szl.dev/GovernedAction/v1 · ed25519 over dsse

Control before action. Evidence after.

Every receipt on this page verifies in your browser, right now, with WebCrypto Ed25519 over DSSE pre-authentication encoding. No server decides anything here.

IAM says what an identity may access. a11oy proves what an AI agent was authorized to do, what it actually did, and whether the required evidence exists. A signature attests integrity and origin — never accuracy or performance.

loading demo bundle…

The governed action, in six checks

bundle not yet loaded

02 Signed execution — human-approved, reversible change —

05 Signed denial — agent attempted irreversible action, blocked —

06 Tamper test — one field altered after signing —

07 Evidence cut — honestly signed, one evidence item missing —

11 Identity spoof — service account claiming a human principal —

09 Replay — re-verify the chain; nothing may change —

PASS: signature valid, evidence complete, time attested INCOMPLETE: honestly signed, evidence missing — never PASS FAIL: signature broken, chain broken, or human-principal spoof

Article 12 logging conformance profile

Regulation (EU) 2024/1689, Article 12 — machine-readable at article12/conformance_profile.yaml. This is a logging conformance profile, not a claim of EU AI Act compliance; applicability, classification, and deployer obligations remain customer-specific. Retention floor: 180 days.

ART12-1 · AUTOMATIC LOGS

Events recorded over the system lifetime.

$.predicate.timestamps.created — receipt emitted at decision time.

MET

ART12-2 · TRACEABILITY

Input data and sources referenced.

Evidence items are sha256-addressed; absence ⇒ INCOMPLETE.

MET

ART12-3 · HUMAN PRINCIPAL

Natural persons involved in verification identified (12(3)(d) via Art.14).

is_service_account pinned false for human actors; api_key cannot claim human.

MET

ART12-4 · PERIOD OF USE

Start and end of each use recorded.

executed ≥ created; ntp_synced const true; rfc3161 for anti-backdating.

MET

ART12-5 · TAMPER PROTECTION

Logs protected against alteration.

Ed25519 over DSSEv1 PAE; prev_chain_hash links every receipt.

MET

ART12-6 · RETENTION

Retained per policy, six-month floor.

PENDING_SYNC is a visible state during outage; local durability after flock+fsync only.

MET

ART12-7 · AUDITOR ACCESS

Logs accessible to authorities and auditors on request.

The bundle verifies offline, without entering the platform. This page is the proof.

MET

ART12-8 · REVISION RECORD

System version in use is recorded.

deployed_revision pinned at execution; runtime stage is never evidence of revision.

MET

KNOWN GAPS — DISCLOSED, NOT HIDDEN

GAP-01 — rfc3161 trusted-timestamp issuance requires a TSA integration; demo attests local ntp_synced only.
GAP-02 — Retention here is a policy floor; the WORM retention tier is a control-plane feature.

Laws enforced in code, not prose

L1

Missing evidence yields INCOMPLETE, never PASS — computed in the verifier, on every run, in both Python and this page.

L2

A signature attests integrity and origin, never accuracy or performance.

L3

Human principals cannot be service accounts; api_key cannot claim a human (Art.12(3)(d)).

L4

ntp_synced is a schema constant; unattested time cannot produce PASS.

L5

Local durability is acknowledged only after flock + fsync. PENDING_SYNC stays visible during sink outage.

L6

Replay is non-mutating: verification never changes the chain.