feat(research): add DOIs for the October 2026 batch and the kill switch report

data/research.json

@@ -61,7 +61,8 @@
           "sha256": {
             "paper.pdf": "e050e959252bec95ea836eabbec5f167be46d7779bd4a2a14709ec3fe3d847f0",
             "source.zip": "649a36e7f2446393f84d519ec54e851860b22f690e1a8e51f385dbb04cb6e391"
-          }
+          },
+          "doi": "10.5281/zenodo.23091275"
         }
       ]
     },
@@ -108,7 +109,8 @@
           "sha256": {
             "paper.pdf": "e92d8b6b3ac47ca45256769161c582ebc3c0f0fa2238cd21f9b50f782355c001",
             "source.zip": "41d9e2a6228d3243331fb19e54b012e2def73a5c86efa8e24d1805b2c5b6e4c4"
-          }
+          },
+          "doi": "10.5281/zenodo.23091276"
         }
       ]
     },
@@ -160,7 +162,8 @@
           "sha256": {
             "paper.pdf": "f3ff0522dd14071380b0b7719d65f9910ded38b50458eef8a0b765055d29cb33",
             "source.zip": "25bfeb15f54e69ac0e83dbe3edcb8f332a576565fe61b0357c6ef17e59fd5a24"
-          }
+          },
+          "doi": "10.5281/zenodo.23091277"
         }
       ]
     },
@@ -212,7 +215,8 @@
           "sha256": {
             "paper.pdf": "2ac1d1ace101642dca3283767fe7d99b60ce04c8f288358294cc618c77064c10",
             "source.zip": "e8e354cf33fb5f2d9ab002f69d74f692a54ab57d60bad7aaa74a5bb7295a83d1"
-          }
+          },
+          "doi": "10.5281/zenodo.23091278"
         }
       ]
     },
@@ -271,7 +275,8 @@
           "sha256": {
             "paper.pdf": "00cc50b3cf0977dbe01e6ea0c187cb28b3944ebb541735f056d0370c85915955",
             "source.zip": "701fd3e235ea8110efee0faf37151a3597c877f426c8889e16b5ea279bf313b7"
-          }
+          },
+          "doi": "10.5281/zenodo.23091279"
         }
       ]
     },
@@ -317,7 +322,8 @@
           "sha256": {
             "paper.pdf": "6a2416ecc052cacae474d6e7dd860804c7b9a4cce8d4ebbb63b68b25aad8d367",
             "source.zip": "306d655c241affbfd85d8d3e5e68bb21ea2245b27cbf7b8721f69aff651698c6"
-          }
+          },
+          "doi": "10.5281/zenodo.23091282"
         }
       ]
     },
@@ -373,7 +379,8 @@
           "sha256": {
             "paper.pdf": "bdd16a51dcafb0c4cf7ceb54c50235fa48bfe0ae344e461330f4679ef0d6b1cf",
             "source.zip": "7d668e9f794e4e4b334f56851bb8d41c324d313bcb7ab3ac97642af46a042024"
-          }
+          },
+          "doi": "10.5281/zenodo.23074704"
         }
       ]
     },
@@ -430,7 +437,8 @@
           "sha256": {
             "paper.pdf": "b89f5d608b0712ba2a18048da69b35af3cede1038e9790d0413c8b9576baeb9d",
             "source.zip": "1103abe9814b772a3615f0de3ef06dbddf621ee96d959b73502b741da36d53d0"
-          }
+          },
+          "doi": "10.5281/zenodo.23091285"
         }
       ]
     },
@@ -461,7 +469,8 @@
       "sha256": {
         "paper.pdf": "b9de5b439864438d4ceaeb0cb63ec0ec40520c1e1fd0df69851d479f3196cc72",
         "source.zip": "7996cdf7e25f8c3dfa0ac82cacc3d5f8a18ba00c94adb137049e923c673f34e3"
-      }
+      },
+      "doi": "10.5281/zenodo.23091290"
     },
     {
       "slug": "requirement-preserving-human-approval",
@@ -490,7 +499,8 @@
       "sha256": {
         "paper.pdf": "2382f88aa3f1a160f3fa70c8fa70693fb3e489f3e5ee138fbe73c678729ed65e",
         "source.zip": "87aae20b032cbd8fe5a489c44cb41519b9e5a88f30387323de40b4605148aade"
-      }
+      },
+      "doi": "10.5281/zenodo.23091292"
     },
     {
       "slug": "exact-output-disclosure",
@@ -519,7 +529,8 @@
       "sha256": {
         "paper.pdf": "abab3d5243eca1d857f862f99995800772b46c822c3706aa1d5bd327580f40e0",
         "source.zip": "d4f69438ef3d9b62456205424ed6ac421426a3b069c48725ccea56f0c8c44365"
-      }
+      },
+      "doi": "10.5281/zenodo.23091294"
     },
     {
       "slug": "model-key-broker-provisioning",
@@ -548,7 +559,8 @@
       "sha256": {
         "paper.pdf": "6a3cd702343a3ff22b4d32a042fb68e6913b81da59c27b3f0f6fe604f7a51771",
         "source.zip": "a7c651e23ba6ac3a442be20f29838aaefc0209b17bb7af5f7ad69445a6efa30b"
-      }
+      },
+      "doi": "10.5281/zenodo.23091296"
     },
     {
       "slug": "durable-shutdown-blocks",
@@ -577,7 +589,8 @@
       "sha256": {
         "paper.pdf": "ecdeef160106170d2c5fc47818c5863375821acd41f62771a0259a90068839db",
         "source.zip": "3597af5a7a28327f99a3b65191cf22ca6fececedab02bcdedf442d57d580c59a"
-      }
+      },
+      "doi": "10.5281/zenodo.23091298"
     },
     {
       "slug": "handoff-response-authentication",
@@ -606,7 +619,8 @@
       "sha256": {
         "paper.pdf": "fcccf2c0691ab30fb5aebac1b6e04dd149eabd37894145de2f46d34f81719e1d",
         "source.zip": "4b8899d9a47a85ed00d2630c30482b85107ce885fe9f08864998b105bbf041a7"
-      }
+      },
+      "doi": "10.5281/zenodo.23091302"
     },
     {
       "slug": "receipt-gated-model-serving",
@@ -635,7 +649,8 @@
       "sha256": {
         "paper.pdf": "78bf3cbd8e8143d425bb3b006cf89f20f65a7e5ab298e930375da499b49a8393",
         "source.zip": "8b431634b05c54bb5d11a5a4447d436f59e19a3cdd05e2f0e37e14974ead8a2a"
-      }
+      },
+      "doi": "10.5281/zenodo.23091307"
     },
     {
       "slug": "kill-switch",
@@ -664,7 +679,8 @@
       "sha256": {
         "paper.pdf": "d6703450646fd260a597165c56ee73d1f5b0531edcb366c4da51995b84a5dcf5",
         "source.zip": "5204e01d837d74b50a44473de8bcb85a7da16efac6e884cbd74d63033afa9bb0"
-      }
+      },
+      "doi": "10.5281/zenodo.23091310"
     }
   ]
 }

