v0.1 · MIT · self-hosted

Every agent call,
cryptographically proven.

AttestProto is a per-tool-call attestation layer for AI agents. Ed25519-signed, schema-validated, and auto-mapped to the regulations your auditors actually cite.

View on GitHub →See use cases
# attestproto v0.1 — sign one tool call $ attestproto sign --agent gpt-4 --tool db.query \ --input '{"sql":"SELECT * FROM applicants"}' \ --out attestation.json # → Ed25519 signed, schema-validated, mapped to: # FCRA §1681m · ECOA Reg B §1002.9 · NYC LL144 §20-870
use cases

Built for the audiences who actually care.

Same protocol, three landing strategies. Pick yours.

why this exists

Compliance evidence shouldn't be re-built per engagement.

The status quo

Audit infrastructure is hand-rolled per engagement. 40-60% of an audit fee is engineer time on data plumbing — not the actual statistical analysis customers are paying for.

Compliance VPs at lending fintechs spend 0.5-1 FTE rebuilding adverse-action notice paperwork that should be derivable from the decision itself.

What AttestProto does

Every tool call your agent makes is canonicalised (RFC 8785 JCS), Ed25519-signed, and schema-validated. The attestation JSON is the evidence — auto-mappable to the rule citations your regulator inspects.

MIT licence. Self-hosted. No callhome. Your data never leaves your infrastructure.

Read the spec, run the demo, send a question.

v0.1 is shipping. Reference implementations in Python and Node. 162 tests. Spec under MIT.

GitHub →Email Lex