---
type: "Index"
title: "Sources index"
description: "Every source, standard, framework, paper and organisation in the bundle, with verified citations."
tags: [index, sources]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
status: stable
---

# Sources index

Verified against primary or authoritative pages (accessed 27 June 2026).


## Standards & specifications

- [Agent2Agent (A2A)](standards/a2a.md) — <https://developers.googleblog.com/en/a2a-a-new-era-of-agent-interoperability/>
- [Arazzo](standards/arazzo.md) — <https://spec.openapis.org/arazzo/latest.html>
- [AsyncAPI](standards/asyncapi.md) — <https://www.asyncapi.com/docs/reference/specification/latest>
- [DPoP — RFC 9449](standards/dpop.md) — <https://www.rfc-editor.org/rfc/rfc9449>
- [GraphQL](standards/graphql.md) — <https://spec.graphql.org/October2021/>
- [HTTP Message Signatures — RFC 9421](standards/http-message-signatures.md) — <https://www.rfc-editor.org/rfc/rfc9421>
- [JSON Schema](standards/json-schema.md) — <https://json-schema.org/draft/2020-12>
- [Model Context Protocol (MCP)](standards/mcp.md) — <https://modelcontextprotocol.io/specification/2025-06-18>
- [OAuth 2.0](standards/oauth-2-0.md) — <https://www.rfc-editor.org/rfc/rfc6749>
- [OAuth 2.0 Security BCP — RFC 9700](standards/oauth-2-0-security-bcp.md) — <https://www.rfc-editor.org/rfc/rfc9700>
- [OAuth Token Exchange — RFC 8693](standards/token-exchange.md) — <https://www.rfc-editor.org/rfc/rfc8693>
- [Open Policy Agent (OPA)](standards/opa.md) — <https://www.openpolicyagent.org/docs/latest/>
- [OpenAPI](standards/openapi.md) — <https://spec.openapis.org/oas/latest.html>
- [OpenTelemetry](standards/opentelemetry.md) — <https://opentelemetry.io/docs/concepts/observability-primer/>
- [PKCE — RFC 7636](standards/pkce.md) — <https://www.rfc-editor.org/rfc/rfc7636>
- [SPIFFE / SPIRE](standards/spiffe-spire.md) — <https://spiffe.io/docs/latest/spiffe-about/overview/>
- [Structured Outputs](standards/structured-outputs.md) — <https://platform.openai.com/docs/guides/structured-outputs>
- [W3C PROV](standards/w3c-prov.md) — <https://www.w3.org/TR/prov-overview/>
- [Zero trust architecture (NIST SP 800-207)](standards/zero-trust.md) — <https://csrc.nist.gov/pubs/sp/800/207/final>
- [gRPC / Protocol Buffers](standards/grpc-protobuf.md) — <https://protobuf.dev/overview/>
- [mTLS-bound tokens — RFC 8705](standards/mtls-bound-tokens.md) — <https://www.rfc-editor.org/rfc/rfc8705>

## Frameworks & middleware

- [Context Hub](frameworks/context-hub.md) — <https://github.com/andrewyng/context-hub>
- [AutoGen](frameworks/autogen.md) — <https://microsoft.github.io/autogen/stable/>
- [FATE](frameworks/fate.md) — <https://github.com/FederatedAI/FATE>
- [FedML / TensorOpera](frameworks/fedml.md) — <https://fedml.ai/>
- [Flotilla](frameworks/flotilla.md)
- [Flower](frameworks/flower.md) — <https://flower.ai/>
- [NVIDIA FLARE](frameworks/nvidia-flare.md) — <https://nvflare.readthedocs.io/en/main/>
- [OpenAI Agents SDK & Responses API](frameworks/openai-agents-sdk.md) — <https://openai.com/index/new-tools-for-building-agents/>
- [OpenFL](frameworks/openfl.md) — <https://openfl.readthedocs.io/>
- [PySyft](frameworks/pysyft.md) — <https://github.com/OpenMined/PySyft>
- [Semantic Kernel](frameworks/semantic-kernel.md) — <https://learn.microsoft.com/en-us/semantic-kernel/overview/>
- [Substra](frameworks/substra.md) — <https://docs.substra.org/>
- [TensorFlow Federated](frameworks/tensorflow-federated.md) — <https://www.tensorflow.org/federated>

