCP Registry Assessment without being publicly listed. An implementation may also undergo Human Verified or Assurance Assessment independently of public Registry publication.
Governance capabilities are represented separately through the implementation’s Capability Profile.
Three concepts must remain separate
AGCP records are designed to separate assessment, Registry publication, and capability claims. This prevents buyers from assuming that an assessed or listed implementation supports every AGCP requirement or every runtime-governance capability.
Assessment Status
Indicates what kind of AGCP assessment, verification, or assurance review has occurred.
Registry Status
Indicates whether the implementation remains privately assessed or has been admitted to and published in the AGCP Registry.
Capability Profile
Identifies which AGCP governance capabilities were demonstrated, mapped, reviewed, or validated within the assessment scope.
AGCP Registry Assessed is not the same as AGCP Registry Listed. Registry publication is optional and separate from assessment.
Assessment and Registry designation definitions
Each designation communicates a different claim. None should be interpreted as complete AGCP capability coverage unless the Capability Profile explicitly supports that conclusion.
| Designation | Meaning | Does imply | Does not imply |
|---|---|---|---|
| AGCP Registry Assessed | The implementation has completed the automated AGCP Registry Assessment process. | Assessment against the applicable AGCP requirements within the defined scope, assessment findings, and generation of a governance capability profile. | Public Registry publication, human verification, assurance validation, or full capability coverage. |
| AGCP Registry Listed | An eligible assessed implementation has been admitted to and published in the AGCP Registry. | Public Registry publication and satisfaction of applicable Registry admission requirements within the stated scope. | Human verification, assurance validation, or complete capability coverage. |
| AGCP Human Verified | The implementation has undergone a control-level technical assessment against applicable AGCP runtime-governance requirements using source-code analysis, supporting evidence, customer-assisted verification, and human adjudication. | Human-reviewed control findings and supporting technical evidence within the defined assessment scope. | Registry publication, legal or regulatory certification, generalized cybersecurity certification, live runtime assurance testing, or complete capability coverage unless separately stated. |
| AGCP Assurance Assessed | The implementation has undergone an assurance-oriented evaluation designed to assess demonstrated governance capabilities and supporting evidence. | Evidence-oriented assessment of demonstrated governance capabilities within the stated scope. | Universal coverage of all AGCP capabilities, legal compliance certification, cybersecurity certification, or model-quality certification. |
Capability Profile
The Capability Profile is the primary record of what the implementation actually demonstrated. It should be read together with assessment status and, where applicable, Registry status.
Capability coverage
Identifies which AGCP governance capabilities were represented, mapped, assessed, reviewed, or validated.
Evidence basis
Indicates whether the capability profile was based on automated assessment, documentation, implementation artifacts, source review, runtime evidence, human verification, or assurance testing.
Scope boundaries
Clarifies operational, technical, architectural, or evidentiary limitations of the assessment.
AGCP Conformance Levels
AGCP Conformance Levels describe runtime-governance capability depth. They are separate from assessment designation and Registry status.
Schema & Envelope Validation
Governance message structure, metadata handling, envelope integrity, and structured rejection semantics.
Ordered Governance Mediation
Evaluation ordering, policy sequencing, constraint evaluation, governance decision recording, and rejection behavior.
Deterministic Governance
Replayable governance behavior, deterministic decision consistency, invariant preservation, and reproducible outcomes.
Execution Authorization Control
Human-in-the-loop enforcement, quorum and cosign controls, execution gating, and commit-bound authorization.
Multitenant Governance Isolation
Tenant isolation, namespace isolation, cross-tenant protection, and tenant-scoped execution mediation.
What AGCP evaluates
AGCP focuses on runtime-governance behavior and evidence. Assessment depth depends on the assessment type, defined scope, applicable requirements, and available evidence.
Admissibility
Whether proposed actions are evaluated against applicable policies, constraints, evidence, and current governance conditions.
Execution authorization
Whether consequential execution remains bound to valid governance authorization at the point of execution or commit.
Lifecycle integrity
Whether governance objects move through valid lifecycle states and preserve escalation, refusal, authorization, and terminal-state semantics.
Evidence continuity
Whether governance decisions, approvals, refusals, traces, and execution outcomes remain linked to defensible evidence.
Deterministic behavior
Whether equivalent governance conditions produce reproducible, attributable, and explainable governance outcomes.
Runtime assurance
Whether governance capabilities can be supported through artifacts, traces, runtime evidence, replay, or observed behavior.
