Windlass builds open standards, trusted distribution, and developer tooling for agentic software. We provide supply chain infrastructure for agentic software: shared packaging, identity, and provenance so developers can inspect, verify, and reuse agent components across runtimes without platform lock-in.
| Project | Description | Status |
|---|---|---|
| Agent Volumes | An open standard for packaging and distributing agent components |   |
| Windlass Tabulane | Team distribution and change management for agent components | In Development |
| shelf | Install, publish, and verify Agent Volumes from the CLI | In Development |
| vers-js | TypeScript library to parse, validate, and canonicalize VERS declarations, with no runtime dependencies |   |
| actionlint-hardened-action | Reusable GitHub Action that runs actionlint in a digest-pinned container image |   |
| slsa-builder | Reusable provenance-builder foundation targeting SLSA Build L3+ (pre-release; not a certification claim) | Experimental |
| Shared guidelines & security workflows | Company policy documents & Reusable OpenSSF Scorecard, OSV Scanner, and dependency-review workflows | Current |
Note
Agent Volumes is an independent, vendor-neutral open standard originally developed and released by Windlass. Implementations and contributions from other vendors and developers are welcome.
