Federated, post-quantum signed, zero-lock-in compliance certificates for AI agent projects.
Every enterprise deploying AI agents has the same question: "Is this agent actually secure, and can I prove it to an auditor?" Today, the answer is a marketing PDF. It cannot be verified. It cannot be trusted.
NTI gives every AI agent repo a portable, cryptographically signed compliance certificate that any third party can verify offline in seconds. No server. No subscription. No lock-in.
| Traditional badge | NTI verified badge |
|---|---|
| Self-reported score | OIDC + Dilithium5 signed |
| Vendor holds your data | Your repo holds the cert |
| GitHub only | GitHub, GitLab, Azure, Google, custom |
| Cannot verify offline | Verify with one command, no network |
| Centralized | Federated — anyone can mirror |
name: NTI Verify
on: [push, pull_request]
permissions:
id-token: write
contents: read
jobs:
verify:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: abisheakp197/nti-badge@v1
- name: Commit certificate
run: |
git config user.name "nti-bot"
git config user.email "bot@nti.local"
git add nti-certificate.json
git commit -m "chore: NTI certificate [skip ci]" || true
git push || true
[](https://nti-badge-svs1.vercel.app/repo.html?repo=your-org/your-repo)
pip install nti-scanner nti-scanner verify ./nti-certificate.json
No network. No NTI servers. Just math.
NTI is a protocol, not a product. Any company, university, or government can run their own mirror node. See the federation manifest for the full spec.