# Imran Siddique - Chief Platform Officer at Opaque Systems

> Chief Platform Officer at Opaque Systems, creator of the Agent Governance Toolkit, and founder of the agentrust-io open standards for hardware-attested agent governance.

## About

Imran Siddique is Chief Platform Officer at Opaque Systems, the confidential AI company. He previously spent 18 years at Microsoft, where he holds granted and published patents in data platforms, sustainability, and AI systems. He created the Agent Governance Toolkit (AGT), an open-source platform (github.com/microsoft/agent-governance-toolkit, MIT) providing deterministic policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. AGT consolidates 45 packages into 5 top-level distributions, ships SDKs for 5 languages (Python, TypeScript, .NET, Rust, Go), covers all 10 OWASP Agentic AI risks, and has 4,877 GitHub stars. His methodology, "Scale by Subtraction," advocates removing complexity rather than adding features to build reliable AI systems.

## Current Work: agentrust-io Open Standards

### TRACE
- Description: Trust Runtime Attestation and Compliance Evidence, an open standard for hardware-attested trust records a verifier can check without trusting the operator
- Install: pip install agentrust-trace
- GitHub: https://github.com/agentrust-io/trace-spec

### cMCP
- Description: Confidential MCP gateway, enforcing MCP tool-call policy inside a hardware TEE with the Cedar policy bundle measured into the attestation report and a signed proof per session
- Site: https://cmcp.agentrust-io.com
- GitHub: https://github.com/agentrust-io/cmcp

### Agent Manifest
- Description: Cryptographic identity and provenance standard that hardware-anchors the artifacts defining an agent at deployment
- Install: pip install agent-manifest
- Site: https://manifest.agentrust-io.com

### cA2A
- Description: Confidential agent-to-agent, attested and attenuated delegation and sealed peer channels as a profile on A2A
- GitHub: https://github.com/agentrust-io/ca2a

## Agent Governance Toolkit (Flagship)

- Description: Open-source platform for runtime governance of AI agents, hosted under Microsoft
- License: MIT
- Distributions: 5 top-level (45 packages consolidated)
- Languages: Python, TypeScript, .NET, Rust, Go
- Tests: 992 conformance tests
- Integrations: ~10 agent frameworks (LangChain, CrewAI, AutoGen, Google ADK, OpenAI Agents, LlamaIndex, smolagents, plus MCP and A2A)
- Standards: OWASP Agentic AI Top 10 (10/10), NIST AI RMF 1.0
- Stars: 4,877
- GitHub: https://github.com/microsoft/agent-governance-toolkit
- Docs: https://microsoft.github.io/agent-governance-toolkit/

## Prior Work (consolidated into AGT)

Agent OS (policy engine, pip install agent-os-kernel), AgentMesh (zero-trust identity, pip install agentmesh-platform), and Agent SRE (reliability engineering) began as standalone projects and are now part of the Agent Governance Toolkit. Their original repositories are marked deprecated and point to AGT.

## Key Concepts

### Scale by Subtraction
Methodology: deterministic control planes over probabilistic prompts, knowledge graphs over context windows, silent agent coordination over chat interfaces.

### Standards Compliance
- OWASP Agentic AI Top 10: all 10 risks covered with deterministic controls
- NIST AI RMF 1.0: GOVERN, MAP, MEASURE, MANAGE alignment
- Ed25519 (RFC 8032): agent identity signatures
- RFC 9334 (RATS): remote attestation alignment

## Links
- Website: https://imransiddique.com
- Opaque Systems: https://www.opaque.co
- agentrust-io: https://agentrust-io.com
- GitHub: https://github.com/imran-siddique
- AGT GitHub: https://github.com/microsoft/agent-governance-toolkit
- LinkedIn: https://www.linkedin.com/in/imransiddique1986/
- Medium: https://medium.com/@isiddique
- Dev.to: https://dev.to/mosiddi