Under the hood, in plain words.

Under the hood

Receipt

A signed record of one decision: what was asked, what was decided, why, and what happened.vaara.receipt/v1, JCS-canonicalised JSON, Ed25519 signature, Internet-Draft draft-sirkkavaara-vaara-receipt

Chain

Each receipt carries a fingerprint of the one before it, so a removed or changed receipt shows as a break.SHA-256 hash chain, gap-evident completeness

Outside clock

A timestamp from a service you do not control, so nobody can backdate a receipt.RFC 3161 timestamp authority, eIDAS qualified timestamp, SCITT transparency log

Checking offline

Reading a receipt and confirming it is genuine with nothing but the receipt and a public key.vaara verify-record, vaara verify-bundle, standalone checkers with no Vaara import

Hardware proof

Tying a record to the physical machine that made it.TPM 2.0 quote, IMA measurement, confidential-VM attestation (SEV-SNP, TDX)

Future-proof signatures

Signatures designed to stay safe against future quantum computers.ML-DSA-65 (FIPS 204) hybrid signing

The gate on agent tools

The point where an AI agent's tool call is checked before it runs.MCP proxy, agent host pre-tool-use hooks, LLM API proxy

Sandbox

A walled space that limits what software can touch even if it misbehaves.Cage layer: AppArmor, seccomp, Landlock, eBPF egress lock, gVisor, Kata, Firecracker, OpenShell and others

Rules file

Plain text that says what is allowed, what needs a person and what is refused.Declarative policy (JSON/YAML), deny rules, conformal risk scorer

Regulator package

One file with the record and the mapping to the law, for an authority to check.EU AI Act Art. 12, 14, 19, 50, 73; DORA; SOC 2; GDPR Art. 17 and Ch. V