Back to browse
GitHub Repository

A local receipt and approval gate for AI agent sessions. The agent can act, but it cannot sign.

3 starsJavaScript

A record the vendor doesnt hold

by hnscum·Jul 27, 2026·1 point·1 comment

AI Analysis

●●●BangerBig BrainZero to OneSolve My Problem

Local-first receipt log stops agents from signing their own work without your key.

Strengths
  • Tamper-evident logs live on your machine, not a vendor's cloud observability proxy.
  • Approval gate requires a human passphrase the model cannot derive or bypass.
  • Philosophical stance on local culture and record ownership matches the technical implementation.
Weaknesses
  • Scoped custodial integrations for auditors are still pending, limiting enterprise utility today.
  • Relies on the agent honestly reporting actions; cannot detect if the agent lies about what it did.
Category
Target Audience

Developers running autonomous AI agents

Similar To

OpenTelemetry · HashiCorp Vault · Sigstore

Similar Projects

Security●●Solid

Air – Open-source black box for AI agents (tamper-evident audit trails)

Instead of another observability dashboard, this project builds a provable audit trail: an OpenAI-compatible reverse proxy that vaults prompts in MinIO and links calls with an HMAC-SHA256 tamper-evident chain, plus replay tooling (replayctl) and Jaeger traces. The cryptographic audit chain and the one-line SDK wrap are clever and practical; the real operational work left to teams will be key management and storage/retention strategy.

WizardryNiche Gem
shotwellj
215mo ago