A graduated trust rating for AI agent operations. Four tiers, from self-assessed compliance to independent third-party audit. Bronze, Silver, and Gold are available now. Platinum is available for enterprise customers.
Bronze
VOLT-Compatible
Free
Silver
VOLT-Verified
Free
Gold
VOLT-Attested
Included
Platinum
VOLT-Enterprise
Contact Us
Contact Us
What is VOLT Certification?
VOLT Certification is a trust rating system for AI agent operations. When an AI agent executes a task — deploying code, approving a request, managing infrastructure — VOLT records every step in a cryptographic hash chain. The certification programme then grades how trustworthy that record is.
The model follows the same adoption pattern as TLS certificates: the lowest tier is free and self-assessed, lowering the barrier to near zero. Each subsequent tier adds stronger guarantees, external verification, and ultimately independent audit. The progression is designed to make verifiable trust the path of least resistance.
Current status
Available now
Bronze, Silver, and Gold certification. Bronze and Silver are deterministic self-assessment. Gold adds RFC 3161 external timestamping and Ed25519 signing, applied automatically during certification. All three tiers are self-service in QuoxCORE.
Enterprise
Platinum certification requires an independent third-party audit. We coordinate the auditor, compile VOLT evidence into compliance-ready bundles, and manage the certification lifecycle. Contact [email protected] to discuss your requirements.
How it works
Certification is a three-step process:
1
Record
Your orchestrator emits VOLT events at key points: when envelopes are received, when policies are evaluated, before and after tool execution, at approval checkpoints.
2
Bundle
At the end of a run, events are packaged into a portable Evidence Bundle: manifest, events (NDJSON), optional attachments (content-addressed), optional signatures.
3
Certify
The certifier runs checks against the bundle. Each tier has specific requirements. Pass all checks for a tier and every tier below it to earn that certification.
Certification is deterministic. The same bundle always produces the same result. There is no subjective judgement at Bronze or Silver — the verifier recomputes hashes, checks chain links, and confirms structure. Pass or fail.
Certification tiers
Each tier includes all requirements of the tier below it.
BronzeVOLT-Compatible
Your agent runs are recorded with valid structure. Events have timestamps, actor identifiers, and context. This is proof of participation — the minimum bar for verifiable operations.
Requirements
✓AEE envelopes present with valid schema
✓All 10 required event fields populated
✓Actor fields (actor_type, actor_id) on every event
How to earn it: Run the VOLT certifier against any recorded run. If the events are properly structured, Bronze is awarded automatically. No external dependencies required.
SilverVOLT-Verified
Every event is cryptographically chained to the previous one. If anyone deletes, modifies, or reorders an event after the fact, the chain breaks and verification fails. This is the tamper-evidence tier.
Requirements
✓SHA-256 hash chain intact across all events
✓Sequence numbers monotonically increasing with no gaps
✓Genesis event valid (seq=1, prev_hash=64 zeros)
✓Merkle root present and verified (if bundle provided)
How to earn it: Export a VOLT Evidence Bundle and run the certifier. The verifier recomputes every hash, checks every chain link, and confirms the Merkle root. Deterministic pass or fail.
GoldVOLT-Attested
An independent timestamp authority (RFC 3161) confirms when the record was created. The bundle is cryptographically signed. Data is retained for at least 30 days. This tier lets you prove to a third party when something happened, not just what. QuoxCORE auto-timestamps and auto-signs during certification.
Requirements
✓RFC 3161 external timestamp from a trusted TSA (auto via FreeTSA)
✓Ed25519 or HMAC bundle signature present and valid (auto-signed)
✓30-day minimum data retention proven
How to earn it: Certify any run with a bundle that is at least 30 days old. QuoxCORE automatically requests an RFC 3161 timestamp from FreeTSA.org and signs the bundle with Ed25519. No manual steps required beyond the 30-day retention window.
Contact Us
PlatinumVOLT-Enterprise
An independent auditor has verified the system. Compliance evidence maps directly to SOC 2 controls, ISO 27001 clauses, HIPAA requirements, or EU AI Act provisions. This is what enterprise procurement teams and regulators need to see.
Requirements
○Independent third-party audit on record
○Compliance evidence bundle (SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR)
○Minimum 10 evidence items attached
Platinum certification requires an independent audit. We coordinate the auditor, compile evidence, and manage the certification lifecycle. Contact us at [email protected] to discuss your requirements.
Embeddable badges
Once a run is certified, you can embed a trust badge on your website, documentation, or product pages. Badges are served as SVG images and link to a verification page where anyone can confirm the certification is valid and current.
VOLT BRONZE
VOLT-Compatible
VOLT SILVER
VOLT-Verified
VOLT GOLD
VOLT-Attested
Embed formats available:
HTML — <img> tag linking to the verification page
Markdown — badge image with verification link
Direct URL — SVG image URL for custom integrations
Badges are generated in the QuoxCORE dashboard after certification. Select a certified run and use the Embed Badge panel to copy the snippet for your preferred format.
Roadmap
Now
Bronze, Silver, and Gold certification (self-service)
Platinum tier via partner auditor programme (Vanta, Drata, or independent)
Compliance framework mapping (SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR)
Third-party certification reseller programme
Continuous monitoring and auto-recertification
FAQ
Is VOLT Certification the same as the VOLT protocol?
No. The VOLT protocol defines how to record tamper-evident event traces. VOLT Certification is a programme built on top of the protocol that grades how trustworthy a specific trace is. The protocol is the foundation; certification is the trust layer.
Can I get certified without using QuoxCORE?
Yes. The VOLT protocol and certification tiers are openly specified. Any platform that implements VOLT event recording and bundling can run the certifier. Bronze and Silver require no Quox-specific infrastructure.
Who verifies Gold and Platinum certifications?
Gold is automated. QuoxCORE requests an RFC 3161 timestamp from FreeTSA.org and signs the bundle with Ed25519 during certification. The only manual requirement is 30-day data retention. Platinum requires an independent third-party auditor. We work with compliance partners (Vanta, Drata, or independent auditors) to coordinate the audit, compile evidence, and issue the certification.
How long does a certification last?
Certifications are valid for 90 days by default. After expiry, the run can be re-certified. Certifications can also be revoked if the underlying data is found to be compromised.
What does the embeddable badge prove?
The badge links to a verification page where anyone can confirm: (1) the certification exists, (2) it has not expired or been revoked, (3) the tier and check results. It is a visual trust signal backed by cryptographic verification, not just a logo.