research/agent-manifest/index.html

@@ -21,7 +21,8 @@
 <meta name="citation_publication_date" content="2026/10/01">
 <meta name="citation_pdf_url" content="https://agentrust-io.com/research/agent-manifest/v2/paper.pdf">
 <meta name="citation_author" content="Imran Siddique">
-<script type="application/ld+json">{"@context": "https://schema.org", "@type": "ScholarlyArticle", "headline": "Agent Manifest: Portable, Hardware-Attestable Identity and Provenance for AI Agents", "abstract": "Agent Manifest proposes a signed record of the artifacts that define an AI agent, including its system prompt, model, policy, tools, retrieval corpus, memory, decision trace, delegation, supply chain, and human approvals. Artifact digests and canonical serialization make changes to the recorded baseline detectable when a verifier has the relevant artifacts and trusted keys. The design composes SPIFFE identities, RFC 8785 canonicalization, Ed25519 signatures, an optional ML-DSA-65 profile, and hardware-attestation bindings. This technical report describes the original model and preserves the recorded Ed25519 software benchmarks, delegation checks, and tamper probes. Signed metadata alone does not prove that the recorded configuration was used during execution. The evaluation does not measure post-quantum performance or establish live hardware provenance; continuous verification of mutable memory and retrieval state is outside its scope. Current SDK behavior and normative requirements are maintained separately.", "url": "https://agentrust-io.com/research/agent-manifest/", "author": [{"@type": "Person", "name": "Imran Siddique"}], "datePublished": "2026-10-01", "version": "2", "creativeWorkStatus": "Technical report; not peer reviewed", "license": "https://creativecommons.org/licenses/by/4.0/", "encoding": {"@type": "MediaObject", "encodingFormat": "application/pdf", "contentUrl": "https://agentrust-io.com/research/agent-manifest/v2/paper.pdf"}}</script>
+<meta name="citation_doi" content="10.5281/zenodo.23091277">
+<script type="application/ld+json">{"@context": "https://schema.org", "@type": "ScholarlyArticle", "headline": "Agent Manifest: Portable, Hardware-Attestable Identity and Provenance for AI Agents", "abstract": "Agent Manifest proposes a signed record of the artifacts that define an AI agent, including its system prompt, model, policy, tools, retrieval corpus, memory, decision trace, delegation, supply chain, and human approvals. Artifact digests and canonical serialization make changes to the recorded baseline detectable when a verifier has the relevant artifacts and trusted keys. The design composes SPIFFE identities, RFC 8785 canonicalization, Ed25519 signatures, an optional ML-DSA-65 profile, and hardware-attestation bindings. This technical report describes the original model and preserves the recorded Ed25519 software benchmarks, delegation checks, and tamper probes. Signed metadata alone does not prove that the recorded configuration was used during execution. The evaluation does not measure post-quantum performance or establish live hardware provenance; continuous verification of mutable memory and retrieval state is outside its scope. Current SDK behavior and normative requirements are maintained separately.", "url": "https://agentrust-io.com/research/agent-manifest/", "author": [{"@type": "Person", "name": "Imran Siddique"}], "datePublished": "2026-10-01", "version": "2", "creativeWorkStatus": "Technical report; not peer reviewed", "license": "https://creativecommons.org/licenses/by/4.0/", "encoding": {"@type": "MediaObject", "encodingFormat": "application/pdf", "contentUrl": "https://agentrust-io.com/research/agent-manifest/v2/paper.pdf"}, "identifier": "https://doi.org/10.5281/zenodo.23091277"}</script>
 <link rel="icon" href="/favicon.ico">
 <link rel="stylesheet" href="/design-system.css?v=22">
 <link rel="stylesheet" href="/research/research.css">
@@ -67,7 +68,7 @@ <h1>Agent Manifest: Portable, Hardware-Attestable Identity and Provenance for AI
 <div class="paper-status"><span>October 1, 2026</span><span>Not peer reviewed</span><span>Patent Pending</span></div>
