CoDeS LLCPublic comment to NIST
CoDeS LLC filed a public comment in response to NIST’s request for information on the security of AI agents. The comment is part of the official federal record. We link to that record instead of restating it.
| Docket | NIST-2025-0035, “Request for Information Regarding Security Considerations for Artificial Intelligence Agents” |
| Comment ID | NIST-2025-0035-0097 (on Federal Register document 2026-00206) |
| Tracking number | mlt-q8pu-ox95 |
| Received | February 19, 2026 |
| Posted | March 22, 2026 |
| Submitter on record | Eric Doan, founder of CoDeS LLC. The filing lists the organization as “CoDeS Inc.” That name was entered in error. The company’s registered name is CoDeS LLC. |
| Official record | regulations.gov: NIST-2025-0035-0097 |
| Attachment (PDF) | CoDeS submission report on regulations.gov |
Record details were read from the regulations.gov public API on November 5, 2026.
How to read it
The comment reports internal proof-of-concept test results for an intent-arbitration approach to securing AI agents. Those are our own observations. They are not independent validation, and they do not mean NIST endorses or has certified CoDeS.
Related technical input
In November 2026 we also emailed section-specific technical comments on NIST’s NCCoE DevSecOps project to the project team. The main recommendation: an AI agent should leave an independently inspectable record that connects who asked, what authority was given, what was done, and what was actually observed. Missing evidence should stay visibly incomplete, never reported as success. We asked the project team whether the emailed copy can be entered into the public record, and we do not assume it has been. Learn more about the program at NIST NCCoE.