Evidence over adjectives

ReadyLayer Trust Center

Product maturity should be inspectable. This page separates repository-verified capabilities, beta workflows, and design-partner commitments—and links every product claim to evidence you can review.

Run an evidence-led evaluation Inspect the source

Capability evidence matrix

“Verified” means the implementation and its verification path are present in this repository. It does not mean a third party has certified the product or that every deployment is production-ready by default.

Verified in repository

governance

Deterministic policy runner

A local Go runner evaluates versioned policy input and emits schema-defined evidence bundles.

Availability

Open source and self-hosted

Verify

go test ./...

Runner source Output contract Runner guide

Verified in repository

governance

Credential-free deterministic demo

A fixed sandbox pipeline demonstrates review, test, and documentation decisions without external credentials.

Availability

Included in the web application

Verify

npm test -- __tests__/demo-mode.test.ts

Demo API Demo contract tests Sandbox experience

Beta — validate in your environment

evidence

Signed agent attestations and AIBOMs

Agent activity can be bound to signed in-toto statements and CycloneDX AI bill-of-materials documents.

Availability

Available for controlled evaluation

Verify

npm test -- __tests__/agent-guard.test.ts __tests__/lib/cyclonedx-aibom.test.ts

Attestation implementation Agent guard tests AIBOM tests

Beta — validate in your environment

evidence

Cryptographically signed policy waivers

Policy exceptions include scoped approvals, expiry, signature verification, and an auditable decision path.

Availability

Available for controlled evaluation

Verify

npm test -- __tests__/lib/waiver-signing.test.ts

Waiver signing Verification tests Waiver API

Beta — validate in your environment

integration

Git provider governance workflows

Webhook and feedback adapters cover GitHub, GitLab, and Bitbucket with provider-specific contract tests.

Availability

GitHub is the primary evaluation path; validate other providers in your environment

Verify

npm test -- __tests__/contracts/github-webhook-contract.test.ts __tests__/integrations

GitHub webhook GitLab webhook Bitbucket webhook

Verified in repository

deployment

Self-hosted deployment

The web application supports a standalone container build with explicit health and readiness endpoints.

Availability

Open source; operated in your infrastructure

Verify

npm run build

Container build Deployment guide Health contract tests

Design-partner pilot

deployment

Managed enterprise deployment

Deployment topology, support coverage, data residency, and service levels are scoped with each design partner.

Availability

Pilot only; no public SLA or certification claim

Verify

Pilot acceptance plan agreed before production use

Enterprise boundary Release checklist Go-live runbook

Responsible disclosure

Report suspected vulnerabilities privately. Please do not include production secrets or customer data.

Security policy Email security

Explicit non-guarantees

ReadyLayer supports governance evidence; it does not replace human review, your CI test suite, legal advice, or an independent compliance audit. Hosted service levels and support obligations exist only when written in an executed agreement.

Loading the latest details...

Evidence over adjectives

ReadyLayer Trust Center

Run an evidence-led evaluation Inspect the source

Capability evidence matrix

Verified in repository

governance

Deterministic policy runner

A local Go runner evaluates versioned policy input and emits schema-defined evidence bundles.

Availability

Open source and self-hosted

Verify

go test ./...

Runner source Output contract Runner guide

Verified in repository

governance

Credential-free deterministic demo

A fixed sandbox pipeline demonstrates review, test, and documentation decisions without external credentials.

Availability

Included in the web application

Verify

npm test -- __tests__/demo-mode.test.ts

Demo API Demo contract tests Sandbox experience

Beta — validate in your environment

evidence

Signed agent attestations and AIBOMs

Agent activity can be bound to signed in-toto statements and CycloneDX AI bill-of-materials documents.

Availability

Available for controlled evaluation

Verify

npm test -- __tests__/agent-guard.test.ts __tests__/lib/cyclonedx-aibom.test.ts

Attestation implementation Agent guard tests AIBOM tests

Beta — validate in your environment

evidence

Cryptographically signed policy waivers

Policy exceptions include scoped approvals, expiry, signature verification, and an auditable decision path.

Availability

Available for controlled evaluation

Verify

npm test -- __tests__/lib/waiver-signing.test.ts

Waiver signing Verification tests Waiver API

Beta — validate in your environment

integration

Git provider governance workflows

Webhook and feedback adapters cover GitHub, GitLab, and Bitbucket with provider-specific contract tests.

Availability

GitHub is the primary evaluation path; validate other providers in your environment

Verify

npm test -- __tests__/contracts/github-webhook-contract.test.ts __tests__/integrations

GitHub webhook GitLab webhook Bitbucket webhook

Verified in repository

deployment

Self-hosted deployment

The web application supports a standalone container build with explicit health and readiness endpoints.

Availability

Open source; operated in your infrastructure

Verify

npm run build

Container build Deployment guide Health contract tests

Design-partner pilot

deployment

Managed enterprise deployment

Deployment topology, support coverage, data residency, and service levels are scoped with each design partner.

Availability

Pilot only; no public SLA or certification claim

Verify

Pilot acceptance plan agreed before production use

Enterprise boundary Release checklist Go-live runbook

Responsible disclosure

Report suspected vulnerabilities privately. Please do not include production secrets or customer data.

Security policy Email security