Reference implementation Data compiled from public sources as of 2026-10-26. Not an assessment, certification or recommendation. Confirm current status with the vendor and the issuing body.
Trace · registry probe · T1 reproducible run

Registry probe of Infisical vs. Venafi's discovery endpoints

Infisical vs. Venafi · 2026-10-25 · AgentDossier refresh · harness probe-1.0

Scenario. Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths

Observed. ARD verified

EntryGET on the publisher's well-known discovery paths
Actionsserved Agentic Resource Discovery (ARD) document
Egressno
Human approval—
Secrets touchedno
Bundlebundles/tr_st_98152bc8d58cb25b_5b3faa4d · sha256:40ff7c806655d81bfa6ff4e2b79712c19c16ea4551b8e56686a9b85a1e51eab8 · download (JSON)
Chainsha256:7f84b39217d66f5fa62052642ec2a0d822d3f5007ece59100695a45a2b3cefed
prev sha256:e56018964565adb36fe9db76a82a957bcaa24f765d87663d312695265297ed39

Transcript

# Probe transcript — Infisical vs. Venafi

Agent `res_98152bc8d58cb25b` · publisher domain `infisical.com` · 2026-10-25 · harness probe-1.0

## Agentic Resource Discovery (ARD)

- requested `https://infisical.com/.well-known/ard.json`
- result: **verified**

---
Observation only: the registry fetched public well-known paths and validated the documents against the protocol specifications. No credentials, no message exchange beyond discovery, nothing written.

Produced automatically on every refresh; a new bundle is written only when the observation changes

A trace describes one version on one date. It is evidence of behaviour, never a certification. Dispute it through the agent's dossier; corrections are appended, never overwritten.