Live · provable · right now

Everything below is checkable.

A trust layer that asks you to trust it hasn't earned the name. So this page proves itself as it loads: the signing key mints a fresh receipt right now, the engine and suite show they share one identity, every verdict pins exactly what it was asked and answered, and the payments settle on Base mainnet where anyone can read them. No dashboards of numbers you can't audit — only things you can verify yourself.

Signing key
checking…
Asking the engine to sign a fresh receipt…
One identity
checking…
Comparing engine & suite public keys…
Every verdict
Signed
guard_action, verify, injection, moderation, PII — all four functions ship an Ed25519 receipt. Free to check, forever.
Payments
On Base
Every call is a real settled USDC micro-payment on Base mainnet. Don't take our word — read the receiving wallet on-chain →

What every receipt cryptographically pins

Not "a payment happened" — the verdict itself. A single Ed25519 signature covers all of this. Change any one field and the signature fails.

receipt fields · signed as one canonical message
claim_sha256
Hash of the exact claim / action judged. The input is pinned, not paraphrased.
context_sha256
Hash of the context that conditioned the verdict — so the same claim under different context can never collide to the same proof.
verdict + confidence
The headline judgment and an honest 0–1 score — clamped to a real probability before it's ever signed.
output_sha256
Hash of the complete structured verdict shown to you — reasoning and evidence included. The citations you were shown are pinned too; nobody can rewrite them and keep the signature valid.
endpoint · model_tier · key_id
Which service and tier ran, and which key signed — so you know precisely what produced this and can verify it offline against the published public key.
TRY IT

Watch it fail

Fetch a live receipt, flip one byte, and watch the math reject it — in your browser, free.

Open the live proof →

YOUR OWN

Verify a receipt

Paste any receipt you were handed and check its signature against our public key.

Verify a receipt →

OFFLINE

The public key

Everything verifies offline against one key. No lookup, no database, nothing to expire.

Public key →

Wire the gate into your agent's loop in one line — every action it clears or stops leaves a receipt like these.