Skip to content
Agent Threat Rules (ATR)中文
Community / Join

Join the ATR community

ATR is an open standard kept by the people who write rules and the people who make decisions with them. Joining is free. Organization membership is separate and not open yet.

Two ways to take part

ExpertContributor
WhoCISOs, heads of AI security, auditors, policy and insurance specialists who decide how agents are deployed or assessed.Practitioners: detection engineers, red-teamers, researchers, engine and integration developers.
What you doSet the quarterly coverage priorities and review the framework crosswalks. The role is advisory, with no merge or veto rights.Write, test and review rules; report evasions and false positives; join a working group.
RightsOpen issues and pull requests like anyone. Merging is limited to maintainers with repository permission.The same. Contributors are nominated as maintainers through sustained review work.
IntakeRolling.Rolling; listings are batched once a month.

Steering (the TSC and maintainers) is not open to applications. Seats follow the charter: people are nominated from their contributions.

Apply

Apply on GitHub (public)[email protected]

To apply privately, email the address above with the same fields as the GitHub form. Please read how your data is handled, below, before you apply.

§1What happens next

Four steps

  1. 01You apply through the GitHub form, or by email if you would rather apply privately. You do not need to apply to contribute: anyone can open issues and pull requests.
  2. 02Adam Lin, the maintainer, reads every application and invites people personally.
  3. 03Once invited, we draft your directory entry for you to confirm.
  4. 04Your merged work is recorded in the public community ledger under your GitHub name, and your tier follows from it.
§2Your data

How your data is handled

Who is responsible
Adam Lin, the maintainer of ATR, is responsible for the data you send with an application. The ATR Project is not a legal entity, so he is responsible personally. Contact: [email protected].
What is collected
What you put in the application: your name, title, country, optional organization, GitHub or ORCID name, areas and problems you are interested in, your conflict-of-interest disclosure, your consent choices, and an optional photo. Email applications also include your email address.
Why
To review your application, reply to you, assign work, list you in the directory if you agree, and record your contributions. Nothing else.
Where it is kept and who sees it
A GitHub application is a public issue. Email applications and member records are kept privately by the maintainer, not in any public repository. Only the maintainer, and maintainers he names to review applications, can see them. They are never sold and never shared with any company, including PANGUARD AI, INC., the maintainer's company.
How long
Applications that are not accepted are deleted within six months. Member records are kept while you are a member and deleted when you ask.
Your choices
Write to [email protected] to see what we hold about you, correct it, have it deleted, or be removed from the directory. No reason needed; we reply within 30 days. Your organization is listed only if you allow it, and a listing is not an endorsement by your organization.
What stays public
Issues, pull requests and commits on GitHub are public and stay in the project's history, and the community ledger records them under your GitHub name. Leaving the directory does not remove that history.

Last updated 2026-11-08