Trefur's central exposure is that it offers evidence rather than certification: its activity record gives the trail that ISO 42001 and SOC 2 reviewers expect, a continuous, exportable record of how AI operates across an organisation, and Trefur presents itself as evidence for those frameworks rather than a certification claim. This positions the trace itself as the audit artifact.
Trefur's assurance is bounded by what it observes. A trust credential works the same way: an attestation of observed fact over a stated window. Trefur is built on open standards, the OpenTelemetry GenAI Semantic Conventions, so a team can instrument once and capture everything.
Trefur's breadth is the trade-off and the mitigant. It reads from every agent framework rather than locking a team into a single one, and the capture layer is native OpenTelemetry and fans out to existing backends.
