The protocol

How Agent Evidence
works.

Mandate → Evidence → Policy → Decision → Execution → Verification — a content-addressed graph, not a log line. This page explains the model behind the demo on the homepage and the verifier at /verify.

How Agent Evidence works

From authority to outcome,
without losing provenance.

Every record is content-addressed. References form a complete evidence DAG, so multiple observations and the policy they informed remain connected to the resulting decision and action.

Mandate

What was the agent authorized to do?

Evidence

What did the agent or a named source observe?

Policy

Which versioned rules applied?

Decision

What did it decide, based on exactly which evidence?

Execution

What action followed the decision?

Verification

Can another party verify the artifact offline?

Independent verification

Verification is a result,
not a marketing claim.

The verifier accepts trust policy from the caller, resolves schemas locally and makes uncertainty explicit. It never discovers keys or fetches missing evidence behind your back.

Signatures authenticate assertions, not objective truth.

A valid signature proves that an identified signer asserted or observed specific information under stated conditions.

It does not prove the upstream claim is objectively true. Timestamps remain signer assertions unless a separately verified anchor establishes an external bound.

VALIDIntegrity and required trust satisfied
INVALIDSigned content or graph failed verification
UNVERIFIABLERequired signer or source trust unavailable
Portable signed evidence bundles
Deterministic content-addressed records
Complete evidence DAG validation
Ed25519 DSSE signatures
Explicit caller-supplied trust policy
Historical key lifecycle handling
Strict schema and version boundaries
Fully offline verification
Current status

Building the verification layer
for autonomous agents.

The foundation is shipped. Product surfaces are being added as production vertical slices, with roadmap work kept separate from capabilities available today.

Available now

Production foundation

  • Production compliance and evidence APIs
  • Signed Ed25519 attestations and key lifecycle records
  • Agent Evidence v0 schemas and evidence DAG contract
  • Python package for deterministic construction and DSSE sealing
  • Zero-network tri-state bundle verification
  • Public P1.8 multi-provider production reference bundle
  • Policy-constrained manual-review and withheld execution proof
  • SDK, CLI, MCP, GitHub Action and public conformance resources
Next

See it run, then verify it.