AGCP Governance Registry
Independently assessable records of runtime governance capability.
The AGCP Registry provides a public record of eligible AI and autonomous systems that have undergone AGCP assessment and elected Registry publication.
Registry entries distinguish assessment designation, Registry status, governance capability coverage, conformance depth, assessment scope, and verification metadata so buyers and governance teams can understand what was actually evaluated.
Inaugural Registry Publication — October 2026
The inaugural AGCP Founders Cohort is complete. All ten Founders Cohort positions have been filled, and the cohort is scheduled for Registry publication in October 2026.
AGCP Registry Assessment
Automated assessment of one defined system against applicable AGCP requirements, including assessment findings and governance capability classification.
The Registry Assessment provides an automated, evidence-based assessment of one defined system within an agreed assessment scope.
- automated AGCP assessment
- assessment findings
- governance capability classification
- Capability Profile
- defined assessment scope
- basis for optional Registry publication
Registry publication is optional and separate from the assessment.
Eligible assessed systems may elect publication in the AGCP Registry for an additional $500.
The Registry record provides public assessment and capability metadata. It does not publish the underlying assessment report or assessment evidence.
Assessment does not require public Registry publication.
An organization may complete the Registry Assessment, receive its assessment findings and governance capability classification, and choose not to publish the assessed system.
A Public Record of Assessed Runtime Governance Capability
A Registry entry indicates that an assessed system has completed an applicable AGCP assessment pathway, satisfied the requirements for the published Registry status, and been authorized for public Registry publication.
Assessment Record
Identifies the assessment designation, assessment date, defined scope, and applicable assessment status.
Capability Profile
Identifies governance capabilities demonstrated or supported by the assessment within the defined assessment scope.
Registry Status
Indicates that the assessed system was admitted to and published in the public AGCP Registry.
AGCP Registry Assessed and AGCP Registry Listed are different.
Registry Assessed indicates that an assessment was completed. Registry Listed indicates that an eligible assessed system was subsequently admitted to and published in the Registry.
How AGCP Describes Assessment and Registry Status
AGCP separates automated assessment, public Registry publication, human verification, and assurance-oriented evaluation so each designation communicates a specific and bounded claim.
AGCP Registry Assessed
The implementation completed the automated AGCP Registry Assessment and an assessment record and Capability Profile were generated.
AGCP Registry Listed
An eligible assessed implementation was admitted to and published in the public AGCP Registry.
AGCP Human Verified
The system underwent a control-level technical assessment incorporating source-code analysis, supporting evidence, customer-assisted verification, and human adjudication.
AGCP Assurance Assessed
The implementation underwent an assurance-oriented evaluation of demonstrated governance capabilities and supporting evidence.
AGCP Human Verified Assessment
Organizations seeking a deeper technical assessment may pursue AGCP Human Verified Assessment independently of the automated Registry Assessment pathway.
Human Verified Assessment evaluates one defined AI or autonomous system against applicable AGCP runtime-governance requirements using private AI-assisted source-code semantic analysis, customer-supported evidence, targeted verification, and human adjudication.
$12,500 Fixed Fee
A defined technical assessment engagement rather than an automated Registry Assessment.
Up to 122 Controls
Assessment against applicable AGCP runtime-governance controls within the defined system boundary.
Approximately 2–3 Weeks
Typical completion time depends on system complexity, applicable controls, evidence availability, and customer responsiveness.
What a Registry Entry May Contain
Registry entries provide structured public metadata about the assessed system, assessment status, demonstrated governance capabilities, and assessment scope. They do not serve as repositories for the underlying assessment documents or technical evidence.
Assessment & System Information
- organization name
- assessed system or platform
- assessment designation
- Registry status
- assessment date
- defined assessment scope
- applicable conformance level
- governance Capability Profile
Registry Verification Metadata
- Registry record identifier
- assessment identifier
- system or version identifier, where applicable
- assessment methodology or designation
- authorized public capability information
- Founders Cohort designation, where applicable
- assessment report hash, when provided
- Registry record status
Assessment reports and supporting evidence remain under the control of the assessed organization. A Registry report hash may be used to validate a report supplied separately by the system owner.
Registry Listing Does Not Mean Universal AGCP Coverage
The Registry deliberately separates assessment designation, Registry status, Capability Profile, and Conformance Level. A listed system should therefore be interpreted according to its actual assessed scope rather than as a blanket claim of complete AGCP implementation.
Assessment Designation
Describes what type of assessment, verification, or assurance activity occurred.
Capability Profile
Describes the runtime-governance capabilities demonstrated within the assessed scope.
Conformance Level
Describes the depth of demonstrated AGCP runtime-governance capability within the assessed scope.
What Registry Listing Does Not Mean
AGCP Registry designations are intended to remain specific, bounded, and non-overstated.
Not General Cybersecurity Certification
Registry listing does not certify generalized enterprise cybersecurity maturity or security posture.
Not Regulatory Certification
Registry listing does not constitute legal, regulatory, contractual, or procurement compliance certification.
Not Model-Quality Certification
AGCP does not certify model accuracy, training quality, benchmark performance, or general AI capability.
Not a Safety Guarantee
Assessment and Registry publication do not guarantee that operational incidents or harmful outcomes cannot occur.
Not Universal Capability Coverage
Listing does not imply that every AGCP requirement or runtime-governance capability was demonstrated.
Not a Required Technology Stack
Registry participation does not require proprietary AGCP software, AGCP-managed infrastructure, or a prescribed implementation architecture.
AGCP Evaluates Governance Behavior, Not Product Branding
A system does not need to use AGCP-developed software or AGCP-specific names, schemas, keywords, or runtime components in order to be assessed.
