Traefik Labs introduced the Sovereign Trust Plane (STP), a set of capabilities in Traefik Hub that brings verifiable evidence to AI agent governance, with general availability planned by September 30, 2026. STP connects delegated access, policy enforcement and protected records of what the gateway allowed and refused across model, tool and API traffic.

As agents begin issuing refunds, accessing customer data and changing business records, accountability reaches beyond the team that runs the platform. Security leaders must explain whose authority an agent carried, risk and compliance teams must show that controls worked, and product teams must investigate decisions made long after the conditions changed.

STP is built around those three responsibilities:

For CISOs, accountability that can withstand independent review. When an agent moves money, the CISO needs to establish who authorized it and which policy applied, without asking the platform team to piece together the history. STP brings delegation, enforcement and record integrity into one architecture. Separately administered witnesses let someone outside that team verify that previously witnessed history has not been rewritten or shortened.

For risk and compliance teams, evidence of what controls prevented. A refused action matters as much as a completed one when assessing whether a control worked. STP protects recorded approvals and refusals against undetected alteration. The record carries the decision, the policy that produced it, and both the person and the agent that acted. Its evidence path is separate from incident telemetry, so the audit record is unsampled.

For product and agent teams, a basis for understanding what happened. Investigating a bad action requires the request and relevant context recorded at the time. Today's configuration cannot explain yesterday's decision. STP connects gateway records to traces and extends enforcement to both the agent's tool call and the tool's call to the backend API, where money moves or data changes. Application records supply the business outcomes needed for a full investigation.

“An auditor should be able to check the record without taking our word for it,” said Emile Vauge, founder and CTO of Traefik Labs. “An independent witness gives them a way to challenge a history that has been rewritten, even when the operator controls the log and its signing key.”