A log nobody can quietly change.

Every action is fixed in place, and anyone can recheck afterwards that nothing was altered.

In plain words

Everything that happens — a document added, a question asked, something erased — is written down as a line. Those lines are attached to each other, so nobody can later remove or alter one unnoticed.

An auditor, a regulator or a court can recheck that themselves, without needing us for it.

How the lines hold together

This page is about proof. Let me walk you through it.

Guide figure pointing at the answer in the scene

Change anything — the math tells on you.

  • Room for your own judgementPlannedwhen you overrule the AI, that goes into the log
  • Separate checking app for othersPlannedchecking currently needs our software
  • The boundary is written downBuiltshared with design partners
  • Every action goes into the logBuiltlines can only be added, each attached to the last
  • One check number over the whole logBuiltcutting the end off also shows — as long as you keep that number outside the system too
  • Your own keysPlannedwe do not hold your keys, but you cannot rotate them yet
  • Every question traceableBuiltthe log records which question was asked, how it was searched and how many results came back
  • Why this result came upBuiltwhich search path, which score, which correction counted — and how certain the result is
  • Recheck it yourself (verify())Builtshows whether anything was edited, inserted or deleted
  • Digital signatureBuilta third party can check it
Try it yourself

Everything below runs in your browser. Nothing is sent.

Try it yourself

Change a line, then run the check.

  1. 1
    Actionengagement opened
    prev—hash—
  2. 2
    Actiondocument ingested
    prev—hash—
  3. 3
    Actionanswer cited
    prev—hash—
  4. 4
    Actionsubject erased
    prev—hash—
  5. 5
    Actionexport signed
    prev—hash—

Chain not yet verified.

Everything is calculated in your own browser. No line leaves this page.

Removing personal details

Mask a sentence before it reaches a model.

What the model sees

Names are matched heuristically. Best-effort by design — we publish the known gaps rather than claim perfection.

Evidence you can download

The shape of what you get back.

Signed exportone bundle per person, digitally signed
Erasure receiptproof the key is gone
Audit eventone link in the chain
Example structure. The signature shown is illustrative, not a live signature.




Shape v1.0 with us.
Become a design partner