What May Be Evaluated
- source code
- configuration
- governance logic
- schemas and interfaces
- implementation documentation
- tests and traces
- runtime and operational evidence
What Is Not Required
- AGCP software
- AGCP SDKs
- AGCP-managed infrastructure
- AGCP orchestration tooling
- AGCP proprietary runtime components
- one prescribed technical architecture
Assessment Reports Remain Under the System Owner’s Control
The AGCP Registry does not publish or distribute assessment reports, executive summaries, evidence packages, source code, governance traces, or other assessment artifacts.
Those materials remain under the control of the organization that owns or operates the assessed system. The organization may provide them to customers, auditors, procurement teams, investors, regulators, or other parties at its discretion.
What the Registry Records
- assessed organization and system
- assessment designation
- Registry status
- assessment date
- defined assessment scope
- governance Capability Profile
- applicable conformance information
- approved Registry metadata
- assessment report hash, when provided
What the System Owner Controls
- complete assessment report
- executive or assessment summaries
- detailed assessment findings
- source code and repository contents
- governance evidence
- runtime traces
- architecture and implementation artifacts
- distribution of assessment materials
Registry validation does not require the assessment report itself to be public.
A Registry entry may include a cryptographic hash of the assessment report associated with the assessment record. A customer or other authorized recipient who receives the report directly from the system owner can compute the report hash and compare it with the Registry value to confirm that the document has not been altered and corresponds to the report associated with the Registry record.
Governance Capability Cards & Public Designations
Registry-listed systems may be authorized to use governance capability cards or public designations corresponding to the assessment record, Capability Profile, and demonstrated conformance scope.
Public claims must remain traceable to the Registry record.
A capability card, assessment designation, or conformance-level claim should not be used to imply capabilities beyond the assessment scope documented in the Registry.
Protected Assessment Artifacts
AGCP assessments may involve confidential implementation and governance evidence. Public Registry participation does not mean that those materials become public.
Assessment Materials
- source code
- repository artifacts
- configuration
- governance traces
- runtime evidence
Protected Information
- proprietary architecture
- internal implementation details
- sensitive operational evidence
- confidential governance records
- restricted technical documentation
AI Training
Assessment repositories, source code, implementation artifacts, and customer assessment materials are not used to train AI models.
Interoperable Runtime Governance
The AGCP Registry is intended to support independently inspectable runtime-governance claims across heterogeneous AI-enabled systems rather than requiring organizations to adopt a single vendor stack.
Procurement Transparency
Give buyers structured information about demonstrated runtime-governance capability and assessment scope.
Enterprise Governance
Provide organizations with externally assessable information supporting governance review and system due diligence.
Governance Interoperability
Support comparable runtime-governance information across technically different AI-enabled systems and architectures.
AGCP Registry Assessment & Publication
What does an AGCP Registry Assessment cost?
The current Registry Launch Price is $1,500. The regular Registry Assessment price is $3,000.
The assessment covers one defined system and includes automated assessment against applicable AGCP requirements, assessment findings, and governance capability classification.
Is public Registry publication included in the $1,500 assessment?
No. Registry publication is optional and separate from the Registry Assessment.
An eligible assessed system may elect AGCP Registry publication for an additional $500.
Can I purchase an assessment without being publicly listed?
Yes. An organization may complete the AGCP Registry Assessment, receive its assessment findings and Capability Profile, and choose not to publish the system in the Registry.
What is the difference between Registry Assessed and Registry Listed?
AGCP Registry Assessed means the system completed the automated Registry Assessment process.
AGCP Registry Listed means an eligible assessed system was subsequently admitted to and published in the public AGCP Registry.
Does Registry Listing mean a system supports all AGCP requirements?
No. Registry Listing does not imply universal AGCP capability coverage. The Registry entry should be read together with its assessment designation, Capability Profile, conformance level, and assessment scope.
Does a system need to use AGCP software to be listed?
No. AGCP is implementation-agnostic. Systems may implement technically different mechanisms as long as the relevant governance behavior and evidence can be assessed against applicable AGCP requirements.
What is the difference between Registry Assessment and Human Verified Assessment?
Registry Assessment is the automated AGCP assessment pathway. It assesses one defined system against applicable AGCP requirements and produces findings and governance capability classification.
Human Verified Assessment is a deeper technical assessment that combines private AI-assisted source-code analysis, supporting technical evidence, customer-assisted verification where needed, and human adjudication of the final control findings.
Human Verified Assessment is currently offered at $12,500 fixed fee for up to 122 applicable controls, with typical completion in approximately 2–3 weeks.
Are assessment reports published in the AGCP Registry?
No. The AGCP Registry does not publish or distribute the complete assessment report. Assessment reports remain under the control of the organization that owns or operates the assessed system.
The organization may provide its report directly to customers, auditors, procurement teams, regulators, investors, or other parties at its discretion.
A Registry entry may contain a cryptographic hash of the assessment report. A recipient can compare the hash of a report received from the system owner with the Registry value to verify that the report corresponds to the assessment record and has not been altered.
Is source code published in the Registry?
No. Source code, proprietary repository content, confidential architecture, internal governance evidence, and sensitive operational artifacts are not published through Registry participation.
Is customer source code used to train AI models?
No. Assessment repositories, source code, implementation artifacts, and customer assessment materials are not used for AI model training.
Is the Founders Cohort still open?
No. All 10 Founders Cohort positions have been filled. The inaugural Founders Cohort is scheduled for publication in the AGCP Registry in October 2026.
Commercial AGCP Registry Assessments are now available independently of Founders Cohort participation.
Move from governance claims to an independently assessable record.
Start with an automated AGCP Registry Assessment at the $1,500 Registry Launch Price. Keep the assessment private, or elect Registry publication for an additional $500 if the assessed system is eligible for public listing.