Audit · Policy · Spend — for AI agents

Prove what your
agents actually did.

Every action recorded in a log nobody can quietly edit. Checked against your policy before it happens. Verified by your auditor, offline, without asking us.

auditant verify ——offlinetenant_acme / prod
  1. 4179decision credit_score 612a91f3c
  2. 4180tool_call pull_credit_file7d20be
  3. 4181decision adverse — DTI 51%3fe8a2
  4. 4182tool_call wire_transfer $50,000bb1074
  5. 4183human_override approved · priya@lender.ioc40d19
Verified — chain intact, checkpoint countersigned

Every five minutes the chain head is signed and countersigned by an independent timestamp authority.Two lines to install · Read-only until you turn on enforcement

Try it

Go on — alter the record.

Change the amount on that wire transfer, the way someone would if they wanted the payment to look approved for less than it was.

Every row carries the hash of the row above it, so editing one field breaks every link beneath it. There is nowhere to put the change that does not show.

auditant verify ./evidence.json ——offlinetenant_acme / prod
  1. 4180tool_call pull_credit_file7d20be41
  2. 4181decision adverse — DTI 51%3fe8a2c7
  3. 4182tool_call wire_transfer $50,000bb1074a2
  4. 4183human_override approved · priya@lender.ioc40d19f8
✓ VERIFIED — chain intact, checkpoint countersigned

4 events · anchored through 4183 · countersigned by a timestamp authority

Why your existing logs can't answer it

The evidence expires before the question arrives.

Every system in the path keeps logs for engineering reasons — debugging, billing, capacity. None keeps them for legal ones.

How long it survivesWhat you'll be asked for
  • GitHub audit log — git events7 days
  • Terraform Cloud audit trails14 days
  • Observability vendors, typical max90 days
  • EU AI Act, Article 196 months
  • Colorado SB 26-1893 years
  • Financial books-and-recordsyears

The shortest-lived log in the stack expires roughly seventy times sooner than the shortest obligation it is meant to satisfy.

Why now

The rules already arrived.

  • EU AI Act Article 50 — transparencyin force
  • Supervision and recordkeeping dutiesin force
  • Colorado SB 26-189 — 3-year records1 Jan 2027
  • EU AI Act Article 12 — high-risk logging2 Dec 2027
Still deciding

Ask it anything. It will admit what it doesn't know.

It is briefed on what this product does and, more usefully, on what it does not: no certifications, no published per-action rate, and no claim to block a cloud API it only records.

Nothing you type is stored. If you want a person instead, email augusta@4ugusta.agency.

Ask Auditant
Nothing is stored. It will tell you when it doesn't know.

Ask anything about how the record works, what it proves, or what it doesn't. It will tell you when it doesn't know.