Attescend™ by Antagon

Evidence you can verify. Decisions you can defend.

Attescend turns AI test and evaluation results into evidence an authorizing official can verify alone, offline, without trusting the vendor or the test team.

Request a demonstration Download the capability statement (PDF)

The problem

Test reports nobody downstream can check

AI fielding decisions rest on test reports nobody downstream can check: which model was tested, whether the numbers changed, whether the test ran as described. DoD guidance asks programs to include model test and evaluation results in the authorization package, but gives no way to verify them.

DoD CIO, AI Cybersecurity Risk Management Tailoring Guide, v2, July 2025, §3.1.3.

How it works

Sign, anchor, verify

1. Sign every step

Each evaluation step produces a signed receipt: which model, which inputs, which test, which result. Receipts are chained together.

2. Anchor it independently

Independent RFC 3161 timestamp authorities and a transparency log make every record tamper-evident: no silent edits, no back-dating.

3. Verify offline

The assessor runs Attescend's verifier with nothing but the evidence package and a public trust anchor. It recomputes the assurance level itself and names any record that was altered or substituted.

An independent evaluator can re-run the test and co-sign the result. On NVIDIA confidential-computing GPUs, results are also bound to the hardware's own attestation.

Proven to date

What has been demonstrated

Two-party, hardware-attested evaluation on an NVIDIA H100 confidential-computing GPU with production timestamp authorities (21 October 2026). Strict mode: AL3 against a refreshed vendor key set, AL2 against the key set as issued. Separate issuers and keys, one host.
Change one metric, or swap in one receipt from another run, and verification fails and names the record.
Installs, issues and verifies with no network connection; container images for Intel and ARM servers.
Patent pending: three U.S. provisional applications filed.

Why it is different

Evidence the buyer can check

Approach	Records the result	Tamper-evident	Ties result to model and hardware	Buyer verifies offline
Signed PDF reports, model cards, dashboards	Yes	No	No	No
Code signing, infrastructure attestation	No	Yes	Partly	Yes
Attescend	Yes	Yes	Yes	Yes

Where it runs

Unclassified networks, or a hosted confidential-computing environment.
Inside the customer's own accredited environment.
Disconnected enclaves, with an on-premises timestamp authority.

How to buy

Pilot: one model and one evaluation workflow, about 8 weeks, fixed price.
Then a license for the evidence service and verifier.
Routes: directly from Antagon, through prime contractors on AI test and evaluation vehicles, or via the Tradewinds Solutions Marketplace.

Company data

Company	Antagon, Inc., U.S.-owned small business, Riverview, Florida
UEI / CAGE	KBSGT7CZ4AH3 / 17E75
NAICS	541715 (primary), 541511, 541512
Contact	W. Alexander Ousley, President and CEO, founders@antagon.ai

Ready to see it?

Request a 15-minute demonstration: we run a live evaluation, change one number, and show the verifier catch it.

Request a demonstration

Attescend is a trademark of Antagon, Inc. Patent pending.