The Evidence Graph — integrity anyone can verify

What changed

A log is a story told by the party under investigation. Today we’re opening the thing we built to replace it, and letting you license it for your own environment. Every consequential action becomes a record anyone with standing (your auditor, your insurer, your acquirer, the vendor on the other side of an incident) can re-derive without trusting us, our model provider, or our cloud.

Integrity layer

The Evidence Graph now sits under the compliance, vendor-risk, diligence, and agent work you already do on vCISO Lite. You don't operate it; you run on it.

Grounded

Every claim terminates in something observed, something computed deterministically, or a prior decision it has to stay consistent with. Ground in nothing, or in yourself, and the verifier refuses it.

Four neighbours

Each claim agrees with four independent neighbours at once (depth, temporal, conditional, behavioral), answering to four sources that don't report to each other. Any one agreement is cheap to fake; all four together is what a forgery can't hold.

Sealed

Hash-chained, checkpointed, anchored to an external RFC 3161 timestamp authority. The seal notarizes the bytes; the coherence is the proof.

Licensable

Three ways to license it: Library (embed the SDK, hold your own data, from $200K/yr), Hosted (we run it, integrity metered per sealed event, from $60K/yr + $0.03/event), and Enterprise (dedicated infrastructure, custody terms, source escrow, from $500K/yr).

Why it matters

In production on August 17, a coding agent proposed a destructive command against a live workload. Our first-level agent-governance gate refused it on two named predicates (wrong verb for the grant, wrong environment) and it never reached the cluster. The sealed refusal carries the grant it was checked against, every failed predicate with expected and actual, the gate version, and a snapshot hash of the exact pair: everything needed to recompute the verdict without trusting us. No score. No confidence number. No model. Just a computation over two documents.

That gate exists because we lived the opposite. A deploy agent cascade-deleted production services before anyone could step in. We wrote it up in a field note, how a SEV-0 taught us to protect our own agents, and the Evidence Graph is the record that incident should have left behind.

Availability

Available now to license for your own environment. The first five licensees take 50% off year one under the Charter program.

The full walk-through, the sealed record, and the request-access flow are on the Evidence Graph page. For the formal announcement, see the press release. It’s also what Trustworthy Autonomy™ runs on.

Known limitations

Charter pricing (50% off year one) caps at the first five licensees. After the fifth signature, Charter closes and standard terms apply.

The August 17 sealed refusal ran operator-driven through the harness gate, not a machine catching an attack on its own. The record format is what we're licensing; autonomous enforcement sits behind that.