SENTINEL
Verify a run Start building
Accountability infrastructure for teams & AI agents

Prove what happened.
Don't just claim it.

Sentinel turns every consequential action — a claim, a payment, a deploy, an admin change — into a tamper-evident receipt on a hash-chain. Anyone can verify it. No one can quietly edit it.

Hash-chained  ·  tamper-evident  ·  on-chain anchor-ready  ·  consent-gated

Verify it, or build with it.

You don't need an account to check a receipt — verification is public by design. If you build products, wiring Sentinel in takes minutes.

For users & auditors

Verify a run — keyless

Paste a run id and get a clear verdict: PASS, or the exact receipt where integrity broke. Hand the same link to any partner or regulator.

  • No account, no key — public verification
  • Three states: verified · broken (with the seq) · unverifiable
  • Export an evidence pack for an auditor
For developers

Seal actions in minutes

One key, one seal() call at each action boundary — humans and agents through the same pipe. No wallet, chain, or gas to manage.

  • JS & Python SDK — identical calls
  • Mint your own key in the console; revoke anytime
  • Metadata only — never your content

Identity → Action → Receipt → Verify → Evidence.

Plug it in once. Every consequential action seals itself into the ledger the moment it happens — no new habits to learn.

01

Identity

Your service, agent, or MatchID acts under a known operator — no re-issued identity.

02

Action

A claim, payout, deploy, or admin change happens — the moment worth proving.

03

Receipt

The action seals into a hash-chained receipt: who, what, on what, result.

04

Verify

Anyone re-checks the chain keyless. Alter one past entry and every later link breaks.

05

Evidence

Generate an audit-ready evidence pack from the same chain when a partner asks.

We sell verifiable truth, not access to your data.

Metadata only

Receipts hold hashes and metadata — never content, secrets, or PII. The proof travels; the payload never leaves you.

Keyless verification

Anyone can verify a run without an account or our permission — including a regulator, at zero cost. Integrity you don't have to trust us for.

Consent-gated reads

Reputation is aggregate-only and consent-gated by architecture. No tier, anywhere, unmasks an individual.