Accountable autonomy

Rules and receipts for autonomous software.

Vaara sits between software that acts by itself and the systems it can reach. Nothing that goes through Vaara happens outside your rules, and afterwards you can show exactly what happened.

Decisionstoday
  • Pay invoice 1 240 € to a known supplierinvoicing agentAllowed
  • Send the customer list to a new addresssales assistantNeeds a person
  • Delete last year's recordsclean-up scriptRefused
▣ Receipt✓ Signed✓ Unchanged✓ Timestamped
Illustration: every action gets a decision and a receipt.

What Vaara does

Checked before it happens

Every action passes the gate first: allowed, held for a person, or refused. Nothing slips through for being fast.

A person where it matters

Unusual actions wait for a yes or a no on your desktop. The answer is recorded with who gave it.

Proof that travels

Each decision leaves a signed receipt. Years later, offline, anyone can check it is genuine and unchanged.

The wall of your choice

Run agents in the sandbox you trust. Twelve are supported, and every receipt says which one was in use.

Ready for the questions you will be asked

Records are mapped to the EU AI Act, DORA, GDPR and SOC 2 controls, in one package an inspector can read.

Stays in your house

Runs on your own machines. No account, no telemetry, nothing sent to us. The code is open to your own people.

Software that acts on its own, inside your rules. And proof of every action that anyone can check.

Things already happen with no person in the moment

A payment goes out. Access is granted. A door locks for the night. A file is deleted. More and more of these are decided by software, and AI agents are one example of it.

Later someone asks what happened and why. Most systems answer with their own logs, which means asking to be taken at your word. Vaara answers with a receipt that holds up without trusting you, or us.

Every action ends in one of three states, and leaves a receipt

Allowed

Inside the rules: it goes through.

Needs a person

Unusual or risky: it waits until a person says yes or no.

Refused

Against the rules: it never happens.

Receipt

Every one of the three leaves a signed record of what was decided and why.

Who asks later

  • A resident's family
  • An inspector
  • A customer
  • An auditor
  • A court
  • Your own board

A receipt that outlasts the system that made it

Years later, on a plane with the wifi off, without Vaara installed and without trusting you or us, anyone can check that a receipt is genuine, when it was made and that nobody has changed it since.

A receipt proves the record: what was decided, under which rule, and that nobody has changed it. It does not prove the decision was right, and it covers only what went through Vaara.

Where it runs

On your own machines. Nothing is sent to us, there is no account and no telemetry. The code is open, so your own people or your supplier can read every line.

Free to download and use, with nothing to sign up for. Paid work, such as a readiness review or a pilot in your own environment, is scoped to your case and priced as a fixed amount agreed before it starts. No subscription, no per-seat fee. Vaara is dual-licensed: free under the AGPL-3.0, or under a commercial licence when you build it into a product you ship closed, run a modified version as a service without publishing your changes, or your policy does not allow copyleft. Write to hello@vaara.io.

Talk to the author →

Who has looked at it

Listed in the OECD.AI Catalogue of Tools & Metrics for trustworthy AI.

Named in the industry acknowledgements of Singapore's Model AI Governance Framework for Agentic AI, on the same page as Google, Microsoft, IBM and Amazon.

Red Hat partner since October 2026.

Listed in Ratkaisuja Suomesta, the catalogue of software made in Finland run by Koodia Suomesta ry.

AMD AI Developer Program testimonial.

Its record format is an Internet-Draft at the IETF, the group that writes internet standards, and seven parties other than Vaara have reproduced its test results in public.