Universal Trust Adapter (UTA)

Repo ecosystem (one owner per concern, split 2026-09-26): this repo owns the ATC protocol — the v3.0 RFC draft (spec/), the UTS schema, the 36-vector conformance corpus (uta-monorepo/vectors/), the reference implementation (uta-monorepo/), format adapters, plugins, and the Stranger Manifesto. Product code (mcp-server, npm marketnow-mcp, atc-sdk, integrations) lives in alicelabs-llc/MARKETNOW; the live marketplace (site, catalog data, data pipelines, Vercel deploys of marketnow.site) lives in eddyflores100-lang/marketnow.

The USB-C of agent trust.

UTA translates between ALL trust credential formats used by AI agents via a canonical Universal Trust Schema (UTS).

Like Zapier connects applications, UTA connects trust standards.

Built by Edison Flores & Alejandro Flores at AliceLabs LLC (Wyoming, USA).

⚡ Verify our claims — the stranger test (30 seconds)

Every trust claim in this repo is re-derivable by a stranger, from live public URLs, with no account and no trust in our endpoints:

# 9 checks against Sigstore Rekor's LIVE transparency-log data:
# entry exists · content hash · countersignature · signed tree head ·
# Merkle inclusion proof · C2SP checkpoint — all verified locally.
curl -sL https://www.marketnow.site/uta/conformance/anchors/verify-rekor.mjs -o verify-rekor.mjs
node verify-rekor.mjs

# Full conformance suite (14 vectors, stage scoring, curl + node only):
# https://www.marketnow.site/uta/conformance/

Exercised in production, receipts public: we rotated our CA key mn-ca-002 → mn-ca-003 on 2026-09-08 after private-key material was found committed to a public repository (exposure confirmed; no third-party misuse observed). Revocation published same-day, postmortem public: https://marketnow.site/security/incidents/2026-09-08. Three Rekor log entries (logIndex 2762061972, 2764017355, 2764479676) anchor the digests, and the published npm tarball's tar layer rebuilds byte-exact from source (sha256 519d406a…).

🌐 The Stranger Manifesto — 13 languages

Trust that requires membership is not trust. It's a guest list.

Ten build rules for stranger-verifiable agent trust — read it in your language (every version anchored to the same live receipts):

English · Español · Português · Français · Deutsch · Italiano · Русский · 日本語 · 中文 · 한국어 · हिन्दी · العربية · Türkçe

Markdown sources: manifesto/ — one file per language, same content, same receipts. Rendered right here on GitHub; the marketnow.site/manifesto/ pages ship with the next site deploy.

🌍 Visa & Mastercard article — 14 languages

"Visa has a Trusted Agent Protocol. Mastercard has Verifiable Intent. Here's the layer neither one gives you."

• English — canonical, full version
• العربية
• Deutsch
• Español
• Français
• हिन्दी
• Bahasa Indonesia
• Italiano
• 日本語
• 한국어
• Português
• Русский
• Türkçe
• Tiếng Việt
• 中文

🌍 Global Trust Series (multi-language, 2026-09-08)

The 2026 gray-market quota trust crisis, documented — plus the receipts-based fix:

• English — You Paid an AI Reseller — Then the Rules Changed Mid-Cycle
• 中文 — 你买的 AI 合租/中转被改规则或跑路？开发者自保清单
• Русский — Оплатили AI-подписку через посредника — а правила изменились посреди цикла?
• Español — Pagaste por Claude o Cursor a un revendedor ¿y las reglas cambiaron a mitad del ciclo?
• Sourced timeline (EN) — The 2026 AI Quota Gray-Market Trust Crisis — A Sourced Timeline
• Series index · Verify a trust card: https://marketnow.site/verify

🆕 What's new — v5.1 (revocation that answers + tool fingerprinting)

Release v5.1 — roadmap items 1 & 5 (commit 7fb7db6a, Rekor anchor #4):