AgentPROV corpora v0.1.0: the collection index

The index of the AgentPROV v0.1.0 corpus collection: 52 execution-provenance corpora built by AgentPROV v0.1.0 from published LLM-agent run logs, sealed and deposited as 15 part records, one per licence class and harness family. COLLECTION-INDEX.json lists each part record and, per corpus, its version, content digest and root digest, so a downloaded corpus can be checked against a published digest (agentprov verify --level chain). This record holds no corpus data; the datasheets of the non-copyleft corpora are copied here. This deposit draft is the index of an AgentPROV collection of 15 part record(s) holding 52 corpus version(s), prepared offline by agentprov package --index for the release date 2026-10-30. It holds no corpus data: COLLECTION-INDEX.json lists each part record's reserved DOI and each corpus's content digest and root digest, and a copy of each corpus's datasheet is included, except for corpora under a copyleft licence, whose datasheets stay in their part records. Nothing has been uploaded or published. Part record AgentPROV corpora: AgentDojo and AgentDyn reference runs (MIT) (reserved DOI 10.5281/zenodo.23794646; licence class MIT): agentdojo-upstream-2024-06 0.1.0, agentdojo-upstream-head 0.1.0, agentdyn-a 0.1.0, agentdyn-b 0.1.0, agentdyn-c 0.1.0, mandate-agentdojo-eval 0.1.0, rope 0.1.0. Part record AgentPROV corpora: AgentHarm-derived studies (MIT, AgentHarm use clause) (reserved DOI 10.5281/zenodo.23792648; licence class MIT; restrictions: "AgentHarm task data: MIT License with an additional clause (use only to improve AI safety and security)"): fragfuse-agentharm 0.1.0, kexin-xu-01-agentharm 0.1.0. Part record AgentPROV corpus: aiAuthZ on AgentDojo (AGPL-3.0-only) (reserved DOI 10.5281/zenodo.23792224; licence class AGPL-3.0-only; restrictions: "AGPL-3.0: a corpus holding these logs is conveyed under the AGPL-3.0 (corresponding source, the same licence for derived works); kept in its own corpus (D-94)"): aiauthz-agentdojo 0.1.0. Part record AgentPROV corpus: SENTRY on AgentDojo (AGPL-3.0-only) (reserved DOI 10.5281/zenodo.23792368; licence class AGPL-3.0-only; restrictions: "AGPL-3.0: a corpus holding these logs is conveyed under the AGPL-3.0 (corresponding source, the same licence for derived works); kept in its own corpus (D-94)"): sentry-agentdojo 0.1.0. Part record AgentPROV corpus: gate on AgentDojo (AGPL-3.0-only) (reserved DOI 10.5281/zenodo.23792527; licence class AGPL-3.0-only; restrictions: "AGPL-3.0-only: a corpus holding these logs is conveyed under the AGPL-3.0 (corresponding source, the same licence for derived works); kept in its own corpus (D-94)"): gate-agentdojo 0.1.0. Part record AgentPROV corpus: Munim (bookkeeper) on AgentDojo (GPL-3.0-or-later) (reserved DOI 10.5281/zenodo.23792318; licence class GPL-3.0-or-later; restrictions: "GPL-3.0-or-later: a corpus holding these logs is conveyed under the GPL (corresponding source, the same licence for derived works); kept in its own corpus (D-94)"): bookkeeper-agentdojo 0.1.0. Part record AgentPROV corpus: LLMLock on AgentDojo (GPL-3.0) (reserved DOI 10.5281/zenodo.23794220; licence class GPL-3.0): llm-lock-agentdojo 0.1.0. Part record AgentPROV corpora: AgentDojo-format studies I (MIT) (reserved DOI 10.5281/zenodo.23794135; licence class MIT): ceferisbarov-agentdojo 0.1.0, craibench-agentdojo 0.1.0, dca-agentdojo 0.1.0, drift-head 0.1.0, drift1-agentdojo 0.1.0, glitch-agentdojo 0.1.0, hilarytorn-trajectory-poisoning 0.1.0, kavach-agentdojo 0.1.0. Part record AgentPROV corpora: AgentDojo-format studies II (MIT) (reserved DOI 10.5281/zenodo.23794077; licence class MIT): kongminos-agentdojo 0.1.0, linyxus-agentdojo 0.1.0, melon-agentdojo 0.1.0, memo-ozdincer-agentdojo 0.1.0, menelaus29-ipi-multidomain 0.1.0, mohameduk-agentdojo 0.1.0, shreeyavarma-llm-safety 0.1.0. Part record AgentPROV corpora: Inspect and OpenHands studies (MIT) (reserved DOI 10.5281/zenodo.23794092; licence class MIT): atia-benchmark 0.1.0, openagentsafety 0.1.0, whistlebench 0.1.0. Part record AgentPROV corpus: ControlArena persistent-state evaluation logs, metadata only (MIT) (reserved DOI 10.5281/zenodo.23792237; licence class MIT): controlarena-persistent 0.1.0. Part record AgentPROV corpora: Apache-2.0 studies (DTap, AgentOps-Bench and AgentDojo-format studies) (reserved DOI 10.5281/zenodo.23794813; licence class Apache-2.0): agentops-bench 0.1.0, dtap-bench 0.1.0, geryon-agentdojo 0.1.0, interbolt-agentdojo 0.1.0, tacit-agentdojo 0.1.0, yockcheng-prompt-injection-harness 0.1.0. Part record AgentPROV corpora: CC BY AgentDojo-format studies (reserved DOI 10.5281/zenodo.23794172; licence class CC-BY-4.0): adprov-v1-release 0.1.0, ast-survey-agentdojo 0.1.0, authority-caps-agentdojo 0.1.0, ipi-defenses-agentdojo 0.1.0, seagent-agentdojo 0.1.0. Part record AgentPROV corpora: CC BY studies of other agent harnesses (reserved DOI 10.5281/zenodo.23794107; licence class CC-BY-4.0): autogen-guard-placement 0.1.0, code-agent-misalignment 0.1.0, credleak-p15b 0.1.0, mcphunt 0.1.0, redcode-exec-openhands 0.1.0, redcode-exec-qwencode 0.1.0, what-surrounds 0.1.0. Part record AgentPROV corpus: AgentHarm runs of the agent security tools survey (reserved DOI 10.5281/zenodo.23792398; licence class CC-BY-4.0; restrictions: "AgentHarm task data: MIT License with an additional clause (use only to improve AI safety and security)"): ast-survey-agentharm 0.1.0. This index record is licensed CC-BY-4.0. Each corpus keeps its own licence, stated in its part record and its datasheet. A reserved DOI is registered only when its record is published. To verify a corpus: download its part record, compare each archive's sha256 or md5 with that record's DEPOSIT-MANIFEST.json, and run agentprov verify on the archives with the root digest listed here (archive mode, no extraction; H.5.5).