One broken byte, one broken check.
The trust chain, in plain terms.
Each change the AI makes is turned into a diff. The diff is hashed. That hash, plus a fixed set of the event's core fields, is chained to the previous event and hashed again — so the events are linked in order. That combined hash is then signed with the agent's private key, which never leaves the machine. Token Holder holds the registration of the matching public key and can attest to it.
Tamper anywhere — the diff, a field, a link, a signature — and exactly one check breaks. The verifier tells you which.
The 14-field signed core
Live todayEvents are chained over a canonical 14-field core and signed with Ed25519; the deployed chain is the source of truth for the format.
The verifiability claim is always one click from a way to check it — no account, no trust required.