EATF — Agent Evidence Package v0.1: reference implementation with two independent verifiers (TypeScript and Python)

EATF is an open specification and reference implementation for offline-verifiable AI agent attestation. The v0.2.x line ships two independent verifiers — a TypeScript implementation (Node 20+ and browser, via Web Crypto and pkijs) and a Python implementation (3.11+, via pyca/cryptography, asn1crypto, and optional oqs-python for ML-DSA-65) — validated against a shared set of conformance vectors. Both implementations produce the same verify=true|false outcome on every vector; CI rejects any drift. EATF is not an eIDAS trust service under Regulation (EU) 910/2014 Article 3(16). The project publishes a specification and reference verifiers; it does not operate a registry, issue qualified certificates, or maintain a managed service. See NOTICE in the repository for the full positioning statement. This deposit This Zenodo record archives the source of the tyche-institute/eatf GitHub repository at the v0.2.1 tag (commit c0f6d95). The tarball preserves the Apache 2.0–licensed wire-format specification (docs/aep-profile.md), the two reference verifier libraries (lib/, lib-python/), the conformance test vectors (test-vectors/: four valid + seven invalid), the offline signer (cli/eatf-sign), and the JSON Schema definitions (schemas/) as published. Companion paper The worked-example paper applying this artifact to a Bayesian Knowledge Tracing tutor is deposited as IACR ePrint 2026/109612: https://eprint.iacr.org/2026/109612 (also available on Zenodo: 10.5281/zenodo.20357766). The paper demonstrates the full AEP evidence stack end-to-end and maps the attestation design to EU AI Act obligations. What v0.2.x adds over v0.1.x Second independent verifier. lib-python/ is a fresh port; zero shared code with the TypeScript reference. Same conformance contract. TSA chain-to-root pin check in both verifiers (mirroring DigiCert public roots). Eleven conformance vectors covering envelope, signature, timestamp, OVERT receipt, and issuer-trust failure modes — up from four in the v0.1.1 line. Full doc surface: architecture, threat model, attestation profile, glossary, design rationale. Citation If you cite this work, please cite either this specific record (v0.2.1) or the concept DOI to refer to all versions. A CITATION.cff is included on the repository's main branch from a subsequent commit; this v0.2.1 deposit predates the CITATION file but is fully cited by the suggested form below. Sokolov, A. (2026). EATF — Agent Evidence Package v0.1: reference implementation with two independent verifiers (TypeScript and Python) (Version 0.2.1) [Software]. Tyche Institute. github.com/tyche-institute/eatf