Traefik Labs today introduced the Sovereign Trust Plane, a set of capabilities in Traefik Hub that brings verifiable evidence to AI agent governance, with general availability planned by September 30, 2026. STP connects delegated access, policy enforcement and protected records of what the gateway allowed and refused across model, tool and API traffic. As agents begin issuing refunds, accessing customer data and changing business records, accountability reaches beyond the team that runs the platform. Security leaders must explain whose authority an agent carried, risk and compliance teams must show that controls worked, and product teams must investigate decisions made long after the conditions changed.
Traefik Labs introduces Sovereign Trust Plane in Traefik Hub
Brings verifiable evidence to AI agent governance
General availability planned by September 30, 2026
Three capabilities: Delegate, Authorize, Prove
Uses IETF ID-JAG and OpenID AuthZEN standards
Independent witness verifies record integrity
For CISOs, accountability that can withstand independent review. When an agent moves money, the CISO needs to establish who authorized it and which policy applied, without asking the platform team to piece together the history. STP brings delegation, enforcement and record integrity into one architecture. Separately administered witnesses let someone outside that team verify that previously witnessed history has not been rewritten or shortened.
For risk and compliance teams, evidence of what controls prevented. A refused action matters as much as a completed one when assessing whether a control worked. STP protects recorded approvals and refusals against undetected alteration. The record carries the decision, the policy that produced it, and both the person and the agent that acted. Its evidence path is separate from incident telemetry, so the audit record is unsampled.
For product and agent teams, a basis for understanding what happened. Investigating a bad action requires the request and relevant context recorded at the time. Today's configuration cannot explain yesterday's decision. STP connects gateway records to traces and extends enforcement to both the agent's tool call and the tool's call to the backend API, where money moves or data changes. Application records supply the business outcomes needed for a full investigation.
STP brings these responsibilities together through three capabilities:
Delegate exchanges credentials through the organization's identity provider to obtain access for the intended resource, implementing the IETF Identity Assertion JWT Authorization Grant, the draft specification behind Okta's Cross App Access. The identity provider controls the permissions issued, allowing organizations to constrain delegated authority as work crosses systems. Because the assertion names both the person and the agent, an agent can be granted strictly less than the person it acts for.
Authorize asks the organization's policy engine whether a particular API request or Model Context Protocol tool call is permitted and enforces the answer before forwarding it. The OpenID AuthZEN interface lets teams connect compatible policy engines while retaining their own policies and decision logic.
Prove commits cryptographic fingerprints of gateway logs and access logs to a transparency log. A verifier checks retained records against those commitments and signed checkpoints, making changes detectable while the original log content stays in customer-controlled storage.
A signed log alone leaves a difficult question: could the operator discard recent entries and sign a different history? An independent witness answers it, by retaining a checkpoint and checking that every later checkpoint extends the history it already accepted. Reviewers can require witness signatures and check freshness when verifying the record. The witness receives cryptographic checkpoints and proofs, without the underlying requests or log contents. Organizations can place it under a separate risk team or an auditor's control, including inside a private or air-gapped network, under separate administration and key custody.
The gateway, evidence storage and verifier run on infrastructure the customer controls, with customer-selected identity and policy services. Offline deployment options support environments where governance must operate without a SaaS control plane in the request path.
About Traefik Labs
Traefik Labs builds cloud-native networking and connectivity software used by development and platform teams worldwide. Its open-source proxy, Traefik Proxy, has been in production for a decade, has surpassed 3.5 billion downloads, and is the default ingress controller in widely adopted Kubernetes distributions. Traefik Hub, the company's commercial platform, unifies API Gateway, AI Gateway, MCP Gateway, and API Management on a single runtime. Traefik Labs is headquartered in both San Francisco, California and Lyon, France.