## Research & benchmarks

- [API-Bank (2023)](research/api-bank.md) — <https://arxiv.org/abs/2304.08244>
- [APIGen (2024)](research/apigen.md) — <https://arxiv.org/abs/2406.18518>
- [AgentBench (2023)](research/agentbench.md) — <https://arxiv.org/abs/2308.03688>
- [Berkeley Function Calling Leaderboard (BFCL)](research/bfcl.md) — <https://gorilla.cs.berkeley.edu/leaderboard.html>
- [FedAvg — McMahan et al. (2017)](research/fedavg.md) — <https://arxiv.org/abs/1602.05629>
- [Google keyboard FL — Hard et al. (2018)](research/google-keyboard-fl.md) — <https://arxiv.org/abs/1811.03604>
- [Gorilla & APIBench (2023)](research/gorilla.md) — <https://arxiv.org/abs/2305.15334>
- [Kairouz et al. — Advances and open problems (2019)](research/kairouz-open-problems.md) — <https://arxiv.org/abs/1912.04977>
- [MELLODDY (2019–2022)](research/melloddy.md) — <https://www.melloddy.eu/>
- [MRKL (2022)](research/mrkl.md) — <https://arxiv.org/abs/2205.00445>
- [REALM (2020)](research/realm.md) — <https://arxiv.org/abs/2002.08909>
- [ReAct (2022)](research/react.md) — <https://arxiv.org/abs/2210.03629>
- [ToolACE (2024)](research/toolace.md) — <https://arxiv.org/abs/2409.00920>
- [ToolLLM / ToolBench (2023)](research/toolllm-toolbench.md) — <https://arxiv.org/abs/2307.16789>
- [ToolSandbox (2024)](research/toolsandbox.md) — <https://arxiv.org/abs/2408.04682>
- [Toolformer (2023)](research/toolformer.md) — <https://arxiv.org/abs/2302.04761>
- [τ-bench (2024)](research/tau-bench.md) — <https://arxiv.org/abs/2406.12045>

## Federated AI

- [Cross-device vs cross-silo](federated/cross-device-vs-cross-silo.md)
- [Differential privacy](federated/differential-privacy.md)
- [Federated / confidential RAG](federated/federated-rag.md)
- [Federated analytics](federated/federated-analytics.md)
- [Federated evaluation](federated/federated-evaluation.md)
- [Federated learning](federated/federated-learning.md) — <https://arxiv.org/abs/1602.05629>
- [Federated unlearning](federated/federated-unlearning.md)
- [Homomorphic encryption & MPC](federated/homomorphic-encryption-mpc.md)
- [Hub-and-spoke vs hierarchical coordination](federated/hub-and-spoke-vs-hierarchical.md)
- [Membership inference & gradient leakage](federated/membership-inference.md)
- [Model poisoning & backdoors](federated/model-poisoning-backdoors.md)
- [Multi-dimensional evaluation rubric](federated/evaluation-rubric.md)
- [Non-IID data](federated/non-iid-data.md)
- [Secure aggregation](federated/secure-aggregation.md) — <https://arxiv.org/abs/1611.04482>
- [Trusted execution environments (TEEs)](federated/trusted-execution-environments.md) — <https://confidentialcomputing.io/>

## UK government

- [AI Management Essentials](uk-government/ai-management-essentials.md) — <https://www.gov.uk/government/consultations/ai-management-essentials-tool>
- [Algorithmic Transparency Recording Standard (ATRS)](uk-government/atrs.md) — <https://www.gov.uk/government/collections/algorithmic-transparency-recording-standard-hub>
- [Blueprint for modern digital government](uk-government/blueprint-modern-digital-government.md) — <https://www.gov.uk/government/publications/a-blueprint-for-modern-digital-government>
- [Data Ethics Framework](uk-government/data-ethics-framework.md) — <https://www.gov.uk/government/publications/data-ethics-framework>
- [Data Protection Impact Assessment (DPIA)](uk-government/dpia.md) — <https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/data-protection-impact-assessments-dpias/>
- [GDS API technical and data standards](uk-government/gds-api-standards.md) — <https://www.gov.uk/guidance/gds-api-technical-and-data-standards>
- [GOV.UK API Catalogue](uk-government/uk-api-catalogue.md) — <https://www.api.gov.uk/>
- [ICO guidance on AI and data protection](uk-government/ico-ai-guidance.md) — <https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/>
- [NCSC Guidelines for secure AI system development](uk-government/ncsc-secure-ai.md) — <https://www.ncsc.gov.uk/collection/guidelines-secure-ai-system-development>
- [State of digital government review](uk-government/state-of-digital-government.md) — <https://www.gov.uk/government/publications/state-of-digital-government-review>

## Organisations

- [AI Security Institute (AISI)](organisations/aisi.md) — <https://www.aisi.gov.uk/>
- [Anthropic](organisations/anthropic.md) — <https://www.anthropic.com/>
- [CNCF](organisations/cncf.md) — <https://www.cncf.io/>
- [DSIT](organisations/dsit.md) — <https://www.gov.uk/government/organisations/department-for-science-innovation-and-technology>
- [Flower Labs](organisations/flower-labs.md) — <https://flower.ai/>
- [Google](organisations/google.md) — <https://ai.google/>
- [Government Digital Service (GDS)](organisations/gds.md) — <https://www.gov.uk/government/organisations/government-digital-service>
- [ICO](organisations/ico.md) — <https://ico.org.uk/>
- [IETF / RFC Editor](organisations/ietf.md) — <https://www.rfc-editor.org/>
- [Linux Foundation](organisations/linux-foundation.md) — <https://www.linuxfoundation.org/>
- [NCSC](organisations/ncsc.md) — <https://www.ncsc.gov.uk/>
- [NVIDIA](organisations/nvidia.md) — <https://www.nvidia.com/>
- [OpenAI](organisations/openai.md) — <https://openai.com/>
- [OpenAPI Initiative](organisations/openapi-initiative.md) — <https://www.openapis.org/about>
- [OpenMined](organisations/openmined.md) — <https://openmined.org/>
- [W3C](organisations/w3c.md) — <https://www.w3.org/>