Give each Agent a hardware-bound identity instead of a shared client credential.
Truston / USB key platform
Trust always on.
Wherever Agents run.
A secure USB key for AI Agents. Verify identity, limit access, and sign every decision. Private keys stay on the device.
TRUSTON USB KEY
SE
HARDWARE ROOT
SHA-384
ML-DSA-65
DID:TRUSTON
W3C VC 2.0·IETF OAuth 2.1·FIDO2·CC EAL5+·PQC Ready·ISO/IEC 42001·
······
The problem
Agent credentials need
a hardware boundary
Agents can move money, deploy code, and access private data. Shared credentials and editable logs leave you guessing who did what.
Record who approved the task and keep that delegation intact across Agent handoffs.
Limit access to a resource, action, time window, and call count. Revoke it when the task ends.
Check a signed record of each action without relying on the host's logs.
The solution
Truston puts Agent trust
on a USB key
AI Platform LayerLLMs · Agent Frameworks · Orchestration
Truston USB Key PlatformHardware policy check for each action
IDIdentity
AUTHAuthorization
POLICYPolicy
AUDITAudit
SECURE ELEMENTKeys and policy stay on the USB keySIGNED
Enterprise SystemsDatabases · APIs · Cloud · On-Prem
Works with your Agent stack
Keep your LLM and Agent framework. Add Truston between the Agent and your systems.
Carries identity and authority
Bind each Agent to an explicit grant of access.
Keeps trust always on
Store keys, evaluate policy, and sign decisions inside the secure element.
The trust model
Three checks.
One signed record.
Truston checks identity, permission, and policy before signing the result.
Who is acting?
A hardware-bound DID identifies the Agent. A signed manifest checks its code at launch.
What may it do?
Delegation tokens define the task and its limits. Child Agents can narrow access, never expand it.
Should it act now?
The secure element checks time, origin, and usage against current policy, then signs its decision.
Can you prove it?
Signed assertions link identity, delegation, and action. An independent reviewer can verify the record with a public key.
Start with Truston