Agent Flight Recorder

When an AI agent buys something and it is disputed, this is the record of what it was allowed to do and what it did.

…
1 · MandateThe person signs a scoped, expiring permission.
2 · GuardPlain code checks every purchase before PayPal is called.
3 · RecorderEvery step goes into a hash-chained, timestamp-anchored log.
4 · EvidenceA dispute gets a bundle anyone can verify offline.
One click runs the whole flow: allowed purchase, hijack attempt, real AI model, approval, timestamp, offline verification, tamper caught.

1 · Mandate (signed permission)

2 · Agent proposes, the guard decides

Pick a scenario. Deterministic code checks the purchase before any PayPal order exists.

3 · Flight recorder (hash-chained log)

#Time (UTC)EventOrderHash
Head hash:

Tamper-evident, not tamper-proof: removing the newest events is only detectable against a head hash saved somewhere else.

4 · What was allowed vs. what happened

5 · Evidence for a dispute

The verifier recomputes every hash and the mandate signature with no database.