Skip to content
TypeScript · Next.js · Node.js · Python · SQLite

Auditant

The compliance system-of-record for AI agents

The Problem

AI agents approve loans, move money, and ship code — but no reliable record exists of what they did or why. Logs are scattered across the app, the model provider, and the framework: none built for an auditor, all mutable, and most deleted long before anyone asks. Provider audit trails purge in days while regulations demand years.

My Approach

Built a system-of-record that streams every agent action into a tamper-evident, hash-chained log, evaluates each action against policy before it executes, and exports evidence bundles a regulator can verify offline — without an account, without the vendor. Events from all four planes (application, model provider, framework, infrastructure) normalize into one auditable schema.

Technical Challenges
01

Tamper evidence that holds up — hash-chained records with verification tooling that catches a single flipped byte anywhere in the chain

02

Policy checks in the hot path — evaluating every action before execution without adding meaningful latency to the agent loop

03

Offline verification with zero vendor dependency — an auditor who has never heard of the product can validate an evidence bundle

04

Normalizing four different event planes (app, provider, framework, infra) into one schema an auditor can actually read

Results
168
Tests
4
Event Planes
Offline
Verification
Hash-chained
Log Integrity
Tech Stack
TypeScriptNext.jsNode.jsPythonSQLite

Like what you see? I build websites and AI integrations through my agency.

Book a Free Consultation →