Eclusia
Freemium
Legal professionals handling confidential cases
Regulated industries get burned when an agent incident happens and the only evidence is logs you wrote yourself — logs that prove nothing to an auditor who wants tamper-evident, independently verifiable records. AGEF is an open specification that defines exactly how agent sessions get packaged into bundles an auditor, regulator, or incident responder can verify without trusting you.
The specification defines a content-addressed, Merkle-linked event structure so every decision in an agent session can be hashed, bundled, and checked offline — no live service required. The reference implementation is Akmon (v2.0.0 and later), which handles bundle export, import, and journaling via akmon-journal. AGEF is a format standard, not a deployed platform: there is no SaaS, no API, and no hosted verification service. Teams adopting it are taking on the work of building or integrating bundle-producing substrates into their existing agent infrastructure. At v0.1.1, the spec is pre-stable — conformance profiles and bundle structure are defined, but tooling outside the Akmon reference implementation is essentially absent.
Bottom line: AGEF is the right foundation if your team is building agent infrastructure in aerospace, medical devices, or financial services and needs to hand an auditor a cryptographically verifiable session record — but if you need a drop-in solution that works with your existing agent framework today, the spec will hand you a build project, not a product.
Find your fit
More options in Guardrails & Safety. Compare pricing, platforms, and features side by side.
Freemium
Legal professionals handling confidential cases
Free · Open source
AI security researchers
AGEF (Agent Governance Evidence Format) defines how an AI agent session gets serialized into a portable, tamper-evident bundle: content-addressed objects plus Merkle-linked events that can be transferred across systems, verified offline, and reviewed by independent tooling. The core workflow is that a conforming substrate records agent events during a session, exports them as an AGEF bundle (per SPEC.md Sections 5–14), and any downstream tool — an auditor’s workstation, an incident responder’s isolated environment — can import and verify the bundle without calling back to the original system.
The format’s primary differentiator is cryptographic independence. Because events are content-addressed and Merkle-linked, verification does not require the original agent system to be running or trusted. An auditor can replay the session deterministically against the recorded tools and providers, which is exactly what SOC 2, FDA, SEC, and similar regulatory frameworks require when they ask you to prove what your agent did and that the record was not altered after the fact.
AGEF fits teams who own their agent infrastructure and are willing to build conforming bundle producers. The spec defines two conformance profiles — Bundle Profile (producing and consuming bundles) and Substrate Profile (maintaining the event journal) — and the only shipped reference implementation is Akmon v2.0.0 and later. Teams not running Akmon have no off-the-shelf exporter; they implement the spec themselves. At v0.1.1, this is a pre-stable format, which means the structure can change before a stable release and teams building against it should track CHANGELOG.md and SPEC.md closely.
Licensing is split: the specification text is released under CC BY 4.0 and the code under Apache-2.0, so organizations can adopt and implement the format without commercial licensing concerns. The repository includes a minimal-bundle example under the examples directory, which is the primary onboarding artifact for teams evaluating implementation scope.
Sign in to rate this tool or suggest an edit.