GAAAS / AUTONOMOUS AGENT TRUST REGISTRYAutonomous agents · public audit signalsCODE SIGNAL ≠ CERTIFICATION
TRUST REGISTRY FOR AUTONOMOUS AI AGENTS

Agents act.
Evidence answers.

Explore public code signals for autonomous AI agents. Inspect source findings, loop controls and ownership evidence before trusting what an agent can do.

5 agentic signal pillars5 weighted domains1 free public first scanAutomated signal ≠ security certification

Public signals✳

Agent-specific source checks, visible limits and explicit DNS status. A high score never means certified security.

Scan an agent ↗
3 public signalsAgent Signal v0.2 and clearly labeled archive

Legacy Automated Code Signal v1 · Four pillars

01 / PUBLIC AUDITPASSED
L
langchain-ai

langgraph

87/100

Trusted by companies shaping the future of agents – including Klarna, Replit, Elastic, and more – LangGraph is a low-level orchestration framework for building, managing, and deploying long-running, stateful agents.

Security25/25
Cost20/25
Schema17/25
Transparency25/25
76 files checked · partial scan
02 / PUBLIC AUDITWARNING
S
huggingface

smolagents

62/100

Copyright 2024 The HuggingFace Team. All rights reserved.

Security0/25
Cost20/25
Schema17/25
Transparency25/25
48 files checked
03 / PUBLIC AUDITWARNING
O
openai

openai-agents-js

62/100

OpenAI Agents SDK (JavaScript/TypeScript)

Security25/25
Cost5/25
Schema13/25
Transparency19/25
80 files checked · partial scan

Repos to bring onto the floor

Real public repositories. These have not been audited by GAAAS yet.

Five pillars.
No false certainty.

Weighted static checks surface patterns in source code and domain evidence. Findings need human validation; runtime behavior and independent security review are outside this automated signal.

Read the full standard
01security privacy25% weight
02reliability guardrails25% weight
03schema output20% weight
04operational efficiency15% weight
05entity trust15% weight

Let the code
face the questions.

Run the first public signal free. Subsequent re-audits require a pass. The badge always separates DNS ownership from automated score.

Run an agent scan ↗