Signed audit evidence for AI agents

Show what your agent did—and what authorised it.

Find the action. Understand the decision. Verify the evidence. HaltState brings agent activity, recorded reasons and outcomes into one investigation, backed by cryptographically signed Proof Packs.

Investigate from your MCP client · How integrity verification works

Find answers faster

Search by agent, customer, conversation, time or external reference. Follow the action through its decision and recorded result.

Explain the decision

See the recorded policy reason and review path. Give your operations team a clear answer when a customer asks what happened.

Bring evidence to the audit

Verify signatures, inspect linked records and export the evidence your reviewers need for an incident or control assessment.

Retail simulation · Verified 24 October 2026

A refund decision and outcome. Both signed.

This existing US$62.20 synthetic refund passed through the live policy engine and executed once in the demonstration ledger. Both original Proof Packs passed verification at .

QuestionVerified example
What did the agent request?retail-refund-agent requested refund.create for US$62.20.
What did policy decide?ALLOW — the request proceeded automatically.
What outcome was recorded?EXECUTED at , with exactly one synthetic ledger execution.
What passed verification?Full-content digest, Ed25519 signature, trusted key and semiotic chain validation passed for both the decision and outcome.

Signed decision

✶ ⌬

PROOF CMT — evidence committed for the policy decision.

8d7111e3ebd42f726893224d5a2436c33cb457e5310bde7fd3ea1cce10085bbe

Signed outcome

⚙ ⊜ ✶ ⌬

PLAY EQ PROOF CMT — successful execution report committed and linked to the decision.

48071905fba5b13f6a6464b56f5ff29662b5045614e244a379e87d23b471555c

Selected-field verification summary from the original signed records. View the saved verification results (JSON) · Verify original evidence in your account.

Ask what happened. Follow the evidence.

“What did my support agent send today?” “Why was this refund allowed?” “Show the activity for this customer.” Use the investigation page, in-app chat or your MCP client to find the operation and open its linked evidence.

A clear investigation timeline

Read the policy decision, reported outcome, available external confirmation and integrity result together. Customer and conversation references connect the context to the action.

Evidence ready to share

Export selected records for incident review, customer disputes and audit preparation. Retention and account permissions keep sensitive content under your control.

Read the investigation guide or connect your assistant.

Cryptographic integrity, built into the evidence

New Proof Packs use a full-content digest and an Ed25519 signature, with tenant-scoped verification, hash-chain validation and database append-only controls. Verify the recorded content and its signing provenance directly from your account.

Separate linked commitments preserve the decision and the outcome. Semiotic chains add a compact, readable interpretation alongside the signed evidence.

Architecture & shared responsibility explains signing custody, verification scope and evidence assurance. Explore the schema or try the local digest demonstration.

Turn runtime controls into reviewable evidence

Support incident forensics and audit preparation with a record of the controls that operated. Connect your evidence to internal control reviews, SOC 2 narratives, ISO/IEC 42001 programs and EU AI Act governance work.

Explore governance alignment · Read the agent audit-trail guide · See the live proof feed.