Reference implementation Data compiled from public sources as of 2026-10-26. Not an assessment, certification or recommendation. Confirm current status with the vendor and the issuing body.
Trace · registry probe · T1 reproducible run

Registry probe of Infisical vs. BeyondTrust Secrets Safe's discovery endpoints

Infisical vs. BeyondTrust Secrets Safe · 2026-10-11 · AgentDossier refresh · harness probe-1.0

Scenario. Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths

Observed. ARD verified

EntryGET on the publisher's well-known discovery paths
Actionsserved Agentic Resource Discovery (ARD) document
Egressno
Human approval—
Secrets touchedno
Bundlebundles/tr_st_2b53f527021cca28_7c2bc639 · sha256:2b90ef8be0adbfb810218b07ca415a7a1b590c45f5e64343997f7beedf8cf5a0 · download (JSON)
Chainsha256:b516e54ffd3e461641cc3d8988551e7197a7ca25c3f3690ec4b66fe00e227696
prev sha256:a6f503375143894245d1591d938715614f6cafa1e364f67a0347e81609eca670

Transcript

# Probe transcript — Infisical vs. BeyondTrust Secrets Safe

Agent `res_2b53f527021cca28` · publisher domain `infisical.com` · 2026-10-11 · harness probe-1.0

## Agentic Resource Discovery (ARD)

- requested `https://infisical.com/.well-known/ard.json`
- result: **verified**

---
Observation only: the registry fetched public well-known paths and validated the documents against the protocol specifications. No credentials, no message exchange beyond discovery, nothing written.

Produced automatically on every refresh; a new bundle is written only when the observation changes

A trace describes one version on one date. It is evidence of behaviour, never a certification. Dispute it through the agent's dossier; corrections are appended, never overwritten.