Reference implementation Data compiled from public sources as of 2026-10-26. Not an assessment, certification or recommendation. Confirm current status with the vendor and the issuing body.
Trace · registry probe · T1 reproducible run

Registry probe of Privileged Access's discovery endpoints

Privileged Access · 2026-10-11 · AgentDossier refresh · harness probe-1.0

Scenario. Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths

Observed. ARD verified

EntryGET on the publisher's well-known discovery paths
Actionsserved Agentic Resource Discovery (ARD) document
Egressno
Human approval—
Secrets touchedno
Bundlebundles/tr_st_9c199ce75a4b4566_b2565253 · sha256:bd81813efe60f001620bc852bf41c0c24253f07c7a5a2c9fe4f86bdf43be96a1 · download (JSON)
Chainsha256:214e3a8a86ac7be52504f618456176a3097c8f2dc86709d266e19174aae4a957
prev sha256:628206c297757b30c80ad632f8ff60e3dc58d0154469529e3ca1250730477ec3

Transcript

# Probe transcript — Privileged Access

Agent `res_9c199ce75a4b4566` · publisher domain `infisical.com` · 2026-10-11 · harness probe-1.0

## Agentic Resource Discovery (ARD)

- requested `https://infisical.com/.well-known/ard.json`
- result: **verified**

---
Observation only: the registry fetched public well-known paths and validated the documents against the protocol specifications. No credentials, no message exchange beyond discovery, nothing written.

Produced automatically on every refresh; a new bundle is written only when the observation changes

A trace describes one version on one date. It is evidence of behaviour, never a certification. Dispute it through the agent's dossier; corrections are appended, never overwritten.