diff --git a/README.md b/README.md
index 5859e74..0c14aaa 100644
--- a/README.md
+++ b/README.md
@@ -136,6 +136,7 @@ Projects that instrument agents for security observability, which could be usefu
 | [Virtual MCP Server (Stacklok)](https://dev.to/stacklok/introducing-virtual-mcp-server-unified-gateway-for-multi-mcp-workflows-17ee) | MCP,  provenance | Stacklok's unified gateway multiplexing multiple MCP servers with centralized policy and provenance verification via toolhive. |
 | [Agent Governance Toolkit](https://github.com/microsoft/agent-governance-toolkit) | policy, OPA, Cedar, SPIFFE, SRE | Microsoft's runtime governance framework with deterministic policy enforcement (OPA/Rego + Cedar), Ed25519/SPIFFE agent identity, trust scoring, SRE tooling (SLOs, error budgets, chaos), and full OWASP Agentic Top 10 coverage. Multi-language (Python, TypeScript, .NET). See also [LIMITATIONS.md](https://github.com/microsoft/agent-governance-toolkit/blob/main/docs/LIMITATIONS.md). |
 | [micromize](https://github.com/micromize-dev/micromize) | eBPF, BPF-LSM, IMA, execution-integrity, Kubernetes | BPF-LSM enforcement of container boundaries built on [Inspektor Gadget](https://github.com/inspektor-gadget/inspektor-gadget). Execution integrity via SBOM + runtime binary hash validation using `bpf_ima_file_hash`. |
+| [verified-execution-agent](https://github.com/alicesparkai/verified-execution-agent) | Ed25519, attestation, calldata-guard, intended-vs-actual | Signed attestation core comparing an agent's intended vs. actual on-chain action: a pre-execution gate (structural checks plus a calldata-guard catching approval-drainers and recipient swaps) and an Ed25519-signed post-execution receipt that fires DEVIATION_DETECTED when the executed call diverges from intent — editing the receipt to hide the deviation breaks the signature. |
 
 ## Secrets Management & Isolation