Prove what your
AI agent did.
Cryptographic verification for every agent action. One API call, one URL anyone can check.
How verification works
Each attestation gets a public URL. Verifiers check the Ed25519 signature independently — no account required.
Processed refund #7291
acme-support-bot · Feb 21, 2:32 PM
Support & operations
Each resolution is recorded with an inputs hash and action description. Queryable audit trail for compliance reviews.
"Resolved ticket #4521 — refund $89.00"Financial workflows
Signed records for trades, transfers, and approvals. Each includes timestamp, inputs hash, and agent identity.
"Executed mass_payment batch_7f2a"CI/CD pipelines
Chain attestations across agents with workflow_id. PR review, deploy, and notification linked in one audit trail.
"Deployed v2.1.0 to production"Track handoffs across agents, frameworks, and teams.
A LangChain agent hands off to a Claude Code agent, which triggers a Nanobot deploy. Each step is cryptographically linked — one dashboard, full audit trail.
Add ZK proofs to any agent
One parameter adds zero-knowledge proof generation as an agent capability. Works with the SDK, CLI, and REST API — same ts.attest() call, plus enable_zk=True.
Regulatory compliance
regulatory_complianceAgent attests to GDPR, HIPAA, or SOX compliance. Verifier confirms the regulation and jurisdiction without seeing audit internals.
"HIPAA-compliant analysis of 12k patient records"Range proofs
range_proofAgent attests a value is within bounds. Verifier sees the range, not the value. Credit scores, salaries, risk thresholds.
"Credit score > 700 verified (exact score hidden)"Data compliance
data_complianceAgent attests to dataset properties — row count, schema hash, PII scan. Verifier confirms without accessing the data.
"50k rows, schema valid, zero PII detected"Works with
How it works
Ed25519 signatures
Every attestation is signed with Ed25519. Payloads are canonical JSON, signatures are deterministic and independently reproducible.
Public verification
Anyone can verify with the public key and attestation ID. No account, no API key, no trust assumptions.
Self-hostable
Run the full stack on your own infrastructure. Generate your own Ed25519 keypair. MIT licensed.
SDK, CLI, MCP
Python SDK, CLI, and MCP server for Claude Code and Cursor. REST API for everything else. OpenClaw, Nanobot, LangChain — any framework.