diff --git a/product/apps/opc/src-tauri/Cargo.lock b/product/apps/opc/src-tauri/Cargo.lock
index 829b0008..c43ba2f9 100644
--- a/product/apps/opc/src-tauri/Cargo.lock
+++ b/product/apps/opc/src-tauri/Cargo.lock
@@ -8,6 +8,30 @@ version = "0.11.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fe438c63458706e03479442743baae6c88256498e6431708f6dfc520a26515d3"
 
+[[package]]
+name = "action-gate-core"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0c828e53a7a5648d0555dfd8208df7fc9231bb32371078eeabb03c691e4145"
+dependencies = [
+ "action-gate-types",
+ "canonical-keysort-json",
+ "hex",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "action-gate-types"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f06b181e4649459d2fafaf0ffe087ee29f467d04044e50f9d1c0738564c63264"
+dependencies = [
+ "serde",
+ "serde_json",
+]
+
 [[package]]
 name = "adler2"
 version = "2.0.1"
@@ -483,6 +507,33 @@ version = "1.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
 
+[[package]]
+name = "attest-ledger-core"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdf835c5e3680ddaf4dd9c4da525a8762ce5803e1f3245889a7393f3ccd5f183"
+dependencies = [
+ "attest-ledger-types",
+ "base64 0.22.1",
+ "canonical-keysort-json",
+ "ed25519-dalek",
+ "getrandom 0.4.3",
+ "hex",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "attest-ledger-types"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16b5cb6e21a7f0342be61b4cf42bfdad81360f2efdf4eeec4dc33c32734691d7"
+dependencies = [
+ "serde",
+ "serde_json",
+]
+
 [[package]]
 name = "auto-launch"
 version = "0.5.0"
@@ -592,7 +643,7 @@ dependencies = [
  "serde_json",
  "serde_path_to_error",
  "serde_urlencoded",
- "sha1",
+ "sha1 0.10.6",
  "sync_wrapper",
  "tokio",
  "tokio-tungstenite 0.29.0",
@@ -956,6 +1007,15 @@ dependencies = [
  "serde_json",
 ]
 
+[[package]]
+name = "canonical-keysort-json"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05b39d732daeef9a1bff08849dfaa3217be9a9765024d494f6a5707e987e1043"
+dependencies = [
+ "serde_json",
+]
+
 [[package]]
 name = "cargo-platform"
 version = "0.1.9"
@@ -4013,7 +4073,7 @@ dependencies = [
  "log",
  "md-5",
  "nom 8.0.0",
- "rand 0.10.1",
+ "rand 0.10.2",
  "rangemap",
  "sha2 0.10.9",
  "stringprep",
@@ -5063,7 +5123,7 @@ dependencies = [
  "tempfile",
  "thiserror 2.0.18",
  "tokio",
- "tokio-tungstenite 0.29.0",
+ "tokio-tungstenite 0.30.0",
  "tokio-util",
  "tower",
  "tower-http 0.7.0",
@@ -5112,7 +5172,10 @@ dependencies = [
 name = "open_agentic_policy_kernel"
 version = "0.1.0"
 dependencies = [
+ "action-gate-core",
+ "attest-ledger-core",
  "base64 0.22.1",
+ "canonical-keysort-json",
  "chrono",
  "dirs 6.0.0",
  "ed25519-dalek",
@@ -5124,6 +5187,7 @@ dependencies = [
  "serde",
  "serde_json",
  "sha2 0.10.9",
+ "trust-window",
 ]
 
 [[package]]
@@ -6071,9 +6135,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.10.1"
+version = "0.10.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2e8e8bcc7961af1fdac401278c6a831614941f6164ee3bf4ce61b7edb162207"
+checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
 dependencies = [
  "chacha20",
  "getrandom 0.4.3",
@@ -7069,6 +7133,17 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "sha1"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aacc4cc499359472b4abe1bf11d0b12e688af9a805fa5e3016f9a386dc2d0214"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
 [[package]]
 name = "sha1_smol"
 version = "1.0.1"
@@ -8501,13 +8576,25 @@ name = "tokio-tungstenite"
 version = "0.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8f72a05e828585856dacd553fba484c242c46e391fb0e58917c942ee9202915c"
+dependencies = [
+ "futures-util",
+ "log",
+ "tokio",
+ "tungstenite 0.29.0",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.30.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17a073bfed563fa236697a068031408a93cd9522e08abf9933ead3e73411bd71"
 dependencies = [
  "futures-util",
  "log",
  "native-tls",
  "tokio",
  "tokio-native-tls",
- "tungstenite 0.29.0",
+ "tungstenite 0.30.0",
 ]
 
 [[package]]
@@ -8812,6 +8899,15 @@ dependencies = [
  "petgraph",
 ]
 
+[[package]]
+name = "trust-window"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7daa9ad05701c68b73db55a248a6ae3e948c41a7da5f2a08c8cdea2821d34dc2"
+dependencies = [
+ "serde",
+]
+
 [[package]]
 name = "try-lock"
 version = "0.2.5"
@@ -8859,7 +8955,7 @@ dependencies = [
  "httparse",
  "log",
  "rand 0.9.4",
- "sha1",
+ "sha1 0.10.6",
  "thiserror 2.0.18",
  "utf-8",
 ]
@@ -8875,9 +8971,25 @@ dependencies = [
  "http",
  "httparse",
  "log",
- "native-tls",
  "rand 0.9.4",
- "sha1",
+ "sha1 0.10.6",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "tungstenite"
+version = "0.30.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e48ac77174b19c110a50ab2128b24215ac9cb40e0e12e093fb602d175c569d22"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "native-tls",
+ "rand 0.10.2",
+ "sha1 0.11.0",
  "thiserror 2.0.18",
 ]
 
diff --git a/product/apps/opc/src-tauri/Cargo.toml b/product/apps/opc/src-tauri/Cargo.toml
index 1c727631..b95b6880 100644
--- a/product/apps/opc/src-tauri/Cargo.toml
+++ b/product/apps/opc/src-tauri/Cargo.toml
@@ -82,7 +82,7 @@ glob = "0.3"
 base64 = "0.22"
 libc = "0.2"
 reqwest = { version = "0.13", features = ["json", "native-tls-vendored"] }
-tokio-tungstenite = { version = "0.29", features = ["connect", "native-tls-vendored"] }
+tokio-tungstenite = { version = "0.30", features = ["connect", "native-tls-vendored"] }
 futures = "0.3"
 async-trait = "0.1"
 thiserror = "2"