Standards and open source
What ActaSeal's records are built to be checked against, and where the open-source checker lives.
Two things that do not depend on trusting us
Your proof still verifies if we disappear. The verifier is open source under the Apache License 2.0 and makes no network call. A receipt, the slice of the ledger it came from and the public key are all it needs.
Records live outside the agent, so a compromised agent cannot rewrite them. The ledger belongs to the gateway, a separate service from your agent. The agent can ask for a decision; it cannot write the record, and every entry is hash-chained to the one before, so an edit after the fact breaks the chain. The gateway decides about the actions it is asked about -- what ActaSeal is not says where that stops.
Every claim on this page links to something that exists
- Public offline verifier -- verify.actaseal.com
- actaseal-verify v0.1.0 release
- Conformance vectors (public repo, signed/tampered/checkpoint cases)
- IETF draft-xg-payment-dispute-profile -- card-scheme dispute evidence profile
- Zenodo archive of the public verifier -- concept DOI 10.5281/zenodo.23309307, always the latest version
- Conformance suites that pass but do not pin -- preprint on mutation testing of agent receipt verifiers, DOI 10.5281/zenodo.23610510
pip install actaseal-verify-- the offline verifier on PyPI- SCITT architecture issue #461 -- evidence-binding trust-boundary finding filed by ActaSeal
- SCITT architecture issue #462 (opened by maxchop) -- ActaSeal contributed the verification-result requirements and an implementation entry
- SCITT architecture PR #463 -- Receipt Profile requirements for verification results, plus an Implementation Status section
- Independent implementations: x402 acceptance-record checker -- a second implementation, written independently, of the acceptance-record conditions in x402-foundation/tsc#4; it agrees with all 50 vectors of the upstream corpus at upstream commit 6e487f0
- Legal Context Protocol PR #4 -- the terms-binding profile itself, open for review
- agentic-resolution-interop PR #22 -- a real ActaSeal receipt submitted as a conformance evidence item
Records that have to be provably unaltered
The same signed, independently checkable record is used where a file must be shown not to have changed after a date: audit workpaper archives under PCAOB AS 1215, and records under legal hold, with an FRE 902(13)/(14) certification package for records produced by an electronic process.
These are the standards ActaSeal's exports are built to address. ActaSeal is not certified under any of them; certification, where applicable, is the customer's own process. What ActaSeal is not.
Open where it has to be
The verifier and the evidence pack format are free and open under the Apache License 2.0, so anyone can check what you produce without asking us. The product is licensed. Request a licence