What does TRACE actually do?

TRACE creates a standardized, hardware-enforced governance record that binds together runtime environment, software, policies, data classifications and tool usage into a portable, cryptographically verifiable artifact.

Who is behind the development of TRACE?

TRACE was developed collaboratively by AMD, Intel, Microsoft, OPAQUE and the Technology Innovation Institute (TII).

Does TRACE introduce a new security framework?

No, TRACE builds on proven industry standards including RATS, EAT, SLSA, SCITT, SPIFFE and EAR, composing them into a common evidence layer.

Large Language ModelsAI Safety & AlignmentOpen-Source AIYahoo Finance AIAug 26, 2026Aug 27, 2026, 04:01 JST

Linux Foundation welcomes TRACE for AI runtime evidence

Send on LINE

3 Key Points

What happened
The Linux Foundation announced the contribution of TRACE (Trust, Runtime Attestation and Compliance Evidence), a new open specification from OPAQUE, on Aug. 25, 2026. It was developed collaboratively by AMD, Intel, Microsoft, OPAQUE and the Technology Innovation Institute (TII).
Why it matters
TRACE creates a standardized, hardware-enforced governance record that binds runtime environment, software, policies, data classifications and tool usage into a portable, cryptographically verifiable artifact. It helps organizations prove sensitive data is handled according to policy as they deploy increasingly autonomous AI agents and open-weight models.
What to watch
The Linux Foundation will provide vendor-neutral governance for TRACE to support sustainability and long-term growth. The initial specification focuses on today's AI agent architectures while providing a foundation for future multi-agent and confidential computing deployments.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Get news like this every morning, free

Context & Analysis

The announcement reflects a broader push to create trust mechanisms for AI as autonomous agents become more common in enterprise and government environments. TRACE does not start from scratch; it composes existing standards like RATS, EAT, SLSA, SCITT, SPIFFE and EAR into a unified layer. This approach could help adoption because it avoids asking organizations to replace their current security tools.

Jim Zemlin, CEO of the Linux Foundation, framed the effort as a response to the need for independent, cross-platform proof of operational integrity. With multiple large vendors contributing, the specification has a strong base of support, which may help it gain traction across different cloud and confidential computing environments. The Linux Foundation's neutral governance is intended to keep the standard open and portable.

FAQ

What does TRACE actually do?: TRACE creates a standardized, hardware-enforced governance record that binds together runtime environment, software, policies, data classifications and tool usage into a portable, cryptographically verifiable artifact.
Who is behind the development of TRACE?: TRACE was developed collaboratively by AMD, Intel, Microsoft, OPAQUE and the Technology Innovation Institute (TII).
Does TRACE introduce a new security framework?: No, TRACE builds on proven industry standards including RATS, EAT, SLSA, SCITT, SPIFFE and EAR, composing them into a common evidence layer.

Yahoo Finance AIRead Original Article

Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Get it free

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.