How to read an AGCP Registry entry
A Registry entry should not be read as a blanket claim that the implementation supports everything in AGCP.
| Registry Field | What it answers | Example |
|---|---|---|
| Assessment Designation | What type of assessment, review, or assurance evaluation has occurred? | AGCP Human Verified |
| Registry Status | Has the implementation been admitted to and published in the AGCP Registry? | AGCP Registry Listed |
| Capability Profile | Which governance capabilities were demonstrated, assessed, or validated? | Execution Authorization, Evidence Continuity, Lifecycle Integrity |
| Conformance Level | What AGCP conformance depth was demonstrated within the assessed scope? | Level 3 — Deterministic Governance |
Example Registry Entry
| Field | Value |
|---|---|
| Organization | ExampleAI |
| System | ExampleAI Agent Platform |
| Assessment Designation | AGCP Human Verified |
| Registry Status | AGCP Registry Listed |
| Capability Profile | Execution Authorization, Evidence Continuity, Lifecycle Integrity |
| Conformance Level | Level 3 — Deterministic Governance |
| Assessment Date | June 2026 |
| Scope | Agent Execution Governance |
Interpretation
- The implementation underwent an AGCP Human Verified Assessment within the defined scope.
- Human adjudication was applied to the relevant control findings and supporting evidence.
- The implementation was separately admitted to and published in the AGCP Registry.
- The implementation demonstrated selected AGCP governance capabilities.
- The implementation demonstrated Level 3 governance capability within the assessed scope.
This does not mean
- The implementation supports every AGCP capability.
- The implementation has completed Assurance Assessment.
- The implementation has achieved Level 4 or Level 5 conformance.
- The implementation is certified for regulatory compliance.
- The implementation has been evaluated outside the stated assessment scope.
What AGCP Conformance does not mean
AGCP designations are intended to be precise, defensible, and non-overstated.
Not a model-quality score
AGCP does not certify model performance, training quality, benchmark results, or prediction accuracy.
Not a legal compliance certification
AGCP assessment does not certify compliance with any particular law, regulation, procurement rule, or contractual obligation.
Not a cybersecurity maturity certification
AGCP evaluates runtime governance and execution-control behavior, not generalized enterprise cybersecurity maturity.
Not universal capability coverage
Registry assessment, Registry listing, human verification, or assurance assessment does not imply that every AGCP capability is present.
Not source-code ownership
AGCP assessment does not require AGCP-developed software, AGCP-owned infrastructure, or proprietary AGCP runtime components.
Not unrestricted public disclosure
Proprietary implementation details, source code, confidential traces, and sensitive artifacts are not publicly disclosed unless expressly authorized.
Frequently Asked Questions
What does an AGCP Registry Assessment cost?
The current Registry Launch Price for an AGCP Registry Assessment is $1,500. The regular price is $3,000.
The Registry Assessment is an automated assessment of one defined system against applicable AGCP requirements and includes assessment findings and governance capability classification.
Is Registry publication included in the Registry Assessment price?
No. Registry publication is optional and separate from the assessment. Eligible assessed systems may elect AGCP Registry publication for an additional $500.
Can I purchase a Registry Assessment without making the results public?
Yes. An organization may complete the AGCP Registry Assessment without public Registry publication. Assessment and Registry publication are separate services and separate statuses.
Is AGCP Registry Assessed the same as AGCP Registry Listed?
No. AGCP Registry Assessed means the implementation completed the automated AGCP Registry Assessment process and an assessment record and capability profile were generated.
AGCP Registry Listed means an eligible assessed implementation was subsequently admitted to and published in the AGCP Registry.
Does AGCP Registry Listed mean the implementation supports all AGCP capabilities?
No. Registry Listing does not imply complete capability coverage. Capability coverage is represented separately through the implementation’s Capability Profile.
What is the difference between Registry Assessment and Human Verified Assessment?
Registry Assessment is the automated AGCP assessment pathway. It evaluates one defined system against applicable AGCP requirements and produces assessment findings and governance capability classification.
Human Verified Assessment is a deeper technical assessment that combines private AI-assisted source-code analysis, supporting implementation evidence, customer-assisted verification where needed, and human adjudication of final control findings.
The Human Verified Assessment is currently offered at $12,500 fixed fee for up to 122 applicable AGCP controls, with typical completion in approximately 2–3 weeks.
Does AGCP Human Verified Assessment require Registry listing?
No. Human Verified Assessment is available as a standalone technical assessment. A customer may complete the assessment without public Registry listing or disclosure of its assessment results.
Registry publication is an optional downstream step requiring AGCP review and explicit customer authorization.
What does AGCP Assurance Assessed mean?
AGCP Assurance Assessed means the implementation underwent an assurance-oriented evaluation of demonstrated governance capabilities and supporting evidence. This may include runtime-governance evaluation, evidence review, behavioral verification, and assurance profile generation.
Does AGCP require proprietary software?
No. AGCP is implementation-agnostic and does not require AGCP-managed infrastructure, proprietary runtime middleware, AGCP SDKs, or AGCP-developed execution components.
Move from governance claims to defensible governance capability.
Begin with an automated AGCP Registry Assessment at the $1,500 Registry Launch Price, optionally publish an eligible system to the AGCP Registry for $500, or pursue the deeper $12,500 Human Verified Assessment.