Technical Working Group
Security practitioners, researchers, and builders shaping the open standard for AI agent runtime security.
System category specification
AARM is a vendor-neutral, community-driven standard — no single company controls the roadmap.
Practitioner-led
Every requirement is proposed, debated, and validated by practitioners with real-world security experience.
Publicly auditable
All specification changes, conformance decisions, and working group discussions happen in the open.
How the working group operates
The TWG governs the AARM specification, conformance process, and builder registry through open collaboration.
Specification
Draft, review, and refine AARM requirements. Propose additions and flag ambiguities.
Conformance
Define and validate the testing protocol. Review evidence packages from builders.
Community
Engage builders, publish research, and grow the AARM ecosystem.
Threat Modeling
Identify new attack classes and validate coverage of the AARM threat model.
Join the working group
The working group is open to security practitioners, researchers, and builders who want to shape the future of AI agent security.