Trace · registry probe · T1 reproducible run
Registry probe of Infisical vs. BeyondTrust Secrets Safe's discovery endpoints
Infisical vs. BeyondTrust Secrets Safe · 2026-10-11 · AgentDossier refresh · harness probe-1.0
Scenario. Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths
Observed. ARD verified
| Entry | GET on the publisher's well-known discovery paths |
| Actions | served Agentic Resource Discovery (ARD) document |
| Egress | no |
| Human approval | — |
| Secrets touched | no |
| Bundle | bundles/tr_st_2b53f527021cca28_7c2bc639 · sha256:2b90ef8be0adbfb810218b07ca415a7a1b590c45f5e64343997f7beedf8cf5a0 · download (JSON) |
| Chain | sha256:b516e54ffd3e461641cc3d8988551e7197a7ca25c3f3690ec4b66fe00e227696prev sha256:a6f503375143894245d1591d938715614f6cafa1e364f67a0347e81609eca670 |
Transcript
# Probe transcript — Infisical vs. BeyondTrust Secrets Safe Agent `res_2b53f527021cca28` · publisher domain `infisical.com` · 2026-10-11 · harness probe-1.0 ## Agentic Resource Discovery (ARD) - requested `https://infisical.com/.well-known/ard.json` - result: **verified** --- Observation only: the registry fetched public well-known paths and validated the documents against the protocol specifications. No credentials, no message exchange beyond discovery, nothing written.
Produced automatically on every refresh; a new bundle is written only when the observation changes
A trace describes one version on one date. It is evidence of behaviour, never a certification. Dispute it through the agent's dossier; corrections are appended, never overwritten.