 </header>
 <section class="paper-abstract" aria-labelledby="abstract"><h2 id="abstract">Abstract</h2><p>Agent Manifest proposes a signed record of the artifacts that define an AI agent, including its system prompt, model, policy, tools, retrieval corpus, memory, decision trace, delegation, supply chain, and human approvals. Artifact digests and canonical serialization make changes to the recorded baseline detectable when a verifier has the relevant artifacts and trusted keys. The design composes SPIFFE identities, RFC 8785 canonicalization, Ed25519 signatures, an optional ML-DSA-65 profile, and hardware-attestation bindings. This technical report describes the original model and preserves the recorded Ed25519 software benchmarks, delegation checks, and tamper probes. Signed metadata alone does not prove that the recorded configuration was used during execution. The evaluation does not measure post-quantum performance or establish live hardware provenance; continuous verification of mutable memory and retrieval state is outside its scope. Current SDK behavior and normative requirements are maintained separately.</p></section>
-<nav class="paper-actions" aria-label="Paper resources"><a class="primary-action" href="/research/agent-manifest/v2/paper.pdf">Read PDF <span>(12 pages)</span></a><a href="#cite">Cite this report</a><a href="/research/agent-manifest/v2/source.zip">Source and recorded evidence</a><a href="https://github.com/agentrust-io/agent-manifest">Project code</a></nav>
+<nav class="paper-actions" aria-label="Paper resources"><a class="primary-action" href="/research/agent-manifest/v2/paper.pdf">Read PDF <span>(12 pages)</span></a><a href="#cite">Cite this report</a><a href="/research/agent-manifest/v2/source.zip">Source and recorded evidence</a><a href="https://github.com/agentrust-io/agent-manifest">Project code</a><a href="https://doi.org/10.5281/zenodo.23091277">Archive and DOI</a></nav>
 <section class="research-section"><h2>What this report contributes</h2><p>A signed baseline for agent artifacts, with recorded Ed25519 benchmarks, delegation checks, and tamper probes.</p></section>
 <section class="research-section"><h2>Evidence and limits</h2><ul><li>The saved benchmark run is dated July 1, 2026, on Windows 11, CPython 3.12.10, and an ARMv8 Qualcomm host. It did not record its SDK commit; the inferred revision is 67c21db.</li><li>A rerun at that revision on October 1, 2026 reproduced every size and tamper outcome, but its Level 1 verify median of 3.9 to 4.9 ms did not reproduce the 2.7 ms bound.</li><li>At the evaluated revision the verifier did not check human approval signatures: forged approvals still returned APPROVED. Later SDK revisions verify them.</li><li>Only the Ed25519 profile was measured. Signed artifacts do not establish that those artifacts were used during execution.</li></ul>
 <p>The source package preserves the recorded inputs and results. The benchmark was rerun at the inferred revision on October 1, 2026 with the SDK clock frozen at the original run time. No independent replication is claimed.</p>
@@ -80,6 +81,7 @@ <h1>Agent Manifest: Portable, Hardware-Attestable Identity and Provenance for AI
   year = {2026},
   type = {Technical report},
   note = {Version 2; not peer reviewed},
+  doi = {10.5281/zenodo.23091277},
   url = {https://agentrust-io.com/research/agent-manifest/v2/}
 }
 </code></pre></section>

research/agent-manifest/v2/CITATION.cff

@@ -13,6 +13,7 @@
   ],
   "url": "https://agentrust-io.com/research/agent-manifest/v2/",
   "license": "CC-BY-4.0",
+  "doi": "10.5281/zenodo.23091277",
   "preferred-citation": {
     "type": "report",
     "title": "Agent Manifest: Portable, Hardware-Attestable Identity and Provenance for AI Agents",

research/agent-manifest/v2/citation.bib

@@ -5,5 +5,6 @@ @techreport{agentrust2026agentmanifest
   year = {2026},
   type = {Technical report},
   note = {Version 2; not peer reviewed},
+  doi = {10.5281/zenodo.23091277},
   url = {https://agentrust-io.com/research/agent-manifest/v2/}
 }