Published rubric
Seven mandatory scenarios in surety-v1. Same suite version → same pass bar for every vendor.
Bulkhead
Seal the breach before the agent ships.
Deterministic certification for production agents. A signed attestation your buyers can verify offline — without onboarding another control plane.
Automated path
Pay once. Run the harness. Leave with a seal.
Built for agent vendors who need a procurement-grade answer — not a six-month platform project. After checkout, the system mints a one-time run token, scores your sandbox, and issues the attestation without a human in the loop.
-
Checkout
Card payment opens a 90-day certification window for one agent identity.
-
Harness
Point Bulkhead at your public sandbox. We re-run every probe server-side — not on your laptop.
-
Attestation
Pass → signed JSON + badge URL. Fail → fix and re-run while the purchase window is open.
What you ship to procurement
Certificate, report, badge, and a JSON pack — not a slide deck.
Pass the harness once and walk away with artefacts your buyers can verify offline. Every seal links to the same deterministic run report and signed attestation payload.
- Certificate of conformance Print-ready page with seal, principal, validity window, and per-scenario pass/fail table. Verify the signed payload any time.
- Harness run report Full scenario breakdown, endpoint tested, timestamps, and linked attestation — what security reviewers actually read.
- Bulkhead Certified badge An SVG seal for your README, docs and marketing site. Copy one line of Markdown; it reflects live status and links back to the certificate.
- Procurement pack (JSON) One download: attestation + signature, run results, rubric version, verify URLs, issuer details.
Why it lands with buyers
Explainable seals. No opaque scores.
Verifiable without us
Ed25519-signed attestation JSON. Buyers check it against our published public key using our open-source verifier — no account, no API call, no trusting us to grade our own signature.
Robustness, not just presence
Anyone can refuse the obvious phrasing. robustness-v1 replays 24 frozen variants of
the same three attacks — authority, urgency, role-play, limit-splitting — and every one must be
refused. See the rubric.
Advisory by design
Not insurance. Not a bank. Not a legal compliance certificate. A conformance seal for agent vendors.
For vendor security questionnaires
Answers procurement expects — without a six-month audit.
Deterministic harness
Identity binding, spend limits, revocation, idempotency, 402 handling, cancellation, and credential hygiene — scored automatically.
Signed attestation
Machine-readable proof of a passing run, signed with Ed25519. Buyers verify offline against our published public key — no account needed.
Public directory
Active seals appear in the certified directory so enterprise buyers can confirm status at renewal.
Issuer on record
Every attestation is signed by Bulkhead with issuer details embedded in the verifiable payload.
One agent · one fee
Certification pricing
AgentSurety certification
£750
- 90-day seal for one agent identity
- Unlimited re-runs while the window is open
- Certificate, report, badge, and procurement pack
- Operator console for run tokens and downloads
- Listed in the public directory when active
Founding partners — 5 slots at £500 · [email protected]
FAQ
Common questions
Does Bulkhead trust my self-reported results?
No. The API independently re-runs the full probe suite against your publicly reachable sandbox endpoint before issuing an attestation. Localhost and private-network URLs are rejected.
What does the harness actually test?
Seven scenarios in surety-v1: agent identity, spend ceiling, revocation, idempotency, payment-required handling, task cancellation, and credential exposure. See the full published rubric.
Is this SOC 2 or ISO 27001?
No. Bulkhead is an advisory conformance certification for production agent behaviour — not a compliance framework or insurance product.
What if we fail a scenario?
Fix the agent, mint a new run token in the console, and re-run. No extra fee while your 90-day certification window is open.
How do buyers verify our seal?
They open your certificate URL, or paste the attestation id into verify. A buyer who wants to check it themselves runs our open-source verifier against our published public key — the signature is Ed25519, so verification needs nothing from us but the key.
What do we send to procurement?
Download the procurement pack JSON from the console or certificate page. It bundles the signed attestation, run report, rubric version, and all verify links in one file.
Ready when your buyers ask the hard question.
£750 · 90-day seal · certificate, report, badge, and procurement pack included.