The record
A record you can check yourself.
On Thursday someone asks what your agent did on Monday. Send them the log and the Agentfile. With an identity, constle audit verify checks every signature and the chain offline, re-checks each signed approval, and names any line that was changed.
What goes in.
With an identity, connections, tool calls, approvals and stops go into a log signed with the agent’s own key, each line chained to the one before.
How the check works.
With an identity, each entry is signed with Ed25519 and carries the hash of the line before it. constle audit verify recovers the key from the agent’s did:key string itself, with no registry, and checks offline. Change one byte, and it names the line.
Sample lines, abridgedSHA-256, computed in your browserEdit a line
What it proves, and what it doesn’t.
| Proves | Doesn’t prove |
|---|---|
| With the agent’s key pinned, no signed entry was changed, inserted or reordered since signing. | That none were cut from the end, or that this is the current copy of the log. |
| A recorded webhook approval was signed by the pinned approver key. | That the account is true, since the host wrote it. |
Verify can’t show a cut tail or a swapped log, so keep a copy or its hash where the agent’s host can’t change it.
Where it stops.
Signing needs an identity, made with one command. Events from a run’s final moments can be missing, and traffic that skips the proxy is never logged. Traffic to hosts you allow isn’t gated. A request that reaches an MCP server past the gate, through an allowed host that shares its server, leaves no tool event.
Can the agent edit its own log?
The log is written on the host, outside the sandbox, and the signing key never enters the sandbox.
Does verification need the network?
No. It runs offline.
Is this enough for compliance?
With an identity, it gives you a signed log, and human approval on named calls that pass through the gate. Your auditor decides what they meet.
Verify an audit log (guide) → Audit log and verification (docs) ↗ One edited byte, caught →
The current source and its signed releases aren’t public yet.